last executing test programs: 8m57.651996163s ago: executing program 32 (id=46): perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xa, 0x987d0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0xc}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r0, &(0x7f0000000000)="240020001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 6m42.885711654s ago: executing program 33 (id=1882): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00001b0000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000b00008500004455596b0095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x17, 0x0, 0x4, 0x3, 0x2022, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) close(r5) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r6}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r10, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 5m58.924760232s ago: executing program 34 (id=2382): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@empty}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100000000000200000000000000", @ANYRES32=r5, @ANYBLOB="408f01000a2002002000a3e6acd5843fdc0212fe2c580b420012800e0001006970366772657461700000000c000280060010004e240000"], 0x40}}, 0x0) 5m11.191702997s ago: executing program 35 (id=2482): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) close_range(r2, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x30, r5, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0xffffffff, 0x75}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x30}}, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000340)=@framed={{}, [@tail_call]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m43.212569596s ago: executing program 0 (id=2545): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}]}}]}, 0x3c}}, 0x400c084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/185], 0x138) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x175d9003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x0, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) tkill(r2, 0x7) 4m42.9593269s ago: executing program 0 (id=2546): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x7, 0xc, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d901000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ecffffff00"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000940), 0x2, 0x5b3, &(0x7f0000000cc0)="$eJzs3c9vVEUcAPDve90WStVWYhQ8mEZDIFFaWsDgjwPcCcEfNy9WWgiy/Ait0aKJJcGLifHigcSTB/G/UKJXTyYePHjxZEjQGC4ao2ve9u2ytLvttnR5te/zSbY782Z3Zx7025l9M7MbQGmNZj/SiN0RcSmJGG4pq0ReOLr4uDt/fHAquyVRq732exJJfqzx+CS/H8qf/M9wxA/fJrGzb3m9s/NXzk1VqzOX8/z43PlL47PzV/afPT91ZubMzIXJ5yePHD50+MjEgfs6v7Qlffza2+8Of3zijS8//zuZ+OrnE0kcjd9OL5a1nsdGGY3R+LNW+3Dp8ezf9chGV1aQvubvyV3J0gNsWpU8RgYi4okYjr6W/83h+OiVQhsH9FQtiagBJZWIfyipxjig8d6+u/fBaY9HJcCDcPtY9rO/TfxXFq8Nxkj0R8SeJc9rc0lvXbI6vv/uxLXsFj26Dge0t3B1W55aGv9JPTZHYns9t+NOes913mwEcDK/z46/uo66k8b8QwvxDw/OwtWI2NVu/L96/L/ZEv9vrbN+8Q8AAAAAAAAb5+axiHiu3fxfms/NbY+n6/N/yeL83493dwge3YD6V5//S29tQDVAG7ePRbzcdv1vc43vSF+ee3hxNWBy+mx15kBEPBIR+6J/W5afWP7SuxqJ/Z/svN6p/tb1f9ktq7+xFjBvx63KtnufMz01N3W/5w1E3L4a8WSl8/qfrP9PWvv/XPb34FKXdezcc+Nkp7LV4x/oldoXEXvb9v9J8zHJyp/PMV4fD4w3RgXLPfX+p193ql/8Q3Gy/n/HyvE/krR+Xs/s2l5/ICIOzldqncrXO/4fSF7va7x+5r2pubnLExEDyfHlxyfX1mbYqhrx0IiXLP73PbPy9b/m+L8lDgcjYqHLOh//d+iXTmX6fyhOFv/Ta+r/156YvDHyTaf6u+v/D9X79H35Edf/YGXdBmjR7QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/6M0Ih6KJB1rptN0bCxiKCIeix1p9eLs3LOnL75zYTorq3//f9r4pt/hxXzS+P7/kZb85JL8wYh4NCI+6xus58dOXaxOF33yAAAAAAAAAAAAAAAAAAAAsEkMddj/n/m1r+jWAT1Xye/FO5RPpegGAIUR/1Be4h/KS/xDeYl/KK91xr/pAtgC9P9QVv3dPWx7r9sBFEH/DwAAAAAAW8rNl164nkTEwouD9VtmIC9rTgwOFtU6oJfSohsAFMYaXigvS3+gvLpb/FvreTuA4iTN1F9tg73z6v+kNw0CAAAAAAAAAAAAAJbZu/vmT6vu/we2JPv/obzs/4fysv8fyst7fGC1Xfz2/wMAAAAAAAAAAABA8Wbnr5ybqlZnLktIbLZEf0RsgmYUkBgoPjwL/sMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0/RcAAP//v3ImFQ==") mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000001fc0)=0xe8) fstat(r3, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', r5, r6, 0x1000) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)={0x20, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}}, 0x20}}, 0x4000054) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES8, @ANYRESHEX], 0x2, 0x69e, &(0x7f00000017c0)="$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") r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000010380d440bf3cfeaf562f87aca7e7c01e6b3f2d23a762e2d032c197a803218eb49dac98e747cdc24899d57db60e4079daec92e383069b661532791eb31c11b193add785ff7989e25ffbb732e43f9d20f212bc378800811f2d7d3c12c0bb0690450ad63e62cf4b2f4c2b81f88b96c8c3406b8aeb14861173ca87be428982503ed25ae4f2d42a67a1616b06f4237b42ea8397239bfddaa0a4b94068c8f7fe9cbbb886f4cdaeeefe8b8419ea6366ccc71dae14dfdbbcb06255f9dae1a24ad311dd67cc01c57d36f57790ccae2ca8141df34a8a642bb68c9d740982e96fc200a9c3c312dc647a043be2879aabc6f50cfe93f46124a4999c8ebd3290b6751f3f29bf0e5975e113621ebc0040b1ee805e79fb825d6b46a88c386095cd38716b0f8684b9ee4e43b97385f26aa95162eebe791fe79"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 4m38.648093484s ago: executing program 0 (id=2554): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1cc05}]}}]}, 0x3c}}, 0x400c084) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/185], 0x138) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x175d9003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0xe, 0x52}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x1, 'client1\x00', 0x0, "81cbf3dc07ade253", "c2382b4c6bb074dcb971c144adc7e6576c93d30263c40dbdd1b75d7917ca30cb", 0x5, 0x800}) tkill(r2, 0x7) 4m38.089789603s ago: executing program 0 (id=2556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601e5ff00000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, 0x0, 0x79) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x3}, 0x6) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) 4m23.028235848s ago: executing program 36 (id=2556): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601e5ff00000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, 0x0, 0x79) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x3}, 0x6) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) 1m24.692947462s ago: executing program 1 (id=5004): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYRESOCT=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc814}, 0x4000914) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r2 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000001fc0)=0xe8) fstat(r3, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', r5, r6, 0x1000) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)={0x20, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}}, 0x20}}, 0x4000054) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x69e, &(0x7f00000017c0)="$eJzs3VtrG+kdx/HfyLKteEtY2hJCyOFJ0gWHpspI3jiIFLrT0cieVtKIGbnYUFjSjb2EyNk2SaHxzdY3PcD2DfSuN73oiyj0et9Fb0oLS3tX6I3KHHSKTnGiOLub70fsavTMf+b5z4wyf8bSPBIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDlVm27ZKnuN3d2zXRuNQwaM+ana1vWjXTixtx+JSv+T4WCzqdN5789mH0u/t81XUxfXVQhfiro6J1z7979Vj7XW35GQi9DJ13hk2dHD+91OvuPXyB2SSde/ZukXG/qTHZMJgRteU0/CvyGs+UZPwpMZXPTvrVdi0zNr3vRXtT2GsYNvVw7CM26e8OUKpUN4xX3gp3mVtWpe73GO98r2/am+dFqeqAlFSN326/X/eZWEhPPjmPumM9+mgZ4TsOYgwed/Y15WxIHlV4kqDwvqGyXy6VSuVzavF25fce282MNdsyy+zQWsfA3Lb5iFnPiBhYgF9f/v1tSXQU1taNdmYkPV1WFCtSYMj/Tq//v3fJm9jtc/3tV/rz0g2z2BSX1/3L66vK0+v9cDqvZ0kamkD2PPawp7S/wsAbTy0lGRk/0TEd6qHvqqKN9PX7ZdY8+rixkLafw2JKnpnxFCuSrISdpMVmLUUWb2pStD7WtmiIZ1eSrLk+R9hSpLS95R7kK5clRW4FCGa3L1Q0ZlVRRRRsy8lTUngLtqKktVeXov91u90APkv2+MSNH9YJKUwJWh4PKM9Y0rf7/7NP0fZfVf5v6/7ZK3wfZeejzWTHAl0A3u/4flpu/2JXXlxEAAAAAAFg0K/nru5V8dn9JUlc1v+7ZbzotAAAAAACwQJa6q7ooK77+l3RJFtf/AAAAAAB83VjJPXaWpLXkS/3W4E6oF/kjwNIppAgAAAAAAF5Rcuf/5RWpmwxacUXWia7/AQAAAADAV8DvhsbYz/fG2O32PtbPSYpaq9Zf/72qcNk6bu1+xzp0pGU5h1nM2DcA2rUL1tlsoN7kaUVS8sr1LlpZb9kgmP1xB784mDfWvxUOJyA5K0vDK5iSgBX3vJnPXukzXU0XuZqNM3//KKdkTtrLWs2ve0U3qN8tyXHO5trebvuXjx78Sgr723nwoLNf/OiTzv0kl+O46fgwXumnI+nkJu+MQS5Pk/EWknsuJm3xGdV6Xf6+2Vizkn7t3vYvyTnMDXc06wAM+vyNrqXH7NpaGrt21B9xP97+Qrz9pWJyyEa2Ply2BlmUnt/ySQdiShaFJIvracz19esq/yOd7h+FnFX47pJULo4fg5EsysNZzN8X1n/G9sVQFslTb87QvtiIs/hbvKIpWWycLIuxIwIAb8qBLik5C11SMoh5vwoVsrrbKw+9k9pL1Z351f2D0er+9I/dbrLAkpTPPpuY2UtB8Rl93Urq0Eq6SfkLE87odlZXCppyRrdfobrFff1l8BtIWdpjWfyv2+3eLSX9/uG5qvqnke7G+o3q5aV4F956evjzZAD82Mf7H+8/Kpc3Nu33bft2WcvJZmRPS6L2AADGzP+NnbkR1vu6mkZcvf+v99KpkYr3zf5XCor6SJ+oo/u62fsJgSuT17o29DWEm+lVq4auWs25d+8mv0s3GlvSzalXdUktHYot92OX1VtktFIPYjde81EAAOB0XZtThyfX/8JI/b+p9TRi/cLE6+7RWp5dHfcv6afFluYn/8Gi9wYAAG8HL/zCWmv/1gpDv/VhqVIpOe1tz4SB+2MT+tUtz/jNthe6205zyzOtMGgHblA3rVCrftWLTLTTagVh29SC0LSCyN9NfvndZD/9HnkNp9n23ahV95zIM27QbDtu21T9yDWtnR/W/WjbC5OFo5bn+jXfddp+0DRRsBO6XtGYyPOGAv2q12z7NT+ebJpW6DeccM/8JKjvNDxT9SI39FvtIF1hry+/WQvCRrLaYr476fsCAAC8dZ48O3p4r9PZf/z8xJn40jxtOdaUmPGJFT15Fl+Vxy35bBZjBAEA8CUzKOAnWKjwGhMCAAAAAAAAAAAAAAAAAAAAAABj5t/Sd8KJ5Uk3C0r9ll+czVr0aw1uMRxbj6VFJ3aSidxJl+rdEnH08PMZwWf6Lb3dPxxzfGob+M9vSO8kLUpb8ovv68yMg/s6Jr5/kO7RqTHxzImzVvvHIr/4fw7xxKM/T5nV7Xa7sxdfHd2HK7M2cHQiL+nxyiscgtM/FwE4Xf8PAAD//77nMyc=") r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000000010380d440bf3cfeaf562f87aca7e7c01e6b3f2d23a762e2d032c197a803218eb49dac98e747cdc24899d57db60e4079daec92e383069b661532791eb31c11b193add785ff7989e25ffbb732e43f9d20f212bc378800811f2d7d3c12c0bb0690450ad63e62cf4b2f4c2b81f88b96c8c3406b8aeb14861173ca87be428982503ed25ae4f2d42a67a1616b06f4237b42ea8397239bfddaa0a4b94068c8f7fe9cbbb886f4cdaeeefe8b8419ea6366ccc71dae14dfdbbcb06255f9dae1a24ad311dd67cc01c57d36f57790ccae2ca8141df34a8a642bb68c9d740982e96fc200a9c3c312dc647a043be2879aabc6f50cfe93f46124a4999c8ebd3290b6751f3f29bf0e5975e113621ebc0040b1ee805e79fb825d6b46a88c386095cd38716b0f8684b9ee4e43b97385f26aa95162eebe791fe79"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) 1m24.504627365s ago: executing program 1 (id=5009): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0xad44, @local, 0x7}}, 0x8, 0xcc7}, &(0x7f0000000040)=0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.503717215s ago: executing program 1 (id=5010): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1588], 0x634) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, 0x0, 0x80) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) timer_gettime(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$KDSETLED(r1, 0x4b32, 0x4) 1m24.205681099s ago: executing program 1 (id=5011): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001c80), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000000)=@in={0x2, 0x4e21, @private=0xa010102}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)="f47ddf8b1e65ecbcaed0d3de5648ff8f501253cb4b1d7e5d570230595b8eb25d7773af7001c88414809af0dc575ae57dd71d9abd0ce88e9c180cc5445700bed7d960270543dbd5946169c880c791522042d687f0a193ad8b38d7564aed366bc97bcd032a3860a34a45c3b179eaa03db0206c68d11e974595ad8105c5caa26f21ecf339f181c2e915add621f1f5f3fc6a184ccf30f4d8ced731cc9e1f23171fe53a52a897101f1b56026aa83fbaa455", 0xaf}, {&(0x7f0000000140)="4847407f7829989baed3a618e978d1da6d9fb693ee568dc3cab0e43493f26d65417343bfd3842ebf913f6244fd8a85aa7f5ae4b3a026ebaceed91c8401b6f917ca511a24d339e39914c00afac88ea00662cfee8347e607bdb21c289f05182ae32cd8f0b6fb9d8dcd2b28a9a4b03459fcdb33bb131f534f74d1ba04b869043ad7a2706f63d052578b6f4c5c2385871566c733704e7ac12d448c1e6c304196c0c009f9ddda7d2b1ba7325ec5602a0d873a512d846bb4dfd114074c7cd67d42cac290208808fa8fd637ecbc3dc405c88b8619c3f3e6b801aa58e3f577879ff4fbf15ce06ea4bc6f05912ef382981adf", 0xee}, {&(0x7f0000000240)="f6c2c88204a7320290474371272b67cd0157d3f150ec1d87118b0cea364fe74e0f7aa27c0a54e52b649a26b58b35d59ebccdc7c2a94388", 0x37}, {&(0x7f0000000280)="cbedfd89df2b41b221160862c2ad3ca3c22f822e2844c0f26d9f915eb949c84d190072a726ead55931f3c8ec78951fdb1d524ee39a72f3368d5d0144b276d285d413d087d6782cffd19491203ea06bbd0a028fa19081a108dad646c84bdbcb4fea637384b409b6218443cc0a73ef741c6083ad2286e0b26ec858ac5ad90fd4dbeee03514a04c275eca972cfbee8689a7c4f07a20", 0x94}, {&(0x7f0000000340)="4a02c80ce2026e63db2e34f4b67a3291e80d1c7a29c71444162342dce6264325ac8182d00d709d3bf6365f785522f7a0bb43381dd9cd12f685d4b95db5e94dd9897054bbdcfd7df0c7b30cecf42e920561fa1e36139d9771b1c8bc0aa3b7b86ca7bf372a8c59abf5060a48a17f6fc6207fb7dd707f647a474c91350549590f201981f848d501e1d053c2a869d5d7c055df0dc3a2fc06f9046ca3130c", 0x9c}, {&(0x7f0000000400)="2a54d15a8c649a4b3c37c5952428513a298624e4eac50e625b0618c68136c84abbebd256c251b27d02afbb95873a21ea6555a801c2f3b724f85050a15c8a4f0523daf5bd26661e34fa6fe5ef23b48556ce35b5ae606a0cf53774e1070a1941783ddd5a6824f92717302d57f949", 0x6d}], 0x6}}], 0x1, 0x41) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f00000022c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x854) 1m24.089610181s ago: executing program 1 (id=5013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 1m23.913564134s ago: executing program 1 (id=5017): syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') lseek(r2, 0x10001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bind$packet(r2, &(0x7f0000000380)={0x11, 0x491392f19d235a36, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1m23.913187934s ago: executing program 37 (id=5017): syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') lseek(r2, 0x10001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bind$packet(r2, &(0x7f0000000380)={0x11, 0x491392f19d235a36, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1m13.228218714s ago: executing program 2 (id=5219): socket$packet(0x11, 0xa, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x12, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x42, 0x42, "f3", "f4"}}}}}, 0x0) 1m13.161561425s ago: executing program 2 (id=5220): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) eventfd2(0x9, 0x80000) (async) eventfd2(0x9, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003d80)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) setfsgid(0xee00) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000800000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b000100657874686472000014000280080007400000000c080006400000001b"], 0x7c}}, 0x200000a4) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000800000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b000100657874686472000014000280080007400000000c080006400000001b"], 0x7c}}, 0x200000a4) r5 = getpgrp(r2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r9 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r11, &(0x7f00000000c0), &(0x7f0000000000)='system_u:object_r:memory_device_t:s0\x00', 0x25, 0x0) syz_clone3(&(0x7f00000005c0)={0x100, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240), {0x15}, &(0x7f0000000380)=""/94, 0x5e, &(0x7f0000000280), &(0x7f0000000580)=[r2, r5, r2], 0x3, {r11}}, 0x58) gettid() 1m13.132003615s ago: executing program 2 (id=5223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 1m13.065525756s ago: executing program 2 (id=5226): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, {0x1, 0x2, 0xfb}}, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m12.421471676s ago: executing program 2 (id=5238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), 0x14042, &(0x7f0000000500)={[{@name={'name', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {@noprefix}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1m12.080534961s ago: executing program 2 (id=5248): syz_emit_ethernet(0x83, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/48, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m12.080000661s ago: executing program 38 (id=5248): syz_emit_ethernet(0x83, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/48, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m5.981162212s ago: executing program 5 (id=5336): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0xd, 0x3, 0x1, 0x7f, 0x401, 0x3, 0x3, 0x6, 0x1e1, 0x40, 0x1a8, 0x1, 0x8, 0x38, 0x4, 0x5, 0x4, 0x2}, [{0x6474e551, 0x8, 0x4, 0x3, 0x2f, 0x8, 0x50, 0x3}, {0x60000000, 0x6, 0x1, 0xb, 0x26e, 0xd, 0x1, 0x5}, {0x6, 0xa, 0xe7e1, 0x6, 0x8000, 0x1f886686, 0x0, 0x3}, {0x3, 0x7, 0x3, 0xfe, 0xfffffffffffffff8, 0x8, 0x6599c435, 0x9923}], "98b838eaa27abb21e018df2f07a7f64c1b3c5a09f5e70a73693cdc05dd0546ccf787d2b1e449b7e5c48637189ddeb179f554a45aea520261", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x858) 1m5.858947734s ago: executing program 5 (id=5339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0xffff7fff, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = inotify_init1(0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000600)={[0xffffffffffff7ffa]}, 0x0, 0x0, 0x8) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0x86000809) rmdir(&(0x7f0000001c00)='./control\x00') recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) truncate(&(0x7f0000000040)='./file0\x00', 0x9) 1m4.958309968s ago: executing program 5 (id=5348): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x11, 0x10, 0x0, 0xffffffffffffff4c}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x80, 0x7, 0x62a, 0x4, {{0x29, 0x4, 0x1, 0x12, 0xa4, 0x64, 0x0, 0x89, 0x2f, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x12, "75cef2b632989609719d0a2a8b253e00"}, @ssrr={0x89, 0xf, 0xef, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x24, 0xc9, 0x0, 0x6, [0x6, 0x6, 0x7, 0x4, 0xa, 0x6, 0x6, 0x26b5]}, @timestamp_prespec={0x44, 0x44, 0x82, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xffff8000}, {@rand_addr=0x64010102, 0x5}, {@empty, 0xfff}, {@loopback, 0x6}, {@multicast2, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x5}, {@empty, 0x6d}]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r8, 0x5437, 0x300) r9 = dup2(r5, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r10, @ANYRESOCT=r10, @ANYRES64=r10], 0x48) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000000000000000008001e0040000000", 0x24) getsockname$packet(r12, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000050000000000000001000000a0d6ff0701000000852000000500000018010019645c7df149c73508230606b2002020702500000000002020207b1af8ff00000000bfa100000008000007010800f8ffffffb702000008e10000b7030000c40a000085002226cd0a000018170008c6c75579b925b8a6f64e09b58b9669ae9e0fd6b84ad3c07fb04b10153f50d7d1702a0765ebadeafb07e5", @ANYRES32=r11, @ANYBLOB="0000000000000000950000000000000085000000a10000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xf4, &(0x7f0000000900)=""/244, 0x40f00, 0x0, '\x00', r13, @fallback=0x29, r14, 0x8, &(0x7f0000000a00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, &(0x7f0000000a40)=[r11, r11, r11, r11, r11, 0xffffffffffffffff, r11, r11, r11], 0x0, 0x10, 0x3}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fddbdf25100000001c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08f61600", @ANYRES32=r15, @ANYBLOB="08000700fcffffff08000600050000002000018008000300000000001400020068737230000000000000000000000000080008000900000008000800000800000800060006000000"], 0x78}, 0x1, 0x0, 0x0, 0x4008081}, 0x800) recvmmsg(r2, 0x0, 0x0, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) 1m4.690229191s ago: executing program 5 (id=5356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x80, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r1, 0x624, 0x7a94, 0x49, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="00001c0000000000b70300000040000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xffffffffffffff10, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@multicast1, @local, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f00000002c0)={&(0x7f0000001f00)=@newtaction={0x3fdc, 0x30, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{0x3aa4, 0x1, [@m_mpls={0xcc, 0x2, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x401, 0x0, 0xa08}, 0x4}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0xc}, @TCA_MPLS_LABEL={0x8, 0x5, 0xe80a}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x81}]}, {0x53, 0x6, "6bf5dc425ed254e8cfa5cff1a6c1882bbbdaf4f10d21ada1d7b8caf90cba262a6324decf15f8d7bea74bd12b5f98562f48ab0d58320cd13e17cb46143d86da7f090e9bf7601af3af227fb651e3f5f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0xdc, 0x15, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x6, 0xeb, 0x400}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x3, 0x8, 0x80000001}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfe20620e, 0x0, 0x5, 0x2, 0x2000}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x4, 0xfffffff0, 0x80}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x20000000, 0x9, 0x3}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x20000000, 0x32, 0x8001}, 0x19}}]}, {0x8, 0x6, "9f5e62fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0xd4, 0x4, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfff, 0x8, 0x1000000a, 0xc84, 0x9}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x10}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8d, 0x3, 0x8, 0x5, 0x141f}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0x2}}]}, {0x57, 0x6, "31dd771863da64dc67ee4bb34ba91b77c279e62a23f1cb8831caa3ea18329a1b594f006867637f4424af6cbfcdfb66d900dad91863fd8aeda91e401ee9369c7027bcec1d11326eb8686714f1f64520ea262aeb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x3644, 0x11, 0x0, 0x0, {{0xb}, {0x35a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x2, 0x5, 0x101, 0x6, 0x3, 0x4, 0x4, 0xd, 0x1, 0x2, 0x5, 0x8, 0x0, 0x2, 0x1989d810, 0x9, 0x1ff, 0x60a, 0x8, 0x3, 0x8, 0x5, 0x101, 0x5, 0x5, 0x1, 0xc5b03df, 0x6, 0x7f, 0x4, 0x8, 0x0, 0xfe5, 0x4, 0x2, 0x9, 0x7f, 0x7, 0x2, 0x8, 0x9, 0x6, 0x10001, 0x8, 0xfffffff7, 0x3, 0x2, 0x8bfa, 0x9, 0x54, 0x1, 0xa7d, 0x1, 0x80000000, 0x8, 0x6, 0x435879b3, 0x0, 0xab5, 0x0, 0x3, 0x3, 0x8, 0x7, 0xfffffffb, 0x2, 0x3892, 0x7, 0x1ece, 0x1, 0x7, 0xc, 0x2, 0x39d97add, 0x190, 0x4, 0x6, 0x3, 0x84, 0x9, 0x5, 0x9, 0x7621, 0x7, 0x2, 0x7, 0xfff, 0x5, 0x8, 0x2, 0x2, 0x3d9, 0x41ee, 0x800, 0x0, 0x9, 0xea, 0xf2, 0x9, 0x6, 0x2, 0xfc6, 0x5, 0xff, 0x2f5, 0xca, 0x99, 0x143c, 0x3, 0x1, 0x4, 0xfff, 0x7, 0x4, 0x5, 0x4, 0x8, 0x9, 0x40, 0x8, 0x2, 0x4, 0x8000, 0x6, 0x7, 0x9, 0x5, 0xfffffea4, 0xffff7339, 0x5, 0x7, 0x0, 0x65, 0x4, 0xe, 0x6, 0x4, 0xa, 0x7f, 0xf1b7, 0x6, 0x5, 0x4, 0x5, 0x1000, 0x9, 0x4ebc, 0x1, 0x72, 0x81, 0x6, 0x0, 0x8, 0x101, 0x5, 0x9e, 0x40, 0x81, 0x7fffffff, 0x3, 0x1ff, 0x80, 0x6, 0x8, 0x55e0, 0x0, 0x6, 0x77c2, 0xfffff973, 0x8, 0x100, 0x4, 0x7f, 0x7, 0x7f80000, 0x7, 0x8, 0x0, 0xf, 0x3, 0x1, 0x1000, 0x0, 0x7, 0x101, 0x25, 0x4, 0x4, 0xff, 0x1, 0x9, 0xffffa066, 0xffff, 0x80000000, 0x1, 0xf, 0x1, 0x1, 0x7, 0x6, 0x401, 0x4, 0x3, 0x0, 0x2, 0x5, 0x0, 0xd, 0xa, 0x81, 0x800000, 0x8, 0x8000, 0x80000000, 0x8000, 0x0, 0xa, 0x7, 0x7f, 0x3, 0x8, 0x5, 0x6, 0x4, 0x9, 0x5, 0x4, 0x1, 0x8cc3, 0x9, 0x6, 0x1, 0x2, 0xf191d06, 0x5f248e13, 0x4, 0x61fae17b, 0x7, 0xf69, 0x3, 0x9, 0x2, 0x3, 0x8, 0x7, 0xb, 0x5, 0x800, 0x75, 0x40, 0x0, 0x2, 0xbd, 0x9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xfb, 0x3, 0x0, 0x4, 0x7fffffff, 0x0, 0x8001, 0x236f, 0xaec0, 0x0, 0x9, 0x6, 0x7, 0x8, 0x1, 0x9, 0x1, 0x101, 0x6, 0x4, 0x2, 0x2, 0x10000, 0x9c, 0x9, 0x0, 0x7, 0x9, 0xa41d, 0x5, 0x5, 0xa27f, 0x5b8, 0x8001, 0x400, 0x73a9, 0xc963, 0x7fffffff, 0x5, 0x6, 0x4, 0x1, 0xb, 0x2, 0x42, 0xa, 0x80, 0x7, 0x37b, 0x80000001, 0x7, 0x1, 0x7, 0x16d5bea2, 0x3fa00000, 0xffffffff, 0xfff, 0x10000, 0x8, 0x2, 0x1000, 0x2, 0x3, 0xa, 0x0, 0xe9, 0x3, 0x8, 0x2, 0x1978, 0x8, 0xefb9, 0x2, 0x80, 0x1, 0x6, 0x5, 0x8, 0x8f, 0x22f, 0x4, 0x8, 0x8, 0x80000000, 0x1, 0xfffffffd, 0x8, 0xfffffffc, 0x4, 0x7, 0x538, 0x2, 0x9, 0xfffffffb, 0x5, 0x7, 0xfffffffe, 0x2, 0x7, 0x0, 0x1, 0x3, 0xfff, 0x9, 0x200, 0x95, 0xd71c, 0x52, 0xfffff001, 0x6, 0x4, 0x9, 0xaeae, 0x8, 0x5, 0xa37, 0xe, 0x6, 0x800, 0x4, 0x7fff, 0x0, 0xa6c, 0x4798, 0xe, 0x0, 0xe360000, 0x2, 0x7, 0x646, 0x3, 0x2, 0x6, 0xc92d, 0x3ff, 0x7, 0x1f4, 0x1c9, 0x2, 0x3, 0xb, 0xff22, 0x1, 0x7ff, 0x6, 0xad60, 0x684, 0x70, 0x3, 0x0, 0x4, 0x9, 0x2, 0x7fff, 0x1, 0x5, 0xfffffff0, 0x9, 0xfff, 0x9, 0x3, 0x101, 0x2, 0x8, 0x7, 0x1000, 0x1, 0x6, 0x7fff, 0x400, 0xfffffd8f, 0x6, 0x3, 0x10001, 0x200, 0x8, 0x7ff, 0x7, 0x8, 0xfffff371, 0x1ff, 0x9, 0x5, 0x200, 0x4, 0x4, 0x10001, 0x0, 0x5, 0xfffffff8, 0x4, 0x1, 0xfffffffc, 0x9, 0x10000, 0xa, 0x1000, 0x6, 0x5, 0xffffffff, 0x5, 0x5, 0x7, 0x7, 0x9, 0xfff, 0x0, 0x200, 0x2, 0x5, 0x6, 0x1, 0x75f1947d, 0xb, 0xf9f8, 0x80000000, 0xfffffffb, 0x0, 0x2, 0x2, 0x1, 0xffffff00, 0x400, 0x4, 0x6, 0x5, 0x8000, 0xc9d, 0x80000000, 0x8, 0x5, 0x7, 0x9, 0x2, 0x10000, 0xae9, 0x6, 0x4, 0x800, 0x0, 0xd65c, 0x5, 0x6, 0x9, 0x5b4, 0x8, 0x2, 0xfffffff7, 0x7fff, 0x1000, 0x4, 0x81, 0xffff, 0x1, 0x3, 0xfffff001]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x75, 0x5, 0x1000, 0x3, 0x7fff, 0x4, 0x5, 0x8, 0x10001, 0x8, 0x8, 0x0, 0x5, 0x9, 0xb2, 0x3, 0x101, 0x1, 0xd83, 0x81, 0x100, 0x2c8a0, 0x10000, 0x8, 0x2, 0x608, 0x10001, 0x5, 0x10, 0x2879, 0xf, 0x2, 0x85, 0x7, 0x5, 0x0, 0x1, 0x6, 0xfffffffe, 0x80000001, 0x1, 0x3, 0x0, 0x7, 0x1, 0x80000001, 0x1000, 0x9, 0x9, 0x3, 0x9, 0x800, 0x166, 0x2, 0x3, 0x2, 0x2, 0x7, 0x3, 0x137, 0x9, 0x0, 0x10000, 0x7, 0x7fff, 0x7, 0x3, 0x5, 0xff, 0x0, 0x0, 0x4, 0x64, 0x9, 0x2, 0x4, 0x4f, 0xffffffff, 0x1, 0x3, 0xec9a, 0x7, 0x4, 0x8, 0x4, 0x7f, 0x0, 0x5, 0x8, 0xdbb4, 0x40, 0x3, 0x1b7155df, 0xef69, 0x80000000, 0x9, 0x1, 0xe, 0x7fffffff, 0x3, 0x401, 0x5, 0x3201, 0x7fffffff, 0xf176, 0xf35, 0x443d5972, 0x4, 0x3, 0xfffffff2, 0x400, 0x8000, 0x8, 0x6, 0x5, 0x44c3, 0x37b, 0xc, 0x7, 0xfffffbfa, 0x2, 0x9, 0x800, 0x0, 0x100000, 0x200, 0x9, 0x0, 0x722, 0x8, 0xb16, 0x0, 0x4, 0x10, 0x9, 0x2, 0x9, 0x10000, 0x5, 0x5, 0x4, 0x4, 0x1, 0x4, 0x4, 0x20000000, 0x3, 0x6, 0x6, 0x1c, 0x6, 0x6, 0x1c0000, 0xcde, 0x3, 0x2400, 0x6, 0xf, 0x8, 0x1, 0x9, 0x2, 0xf0b, 0x3, 0x7fffffff, 0x3, 0x2826, 0x6, 0x6, 0x26, 0x2, 0x0, 0x8d6, 0xffffffff, 0x7fffffff, 0xce, 0x1b, 0x9, 0x8, 0xd, 0x5, 0x5, 0xd, 0x2, 0xffff, 0x2, 0x7ff, 0x9, 0x22e5a677, 0x400, 0x3, 0x9, 0x2, 0x200, 0xfffffff7, 0x4, 0xf, 0x2, 0x81, 0x896, 0x9, 0xe, 0xb, 0x10001, 0xe, 0x7, 0xa, 0xa2a5, 0xc5b5, 0x5, 0x8, 0x5, 0x8, 0x6, 0x10, 0x4, 0x9, 0x2, 0xf, 0x1, 0x5, 0x3, 0x9cd, 0x1, 0x6, 0x80000001, 0x0, 0x9e, 0xea96, 0x546, 0x3, 0x81, 0x748f, 0x4, 0x7, 0x4, 0x40, 0x0, 0x9, 0xfffffffe, 0x7, 0x6, 0x80, 0x8, 0x9, 0x2, 0x5, 0x0, 0x5, 0x3, 0xdfd, 0xffff0001, 0x48f, 0x0, 0x6, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x10000000, 0x74b, 0x1, 0x80000001, {0x2, 0x0, 0xd348, 0x9, 0x1, 0x80000000}, {0xd, 0x1, 0x5, 0x6, 0x9c6, 0x2}, 0x95c, 0x6, 0x200}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x8, 0x100, 0x9, 0x80, 0x7, 0x4, 0x9, 0x1, 0x1, 0x1, 0x8, 0x8, 0x10000, 0x4e2f, 0x2, 0x0, 0xfffffff3, 0x1c, 0x1cd8, 0x1, 0x5, 0x10000, 0x80, 0x4, 0x10, 0x0, 0x6, 0x8, 0x3, 0x7, 0x0, 0x0, 0x800, 0x3, 0x5, 0xf, 0x4, 0x101, 0xfffffff9, 0x8, 0x60, 0x7, 0xf03, 0x4, 0x6, 0x3, 0x400, 0x1, 0xffff, 0x5, 0x7, 0x860, 0xfffffffc, 0x5, 0x80, 0x0, 0x0, 0x9, 0x2, 0xfffffff8, 0xd80a, 0x3, 0x2, 0xfba, 0x1000, 0x4, 0xf, 0x0, 0x2, 0x9, 0x2, 0x6c5, 0x2, 0x5, 0x0, 0x7, 0x9, 0x1, 0x5, 0x8d4, 0x2, 0x9, 0x7, 0x1, 0xf9, 0x10001, 0xd1fc, 0x9, 0xb, 0x9, 0x54, 0x7, 0x9, 0x0, 0x8, 0x2, 0x0, 0xb3e8, 0x6, 0x9, 0x6, 0x800, 0x5, 0x3fac, 0xf, 0xfffffffb, 0xfc, 0xcb, 0xfd, 0x6, 0xfff, 0x6, 0x9, 0x1, 0x8, 0xfffffc99, 0x2f, 0x1, 0x7235, 0xd, 0x9, 0x9, 0x0, 0x8, 0x401, 0x7, 0x4, 0x9, 0x0, 0x8, 0x3e5, 0x40000000, 0x0, 0x9, 0x4, 0xffffffff, 0x2, 0x7fffffff, 0x1, 0xfff, 0x6, 0xa, 0x78f, 0x8, 0x3, 0x6, 0xa, 0x80, 0x7, 0x8, 0x8001, 0x6, 0x50, 0x400, 0x3, 0xc, 0xffff, 0x0, 0x537e, 0x8000, 0x2, 0x9, 0xfffffeff, 0x4, 0x1, 0x4, 0x81, 0x509, 0x1, 0x7, 0xfffff2db, 0xf0e, 0x4b9b, 0x401, 0x9, 0x0, 0x3, 0x5, 0x6, 0x7, 0x1, 0x3, 0x1b3, 0x2, 0xffffffff, 0x200, 0xd, 0x1, 0xf3800000, 0x8001, 0x8, 0xd, 0x3ff, 0x1000, 0x9, 0xa0e, 0xd, 0x10, 0x6, 0x4, 0xffffffff, 0xf, 0x1, 0x35a84c2d, 0x7, 0x2, 0x0, 0xfffffbff, 0x7, 0x6, 0x1, 0xfffffff7, 0x7, 0x80000001, 0x8, 0x2dd7, 0xb4, 0x76a3, 0x80000001, 0x100, 0x974, 0x40, 0x4, 0xffffbbfb, 0xfad2, 0x800, 0x6, 0x7, 0xfffffffc, 0xa, 0x7fff, 0xc, 0x31, 0xfff, 0x6, 0x7, 0xfa22, 0x80000000, 0x8, 0x3, 0x1760, 0x3, 0x4, 0x9, 0x0, 0x80, 0x9, 0x0, 0xff, 0x7b, 0x98, 0xc, 0x2, 0xda59, 0xe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x7, 0x10001, 0x9d, 0x1, 0xe, 0x9, 0xffff33dc, 0x116, 0xffffff16, 0x6, 0x0, 0x0, 0x8, 0xc82, 0x17a7, 0x6, 0x0, 0x8, 0x1ff, 0x9, 0x0, 0x71e, 0x82cf, 0x432, 0x2, 0xffffffff, 0xffffa01c, 0x22a7, 0x7f, 0xffff4e60, 0x7, 0xc00000, 0x3, 0x2, 0x2, 0xb, 0x7, 0x3, 0x5, 0x675, 0x1, 0xaa2, 0x6, 0x7, 0x9, 0x8, 0x400, 0x8, 0x8, 0x6, 0x1, 0x1800000, 0xffffffff, 0x1d2ea151, 0xf603, 0x56d, 0x4, 0x2, 0x8001, 0x1000, 0x67, 0x40, 0x5, 0x7fff, 0x200, 0x814, 0x100, 0x7, 0x7, 0x8001, 0xfffff370, 0x6, 0xa9, 0xfff, 0xb, 0x0, 0xfffffffd, 0x1, 0x9, 0x5, 0x7fffffff, 0xb, 0x8, 0x8, 0x83, 0x8, 0x1000, 0x7f, 0x3, 0x8, 0xff, 0x1b, 0x401, 0x4d80, 0x2, 0x80, 0x7fffffff, 0x2, 0xe, 0x6, 0x5, 0x0, 0x1, 0x6, 0x3, 0x5, 0x8000, 0x0, 0x6, 0x0, 0x5, 0x3, 0x2, 0x0, 0x9, 0x0, 0x7, 0x7c, 0x93, 0x401, 0x1, 0x6, 0x5, 0x10000, 0x8, 0x5, 0x5, 0x18fc, 0x7fffffff, 0x7, 0x2, 0x6, 0x0, 0x9, 0x800, 0x1, 0x80000001, 0x2, 0x2, 0x1, 0xff, 0x1ff, 0x7ff, 0x7f, 0x1, 0xd, 0x1, 0x3, 0xff, 0xffff0001, 0xfffffffc, 0x3, 0x2, 0x1, 0x9, 0x42ca30a9, 0xeb, 0xb, 0xfffffffc, 0x4, 0x1, 0x6, 0x3, 0x6, 0x9, 0x6ca2, 0x51, 0x9, 0x610e, 0x4, 0xc73, 0x2, 0x8, 0x400, 0x80, 0x4, 0x0, 0x5, 0xfffff000, 0x0, 0x1, 0x9, 0x101, 0xe, 0x1ff, 0x81, 0x0, 0x3, 0x9, 0x7, 0x7ff, 0x2, 0x3, 0x5, 0x7, 0x481, 0xffffffff, 0x76, 0xb, 0x40000, 0xb, 0x2, 0x3, 0x10, 0x3ff, 0x7fff, 0x6, 0x800, 0x662, 0x225, 0xc, 0xb7, 0x10000, 0x6, 0x8, 0x6, 0x8001, 0x4, 0x80000001, 0x1000, 0x7ff, 0x7, 0x101, 0x8, 0x3, 0x6, 0xc, 0x7, 0x5, 0xfff, 0x3, 0x40, 0x4, 0x7ff, 0x8, 0x2, 0x4a000000, 0x100, 0x10001, 0x7c, 0x4, 0x0, 0x5, 0x8, 0x2, 0xbc, 0x6, 0xf221, 0x40, 0x2, 0x6, 0x10000, 0x6, 0xffff0001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x5, 0x82, 0x7, 0x6, 0x1, 0x7, 0x6, 0x7, 0x8, 0x5, 0xe, 0x28, 0x8, 0x7ff, 0x3, 0xb1, 0x9, 0x3ff, 0x5, 0x2, 0x3, 0x6, 0xfff, 0xbb, 0x2, 0xfffffffc, 0x5, 0x1000, 0x5, 0x5, 0x9, 0x6, 0x9, 0x200000, 0x40, 0xbd7, 0x40000000, 0x0, 0x7f18, 0x1000, 0x0, 0x4df, 0x0, 0x2, 0x80, 0x156fdccb, 0x5, 0x1, 0x3, 0x5, 0x800, 0x3b48e49, 0x10000, 0x1000, 0x8001, 0x400, 0x3, 0x7, 0x5, 0x100, 0x3, 0x647, 0x1, 0x8, 0x8, 0x36, 0x8c8, 0x400, 0x4, 0xf45, 0x3b6, 0x9, 0x400000, 0x6, 0x1, 0x9, 0x2, 0xfffffffb, 0x0, 0x5, 0x10, 0xd417, 0x0, 0x1, 0x8, 0x7f, 0x0, 0x80000000, 0x2, 0x2, 0x4, 0x7ff, 0x0, 0x138, 0xfffffff7, 0x9, 0x200, 0x6, 0x3d48f41d, 0x3, 0x80, 0x10, 0x0, 0x6, 0x1, 0x1, 0xd, 0x3, 0x6, 0x13, 0x9, 0x599, 0x10, 0xa00, 0x3, 0x3, 0xd8, 0xf, 0x1, 0xb, 0x8, 0x3ff, 0x7, 0x385, 0xd, 0x6c, 0x81, 0x10001, 0x2, 0x8, 0x1, 0x400000, 0x4, 0x100, 0x5, 0x4, 0xc00000, 0xfff, 0x4, 0x2, 0xe, 0x3, 0x2, 0x8, 0x16, 0x469, 0x7, 0x91a0, 0xd, 0x400, 0x5, 0x8, 0x800000, 0xfffffff7, 0xfffffbd0, 0x0, 0x3, 0x7ff, 0xef0, 0x5c, 0x3, 0x4, 0x9, 0x1000, 0x7, 0xde0, 0x847, 0x0, 0x2d, 0x8, 0x0, 0x2, 0x1, 0x2, 0x7, 0x7, 0x101, 0xb8b3, 0x4, 0x48ac, 0x7, 0xecf, 0x6, 0x101, 0x89, 0x6, 0x4, 0x9, 0xa, 0x5, 0xb00, 0xffffffff, 0xfffffffc, 0x7fff, 0x9, 0x112, 0x5, 0x5, 0x0, 0x9, 0x6, 0x2, 0x7, 0x7, 0xdb, 0x10, 0x6, 0xfffffff4, 0x8, 0x3, 0x1, 0x9, 0x1, 0x90f5, 0x7, 0x10001, 0x44a9, 0x78b6, 0x5, 0x3, 0x1, 0x17ba, 0xfffffe29, 0x80000001, 0x6, 0x9, 0x80000000, 0x8, 0xf, 0x4ca7, 0xf1, 0xfffffc00, 0x401, 0x9, 0x0, 0x8001, 0x40, 0x6, 0x101, 0x4, 0x400, 0x7, 0x9, 0x3, 0x6, 0x856, 0x8, 0xb, 0xfffffff9, 0x80000000, 0x5, 0x7, 0x9, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x101, 0xffffffff, 0xfffffff1, 0x0, 0x6, 0xfffffff7, 0xffffffff, 0x9, 0xa53, 0x3, 0xbdb, 0x5, 0x1, 0x8, 0x8380, 0x9, 0x1, 0xe5, 0x5, 0x0, 0x1, 0x6, 0x5, 0x80000001, 0x7, 0x81, 0x4, 0x0, 0x10000, 0x10000, 0x1, 0xfff, 0x10001, 0x9, 0xd, 0xfffffffc, 0x1000, 0x4, 0x5, 0x1ff, 0x0, 0x8, 0x53ce, 0xb6e, 0x5, 0xfff, 0x8, 0x7, 0x200, 0x2000, 0x1, 0x400, 0x263984d4, 0x3, 0x7, 0x1, 0x3, 0x0, 0x3, 0x1000, 0x8, 0x9, 0xfffffff7, 0x8, 0xffff, 0x0, 0x75e, 0x3, 0x5, 0x9, 0x1, 0xa, 0xea99, 0x8370423, 0x5, 0x4, 0x7, 0x1, 0x1ff, 0x9f, 0x89c, 0x5, 0xfff, 0xf, 0x2, 0x805, 0x8, 0x9, 0xc0f, 0x800, 0x8000, 0x3, 0x8, 0xf379, 0xd, 0x6, 0x0, 0x9, 0x8, 0x400, 0x4, 0xfffffff2, 0x2, 0x0, 0x0, 0xe47, 0x844f, 0xd, 0xfffff000, 0x0, 0x4, 0x3, 0xf, 0x0, 0x9, 0xd0, 0x7d, 0x1, 0x9a1d, 0x5, 0x9, 0x8f, 0x7, 0x2, 0x8, 0x3, 0x1000, 0x2bf, 0x1ff, 0x0, 0x0, 0x1ff, 0x8000, 0x2, 0x6, 0x2, 0x794f, 0xd8, 0x6, 0x5, 0x100, 0x2, 0x6, 0x200, 0x2, 0x40, 0xfffffffd, 0x2, 0x4, 0x100, 0x607c8037, 0x3, 0x9, 0x1, 0x0, 0x7fff, 0x7fffffff, 0xd, 0x7, 0x8, 0x8, 0x3, 0x5, 0xffffffff, 0x3, 0x80, 0x9, 0x3, 0xb6, 0x6, 0x1, 0xffffffff, 0x7, 0x3, 0x1, 0x0, 0xfff, 0x0, 0x200, 0x0, 0x1, 0x7, 0x8001, 0x9, 0x401, 0xffff, 0x26f, 0x5, 0x6, 0x9, 0x10, 0x3ff, 0x8000, 0x7, 0xfff, 0x3, 0xfffffff8, 0x4, 0x1f1, 0x7, 0x4, 0x80000001, 0x2, 0x8, 0x4000000, 0x3, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0xb, 0x6, 0x2, 0x0, 0xaab, 0x0, 0x2, 0x2, 0x4ea, 0x4, 0x8, 0xfffffffe, 0x600, 0x80000001, 0x0, 0x2, 0x2, 0x7, 0x5, 0x3, 0x9, 0x5, 0x7ff, 0xa, 0x3, 0x9, 0x2, 0x800, 0x8ab, 0x0, 0x5, 0x3, 0x9, 0x8001, 0x5, 0x9a92, 0xfffffff7, 0x0, 0x4, 0x7f, 0xf, 0x9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x98}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x80, 0x7, 0x0, 0x6, 0xbf2, 0x2, 0x800, 0x2, 0x1d, 0x7fff, 0xc6, 0x8, 0x6, 0x30, 0x0, 0x1ff, 0x8000, 0x4, 0x1, 0x7, 0x9, 0x1, 0x5a, 0x6, 0xfff, 0x0, 0x80000001, 0x800, 0x7f, 0x7fffffff, 0x8, 0x800, 0x200, 0xcdb, 0x5, 0xdc2, 0x6, 0x7, 0xff, 0xfffffff7, 0x4914, 0xffffffff, 0x4, 0x9, 0x1000, 0x0, 0x80000001, 0x401, 0x9, 0x5, 0x6, 0x3ff, 0x5, 0x6, 0x2, 0x2, 0x7, 0x3, 0x2, 0x8, 0x6, 0xfff, 0x8, 0x9, 0x6, 0x3, 0x1296, 0x9, 0x7, 0x101, 0x2, 0x3, 0x10000, 0x3, 0x70d, 0x7f, 0xd020, 0x2, 0x7, 0xf4, 0x5, 0x80000000, 0xa1f6, 0xc47, 0x1, 0x8, 0x8, 0x80, 0x5, 0x3, 0x9, 0x4, 0x8000, 0x800, 0x734e, 0x4, 0x8000, 0x2, 0x8b, 0x10001, 0x6181, 0x0, 0x100, 0x7, 0x9, 0x2, 0xffffffff, 0xf9e, 0x1c00000, 0x80, 0x7b, 0x5, 0x0, 0x20000, 0x2, 0x512, 0x10000, 0x3b2, 0x4, 0x7, 0x30000, 0x10001, 0x0, 0x80000000, 0x420, 0x8, 0x4, 0x80, 0x9, 0x6, 0x1000, 0xffffffff, 0x40, 0x820a, 0x7, 0xe, 0x2, 0x3, 0x1, 0x7, 0x7, 0x8, 0x0, 0x8, 0x5, 0x200, 0x2, 0x10000, 0x5, 0x4f4, 0x1, 0x6, 0xfffffc00, 0x7, 0x7, 0x8, 0x8, 0xffffffff, 0xfffffffd, 0x4, 0x769, 0x7, 0x7, 0x0, 0x2, 0x2, 0x2, 0x8, 0x8, 0xf, 0x7fff, 0x5, 0x0, 0xffffffff, 0x7, 0x4, 0xfff, 0x4, 0x6, 0x815, 0x8, 0x3e4fc2b3, 0xfffffbff, 0x0, 0x5, 0xad000000, 0x0, 0x42, 0x6, 0x4, 0xfff, 0x7, 0x2, 0x7, 0x6, 0x5, 0xfffffff7, 0x5, 0x7, 0x10001, 0x9, 0xffffffff, 0x9, 0x4, 0x9, 0x3, 0x4, 0x2, 0x7fffffff, 0xd16, 0xb, 0x40, 0x9, 0x7, 0x57a0, 0x7, 0xfa7, 0x40, 0x7, 0xe, 0x7, 0x8, 0x8, 0x7f, 0x401, 0x9, 0x221, 0xfffffffa, 0x0, 0x6, 0x1, 0x800, 0x6, 0x5aa2, 0x5, 0x6056, 0x5, 0xe, 0x9, 0xcc, 0xf, 0x5, 0x2a09, 0x6, 0x2d80, 0x8, 0x4, 0x3, 0x83, 0x0, 0xff, 0xc0000000, 0x7, 0x2, 0xe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6, 0x0, 0x5, 0x9, 0x0, 0x1, 0x7, 0xd0, 0x10000, 0xda, 0x5, 0x7f, 0x8, 0x7, 0xb, 0x1, 0x1, 0x9, 0x9, 0x2, 0xf14, 0xf, 0x7, 0x0, 0x9, 0x4, 0xd2, 0x67, 0x80, 0x0, 0x2f38000, 0x17, 0x6, 0xb, 0x7, 0x3, 0x5, 0x6, 0x4, 0x100, 0x3, 0xb04, 0x5, 0x5, 0x3, 0x0, 0xb, 0x3a14, 0xffffffff, 0xffffffff, 0x3, 0x10000, 0x5, 0x0, 0xedb, 0x4b8, 0xfffffff0, 0x3, 0xf6ce, 0x3, 0x8, 0x1, 0x108, 0x0, 0x2, 0x535, 0x9, 0x2, 0x2, 0x1, 0x1, 0x9, 0xac, 0x2, 0xfff, 0xfffffff4, 0x544, 0x5, 0x2, 0xfffffff0, 0x4, 0x3, 0x5, 0x101, 0x8, 0x8, 0x5, 0xe8, 0x8c2b, 0xfffffffc, 0xfffffff7, 0x3, 0x9, 0x2b3, 0x996, 0x4, 0x4, 0x8, 0x8, 0x3, 0x4, 0x3, 0x2, 0x0, 0x4, 0x0, 0x8, 0xfffffff9, 0x80000000, 0x3, 0x9917, 0x9, 0x4, 0x9, 0x4, 0x3, 0xffff, 0x6, 0xffff, 0x4f6e, 0x9, 0x7, 0x2e9, 0x7, 0xe, 0x2, 0x1, 0x7ff, 0x7, 0x0, 0x6, 0x85de, 0x9, 0x7, 0x1, 0x7, 0x8, 0x7, 0x100, 0x5, 0xe, 0xb7, 0x1, 0x70, 0x2, 0x2, 0x9, 0xb, 0x40, 0x2, 0x8, 0x6, 0x3, 0xfffffff9, 0x73d7, 0x7, 0x4, 0x0, 0x9, 0x0, 0x2da059e, 0x5, 0x4, 0xfffffffd, 0x101, 0x4, 0x2724, 0xf2, 0x1, 0x8, 0x9, 0x4, 0x7, 0x6, 0x7, 0x0, 0x8, 0x81, 0xa83d, 0x1, 0x80, 0xe7, 0x7, 0x1727, 0x4, 0x1000, 0x7, 0x4, 0xaff8, 0x9, 0x2, 0x1, 0x9793, 0x7fffffff, 0x8, 0x6, 0x8, 0x47fcdf73, 0x4, 0x0, 0x7, 0x9, 0x101, 0x5, 0x100, 0x7, 0x2b1, 0x4, 0x6, 0x8001, 0x7, 0xfffffff8, 0x9, 0x800, 0x0, 0x27ff, 0xe, 0xfffffffe, 0xff9, 0x6, 0x3, 0x0, 0x2e0e, 0x81, 0xfffffffc, 0x600000, 0x7, 0x7, 0x7, 0x5, 0x9, 0xfffffffb, 0x5, 0xfffffffe, 0x80000001, 0x988c, 0x6, 0x8, 0xd7, 0x9, 0x176, 0x0, 0x9, 0x0, 0x5, 0x960, 0x10000, 0xd82, 0x7, 0x80000000, 0x5, 0x8001, 0x5, 0x9, 0x9]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x226}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x6, 0x6, 0x3ff, 0x9, 0x9, 0x0, 0xd, 0xc52e, 0x80, 0x6, 0x4, 0x3, 0xfffffff9, 0x7, 0x3, 0x5, 0xff, 0x7, 0x2, 0x4, 0x6, 0x5, 0x9, 0x6, 0x800, 0x7, 0x8000, 0x6341, 0x5, 0x2, 0x0, 0x98b8, 0x5, 0x7d8e, 0x0, 0x101, 0x9, 0x2, 0x7fffffff, 0xfff, 0xffffffff, 0x10000, 0x7, 0x1, 0x7, 0x0, 0x1, 0x9, 0x6, 0x3, 0x3, 0x5, 0x7e, 0x2, 0x8, 0x9, 0x7, 0x5, 0xb1, 0x0, 0x5, 0x3, 0x4, 0x0, 0x1, 0x1, 0x824, 0x6, 0x1, 0x2, 0x8, 0x9, 0x8fa6, 0x4, 0x2, 0xfffff8f9, 0x7ff, 0x1, 0x6, 0x0, 0x6, 0x4, 0xb, 0x401, 0xfffffbff, 0xffff, 0x5, 0x7f, 0x1, 0x0, 0xb4, 0x7, 0x3, 0x6, 0x40, 0x6, 0x2, 0xffffffbe, 0x7, 0xfff, 0x7, 0x3, 0xf, 0x4, 0x3, 0xfffffff9, 0xb, 0x8, 0x615, 0x0, 0xbdf0, 0x7, 0x5, 0xf, 0x0, 0x30ab, 0x5, 0x4, 0xfffffff9, 0x6, 0x7, 0x6, 0x4, 0x6, 0x4, 0xfffffff9, 0x5, 0x3, 0xba80, 0xe, 0x8, 0x0, 0x9, 0x6dbb, 0xe528, 0x4, 0x4, 0x1, 0xff, 0x6, 0x1, 0x8001, 0xffff8b45, 0xb, 0xf, 0x5, 0x6b60, 0x1b, 0x2, 0xfffffff9, 0x4, 0xf, 0x5, 0x8b74, 0x10000, 0x4, 0x6, 0x3, 0x7, 0x3, 0x29, 0x200, 0x7fff, 0x10000, 0x9, 0x8, 0x2a5, 0x8, 0x10001, 0xff, 0x40, 0x3, 0x7, 0xfffff768, 0x6, 0x7010e2ef, 0x1, 0x400, 0x4, 0xc9a, 0x8, 0x2, 0xf6, 0xfff, 0x7, 0xfffffffb, 0x153b6d2, 0x7, 0xd8, 0xfffffffd, 0x6b1, 0x9, 0xa09d, 0x9, 0x6, 0x0, 0x401, 0x5, 0x7ff, 0x3, 0x2, 0x7ff, 0x2, 0x9, 0x3, 0xd, 0xffff, 0x7, 0x5, 0x5199, 0x2, 0x2, 0x7, 0x6, 0x0, 0xd0d, 0xddd, 0x6, 0x6, 0x8000000, 0x3c, 0x5, 0xffffdfb4, 0x3, 0x80000000, 0x81, 0x5c99, 0x1, 0x0, 0x5, 0x4, 0x7, 0xfff, 0x6, 0x2, 0x80, 0x40, 0x80000001, 0x2, 0xfffffffe, 0x448c, 0x7, 0x1, 0xffff, 0x7640, 0x2, 0x40, 0x9, 0xd34, 0x800, 0x4, 0x70e, 0x7, 0xf31]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x675e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x2, 0xc3, 0x1, {0x1, 0x1, 0x0, 0xffff, 0xf3, 0x13}, {0x1, 0x2, 0xf2, 0x3, 0x5, 0x4}, 0xa276b45, 0x0, 0x828c}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x5ae, 0xfffffffe, 0x1, 0x7, 0x7fff, 0x2a7, 0x7, 0x9, 0x1, 0x4, 0xdccc, 0x3, 0x4800, 0x0, 0x6, 0x5, 0x5, 0x6, 0x8, 0x7, 0xfffffffb, 0x9, 0x9, 0x3f08267b, 0x10, 0x9, 0x401, 0x5, 0x8, 0x5, 0x80000001, 0x3, 0x2, 0x7, 0xc0, 0x7f, 0x5, 0x6, 0x6, 0x80000001, 0x800, 0x93, 0x2, 0xc, 0x922, 0x9, 0x1, 0x9, 0x8, 0x80, 0x6, 0x1734ce0c, 0x5, 0x1, 0x6, 0x3, 0x4, 0x6, 0x9, 0x7, 0x3, 0x400, 0x7, 0xe47, 0x6, 0x452, 0x51, 0x1bb1, 0x6, 0x9, 0x80, 0x3, 0x8000, 0x9, 0xffff0614, 0xfffffffa, 0x9, 0x2, 0x2, 0x3, 0x6, 0x7, 0x2, 0x8001, 0x5, 0x8, 0x80, 0x8, 0x8000, 0x9, 0x2, 0xa2f, 0x792, 0x2, 0xd24, 0x6, 0x3ff, 0x7f, 0x7, 0x7, 0x5, 0xe18c, 0x800, 0x3f8, 0x4, 0x7f, 0x6, 0x77, 0x7, 0xa3, 0x80, 0xfffffff0, 0x7fffffff, 0x9, 0xb, 0x6, 0x1, 0x0, 0x9f, 0x800, 0xfffffff7, 0x7f, 0xb9e3, 0x6, 0x5, 0x4, 0x5, 0x4, 0x1936, 0x5, 0xe0b, 0xe, 0xfffffff8, 0x9, 0x4, 0x9, 0x9, 0x2d, 0x401, 0x48000, 0xb, 0x5, 0x8, 0x7, 0xffffff01, 0x0, 0xff, 0x1, 0x3d44, 0x3, 0x8, 0x8, 0xfe7d, 0x3ff, 0xfffffff8, 0x482, 0x7, 0x4, 0x3, 0x2, 0x4, 0x7fffffff, 0x6, 0x6, 0xc, 0x4, 0x7, 0x400000, 0x679, 0x8, 0x3, 0x8, 0x400000, 0x3, 0x0, 0x2be7, 0xe60, 0xffffffbf, 0xac2c, 0x46, 0x5, 0x5, 0x84c6, 0xed, 0xb3a, 0x2, 0x3, 0xb4, 0xd024, 0x6, 0x8, 0xe, 0x3, 0x0, 0x4, 0x7fff, 0x4, 0x36, 0xfffffc01, 0x6, 0xeb, 0x8d, 0x4, 0x3, 0x7fff, 0x7, 0x5, 0x0, 0xffffffff, 0xd8c3, 0x9, 0x2, 0x101, 0xd, 0x9, 0x8, 0x0, 0xee, 0x3, 0x10, 0xe, 0x6, 0x2, 0x207, 0x0, 0xffffffff, 0xfff, 0x7, 0x7, 0x7, 0x9, 0x4, 0xea, 0x43d1, 0x8, 0x9, 0x8, 0x6, 0x1, 0x9, 0x1, 0x1, 0x5, 0x5, 0x88, 0x0, 0x5, 0x3, 0xaa0d, 0x101, 0x40, 0x4, 0x0, 0xfffffff8, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ad8, 0x8d, 0x1, 0xa00, 0x7, 0x7ff, 0x7, 0x4, 0x0, 0x9, 0x8dd, 0x3, 0x0, 0x4, 0xffffffff, 0x1, 0x5, 0x800, 0xfffffffd, 0x2, 0x0, 0x1, 0x2, 0x6, 0x0, 0x8000, 0x3, 0x6, 0x0, 0x5, 0x6, 0x4, 0x5da, 0xffff, 0x1, 0x3ff, 0x10, 0x7fff, 0x60000, 0xff, 0x2, 0x3, 0xffffff4a, 0x1, 0x0, 0x5, 0x72, 0x3, 0x9c6, 0x1a2f, 0xffff6046, 0x0, 0xc23f, 0x100, 0x7, 0x4, 0x5, 0x3, 0x8, 0x8f40000, 0x2, 0x6, 0x6, 0x8, 0x9, 0x710c, 0x6, 0x8, 0x5, 0x4, 0x9, 0x80000001, 0x8, 0x7f, 0x6, 0x1, 0xfffffff7, 0x6, 0x40, 0xe95, 0x91, 0x9, 0xe, 0x5, 0x6, 0x5, 0x2, 0xc, 0xfffffff4, 0xfffffffe, 0xfffffff9, 0xf, 0xfffffffd, 0x0, 0x9, 0xff, 0x100, 0x4, 0x3, 0x4, 0x1, 0xffff, 0x6097, 0x5, 0x6, 0xfffffffc, 0x10000, 0x6, 0x0, 0x7ff, 0x7, 0x6, 0x5, 0xd46, 0x41, 0x51, 0xf, 0x3, 0xffff, 0x3, 0x196, 0x5, 0xff5, 0x4, 0x10001, 0x2, 0x5, 0x8, 0x4, 0x6, 0xffffffc0, 0xd1c, 0x657, 0x4, 0x1, 0x8001, 0x9, 0x2, 0xd, 0x7e3c, 0x9, 0x401, 0x401, 0x394, 0x903, 0x9, 0x5, 0x40, 0x6, 0x1, 0x8001, 0xb5, 0xc4, 0x800, 0x0, 0x0, 0x7, 0x530328a5, 0x7fffffff, 0x400, 0x73, 0x7, 0x6071, 0x7, 0xa95, 0x4, 0x7fff, 0x5, 0xfffffff9, 0x2, 0x8, 0x5, 0x0, 0x1, 0xffffffff, 0xd7, 0xfff, 0x200, 0xfffffff7, 0x62, 0x9, 0xe69d96ab, 0xbe, 0x101, 0x4, 0x3, 0x7, 0x2, 0x7f, 0xf, 0x8, 0x9, 0x7, 0x1, 0xf, 0x7, 0x6, 0x3, 0x6, 0xfff, 0x1, 0xb, 0x7, 0x8, 0x3, 0x70c5, 0x10000, 0xffffffc0, 0x7, 0x6, 0x3, 0x7d286d03, 0xe4, 0x200, 0x200, 0x5, 0x0, 0x1, 0x80000001, 0xc00, 0x8, 0x8, 0x6, 0x5, 0x1, 0x9, 0x4, 0x8, 0x6, 0x94dc, 0x3, 0xc, 0x2, 0xf, 0x3, 0x7, 0x0, 0x3, 0xa, 0x1000, 0x401, 0xa0, 0xa5f4, 0x7c8d, 0x10, 0xc, 0x4, 0x5, 0xc4, 0x7, 0x828, 0x40, 0x5, 0x9, 0xbebf, 0x7fff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7e0}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4c, 0x4, 0x52ce, 0x7, 0x2, 0xf, 0x9, 0x3ff, 0xf, 0x3, 0xffff5935, 0x1, 0x5e7, 0x6, 0x6, 0xff, 0x6, 0x6, 0xd, 0x200, 0x7022, 0x1, 0x4, 0x7, 0x10000, 0x8000, 0x9, 0x3, 0xf93, 0xffff0000, 0x100, 0x4, 0x8001, 0x7, 0xa, 0x9, 0x2, 0x0, 0x0, 0x1000, 0xf8d, 0xfffffffd, 0xe, 0x1, 0x800, 0x4, 0x7fffffff, 0x0, 0x4, 0x6, 0x7f, 0x1, 0xfffffffa, 0x1, 0xd, 0x401, 0x6, 0x6, 0x0, 0x1, 0x0, 0x2, 0xdbde, 0x4, 0x80000001, 0xd9, 0x1, 0xe, 0x13b3d712, 0x7, 0x81, 0x4c6d, 0x1, 0x2, 0x95, 0x0, 0x1f, 0x2, 0x2, 0x3, 0x9, 0x890, 0x4, 0x6, 0x0, 0x5, 0xffffffff, 0xb, 0x2, 0xc, 0xc9c0, 0x2, 0x9, 0x80000000, 0x4, 0xfffffffb, 0x3, 0x2, 0xfff, 0x5, 0x7, 0x10000, 0x6, 0x3, 0xffffff4f, 0x8, 0x2, 0x62f8, 0x8, 0x798, 0xa51, 0xffffffff, 0x3, 0x1, 0x0, 0x5, 0x3, 0xd, 0x80000001, 0x7, 0x7f, 0x101, 0x8, 0xfffffffe, 0x6, 0x1, 0x2, 0x8000, 0x1, 0x26bc619c, 0x6, 0x7, 0x9, 0x2, 0x4, 0xffff8000, 0x1ff00000, 0x4, 0x7, 0xfffff001, 0xc50, 0x0, 0x5a08, 0x8, 0x9, 0x7, 0x1ff, 0xff, 0x3, 0x3, 0x7f, 0x6, 0x4, 0x0, 0x1, 0xffffffff, 0xffff7fff, 0x789d, 0x0, 0x3, 0x7ce, 0x5, 0x6, 0x3, 0x6, 0x4, 0xfffff3e9, 0x5, 0x0, 0x5, 0x400, 0x3, 0x80, 0x1, 0x2, 0x8, 0x4, 0xdd7e, 0x3, 0xafb8, 0xd20, 0xd4, 0x80000001, 0x8, 0x8, 0x8, 0x6, 0x7, 0x400, 0xfff, 0x3, 0x2, 0x401, 0xff, 0x7ff, 0x7f, 0x8, 0x0, 0x6, 0x6, 0xfffffffe, 0xffffffff, 0x3ff, 0x1, 0x5, 0x3, 0x0, 0x80000001, 0x10, 0x7, 0x3, 0x8, 0x3ff, 0xfffffff7, 0xfffffff7, 0x4, 0x5, 0x2, 0x169, 0x6, 0x5, 0xfffffff8, 0x95779f00, 0x200, 0x5, 0xa1, 0x7fffffff, 0xe7, 0xc, 0x1fc000, 0x3e, 0x40, 0x81, 0xdca, 0x2, 0xd, 0xb, 0x3, 0x3, 0x4, 0x69e7, 0x7, 0x80, 0xce4a, 0xfffffffa, 0x6, 0x8, 0xfffffffd, 0x1, 0x7, 0x0, 0x3, 0x37, 0x0, 0x5c]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x95}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x75, 0x6, "03bbfb69c4c7d509483f892c1bbfacad46a7f7730304d1f5d83634f979b8d111e8a8ccd9181e1701bb77299d725cee3e460992130c41567cd894ae3f50de888b631dca81774a3f09de7d04a1ff0937d91552c784a13f96332fe8165796c636b344c66de436bb7fec778eda2cad096dda48"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x13c, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x10000000, 0x5, 0x7}, @loopback, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6860, 0x0, 0x2, 0x2}, @private=0xa010101, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xace, 0x3, 0x1, 0x0, 0xb}, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, 0xff}}]}, {0x99, 0x6, "47f0eb55496521d1f69825965f9af70b7f9f2389564d7f8d1c600e196e719a36b64ae16f4c37e9d4f16bd6c859bd8d77f62cd7b2cb04f38c31f9a40daf15932f108dc72444f1ac4fcedaa44c863bb9aa6683f160065a6268da069b9906577400c9683be6f175281b7b61d5f4576924e8a5fba5a7d0fc48bc2bbb4b84260c60ad4b0ff41b00c7021adcd96c730c0ee4f40174d42a35"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0xa4, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2c, 0xf6d, 0x10000000, 0xa, 0x53}, 0x2, r8}}]}, {0x55, 0x6, "b21e46a4512796978d5b1e7566539508932642ab1e5f16ba886b4eeb8f6994743ab6accbbeffbfeabe0c5a7065c5a7e35d8e9d1f922d57499c8e30b52d4bde454c907292c0b94a750145f19697c31df230"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}, {0x3c0, 0x1, [@m_skbedit={0x88, 0x9, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x8, 0xffffffffffffffff, 0x9ba, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x9, 0x0, 0x0, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xffff}]}, {0x12, 0x6, "b8d11e587bc89a8c29b274e73441"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x128, 0xa, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x27f9, 0x3, 0x4, 0x9}, 0x4}}]}, {0xd6, 0x6, "95bf2ed9cd2b08915103425c172aa156755be737711de3fbc5b9e7bf155fe211618a4db8dbc8333b0c7e88224936ddec3d9fc4d429fbf433fcdc3175ea66cf7a9e25d7c88aeb0bb2986ba5cfcba8696c7645cac83d3a0a247376ecb4606c5aea8b16b55713529161c9594e54c553d124f3eb159423dc4e2e2312d138500f9d3928ae7348d978ad36e3e329fb76eb6b23dd4dfb72ce4e62908d54fc5884c756bb79116d2bf7d4745eff11b5b66b1e43f510793d4f692dbb3093ba36deb6f76b913597fb09a16ee2cbbbadaa6742fcdcb82c0d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4}}}}, @m_csum={0x20c, 0x16, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xfffffff8, 0x8, 0x9, 0x1}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x7, 0x80000000, 0x1}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x10000000, 0x8, 0x1}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x8, 0x80, 0x5}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x0, 0x31f6d601, 0x2}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10001, 0x3, 0x2, 0xd287}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x73788eb8, 0x3, 0xffffffffffffffff, 0x63, 0x4}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x83, 0xb, 0x5, 0x6f3, 0x3ff}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x6, 0x1, 0x8}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xa, 0x8, 0x3, 0x1ff}, 0x7c}}]}, {0xc8, 0x6, "69016e6be30aa7b51778c70f818d46a1d3d0d436a933cb5265c4cc2965320fa611b47404c6b9389b76a542a4e39068f16c3d0250f47fc3cf1d4fba97d98837c54dbe83cbb1e958c07c6193fb348766dc38fba1e6d2754234369d798f326df07b00e4d4dfa673d1ce70046e6c2e6f26275c847fa6132c89388eccbecd66ced2eceb225f42423b284481ab36c4db51d24035de9e459e55491c3180f0d4b92ae0cde6a4b89a215dc918084d3e8926f835b55114666f9bd3ab4230cdf34e61b0bb9d7d63500e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x164, 0x1, [@m_connmark={0x160, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10001, 0x9, 0x6, 0x9, 0x43454208}, 0x8000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x780, 0x6, 0xd2, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x5, 0xb, 0x8001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffff, 0x7, 0x2, 0x5, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0xffff0001, 0x1, 0x5, 0x8000}, 0x90}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xca, 0x5, 0x2, 0x5}, 0x5}}]}, {0x88, 0x6, "8b88ff53c750dff75225f3919cc93e3b3dfd4c0afab92ef456834ff5656063717723604a5b7f2a47d6434cb4d4803f71a3774e0dd59a17d77e4e6ab03e46dfbe93203a70b4bbec3377bc79c0904819a4734cb5097f25a0252d6e921b0569d9c2800fe1c5c8d904d1fc8b8acfcf788a04352a1fbc26d28de125dd2045c007e77a09de5884"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x3fdc}, 0x1, 0x0, 0x0, 0x4010}, 0x24008051) getsockname(r4, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r9], 0xe8}, 0x1, 0x0, 0x0, 0x4000440}, 0x4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5aa, &(0x7f0000001940)="$eJzs3c9rHFUcAPDvm2zSpKkmFUFrDwYKtqAmTVpRRLDFevPgj4InwZikpXTbhiaCrRVTqP+B/gGCNy/isYgU9eLVm+AfIMUiNRdvkdnsbjfNbtptdzM18/nANPNmdvt9k/Dd9/bte7MBlNZE/k8WsS8iFlPEWMu5StRPTqw/7p/bV+ZWb1+ZS7G29t7fKVL9WOPxqf5ztP7k4Yj47acUTwxsjrt06fLZ2Wp14WK9PLV8bnFq6dLlF8+cmz29cHrh/Mz0y9MvHT0yc/RwT65zT0T8Mnmicu3UG/u/m/tm7+c/fHs9xbFmnVuvo1cmYqL5/7fKf6+v9DpYQQbq19P6J06VAitEVxp/v8GIeCrGYiCGmufG4ot3Cq0c0FdrKWINKKkk/6GkGv2A/P1vYyu2RwJsl1vH1wcAGmN7+RYjUTtYGxuM4drYwO7VFK3DOikiejEyl8dYfC6N5Vv0aRwOaG/lakQ83a79T7XcHK+N4uf5n23I/ywi3q7/zI+/+4DxJ+4qy3/YPg+T/x+25P9HDxhf/gMAAAAAAEDv3DgeES+0+/wva87/iTbzf0Yj4lgP4t/787/sZg/CAG3cOh7xWkSsts7/22h8oP45/2O1+QCD6dSZ6sLhiHg8Ig7F4K68PL1FjIn9vw52PNcy/y/fVocioj4XcF12s7Jr43PmZ5dnH/R6gTtuXY14ppLnf4qN+Z+a7X9q0/7nrweL9xlj7cTrP3c6tyn/b1+ZW9yQ/0C/rH0dcbBt+3/nzhVp6/tzTNX6A1ONXsFmn35w/ftO8eU/FCdv/3dvnf/jqfV+PUvdx/jsrz8eIv/b9/+H0snaLWcadyv5ZHZ5+eJ0xFB6a/Pxme7rDDtRIx8a+ZLn/6ED7fI/27L/PxIRK53DjLQWTv745rVOD9T+Q3Hy/J/vqv3vfufA+1/92yn+/bX/R2tt+qH6EeN/0FbW2LnfBC22ugAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/5RFxJ5I2WRzP8smJyNGI+LJ2J1VLywtP3/qwsfn5/Nzte//zxrf9Du2Xk6N7/8fbynP3FU+EhF7I+LLgZFaeXLuQnW+6IsHAAAAAAAAAAAAAAAAAACAR8Roh/X/uT8Hiq4d0HeVoisAFEb+Q3l1l/9DfasHsM2Gu27/B/tVFWD76f9Decl/KC/5D+X1EPm/0st6ANuvsj4MCJSQ/j8AAAAAAOwoe5+98XuKiJVXR2pbtCzwMc8fdras6AoAhXGLHygvU3+gvLzHB9I9zndeHnCvZwIAAAAAAAAAAAAAvXJwn/X/UFbW/0N5Wf8P5WX9P5SX9/iA9f8AAAAAAAAAAAAA8OhbunT57Gy1unCxiJ1d9UoUE/2uneFCo9sp1U48GtXYaqfgFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDpvwAAAP//PDTyjg==") syz_clone(0x20000, &(0x7f0000000380)="2818f87215b0af317eef1b72675c6556a680fdb426281bf5a6b3860a063d612f176312100ec416cc1294b7adc93f1116f0de0b7a64817ff841bf9580c797b92e94abfeb8bb9455e03a30395527a429f16d6ea19c3bbb809c4b5ec110", 0x5c, &(0x7f0000000480), &(0x7f0000000540), &(0x7f0000000600)="aee2b26ad6510863021d9cef153add119eb46495aa1220") pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r3, &(0x7f0000000100)={0x18}) 1m4.031670381s ago: executing program 5 (id=5364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x64, 0x79, 0x0, 0x0, 0x0, 0x8, 0xd80f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000300), 0x1}, 0x2, 0x2, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x83, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x0, 0x6b2b}, 0x8) sendto$inet6(r1, &(0x7f00000002c0)='W', 0x1, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/48, 0x30) 1m2.905591358s ago: executing program 5 (id=5382): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m2.859706759s ago: executing program 39 (id=5382): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 42.07621557s ago: executing program 9 (id=5692): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000100)={0x3, 'syz0\x00'}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x5, 0x1, 0x80, 0xfffffff8}]}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x110480, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) signalfd4(r4, &(0x7f00000004c0)={[0x100000000]}, 0x8, 0x8a6d4cf0811010b6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='tunl0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r5 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) kcmp(r5, r5, 0x5, r0, 0xffffffffffffffff) 42.012827191s ago: executing program 9 (id=5694): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r3) getsockname$packet(r3, 0x0, 0x0) gettid() fcntl$setsig(0xffffffffffffffff, 0xa, 0x2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, 0x0) io_getevents(0x0, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) 41.544817288s ago: executing program 9 (id=5702): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="8f1b2add41a639493f42c06a64023da86df50f2f6abd384c73435af1055564ab4e5c49bc67ff1dd94e6f4b01ca5d3fb4043f85d79fa038258d8023b82807a431affa0c901c0265f4833a624b73edbaae6d9b3b3efa87d010d9901ec25f91666572eda0492de6fd9687ae4041d32c0ad861cc7b34cd2ae72fb538c2a53c50381acad1", 0xe3}], 0x1) 41.499624749s ago: executing program 9 (id=5705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = memfd_secret(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100001f, &(0x7f0000000240)={[{@errors_remount}, {@grpquota}, {@i_version}, {@data_err_ignore}]}, 0x21, 0x44b, &(0x7f0000000dc0)="$eJzs281vG0UbAPBn7aR9274lKSof/YAGCqICkTRpgR44tAgkDiAhwaEcQ5JWoW6DmiDRKoKAUDmiShy4IY5I/AWc4IKAExJXuKNKFcqlhZPR2ruJ49hJnNh1iH8/aZWZ3XFmHu+OPbPjDaBnDUXEpxHx/4j4PSIGIiKpLzBU/XN3cX7i78X5iSTK5Tf/Sirl7izOT+RF89ftyzML1fyRBvXOXrt+abxUmrqa5UfmLr83Mnvt+rPTl8cvTl2cujJ25szpU6MvPD/2XFviTNt05/CHM0cPvfr2zdcnzt985+dvkyy8qIujTYbWOvhkmyvrtv016aSviw2hJcWISE9Xf6X/D0Qxlk/eQLzySVcbB3RUuVwu725+eKEM7GBJdLsFQHfkX/Tp/Dff7tHQY1u4fa46AUrjvptt1SN9UcjK9NfNb9spnW2dX/jnq3SLztyHAABY4ftz1b+rx3+FeLCm3NlsbWgwIg7ULG4cjIgHIiplH4qIh1usv36RZPX4p3CrxX/ZknT892K2trVy/JeP/mKwmOX2V+LvTy5Ml6ZORsR9EXEi+nen+dE16vjh5d8+b3ZsqGb8l25p/flYMGvHrb66G3ST43PjW4m51u2PIw73NYo/WVoJSCLiUEQcPra5Oqaf/uZos2Prx7+GNqwzlb+OeKp6/heiLv5csvb65Mj/ojR1ciS/Klb75dcbbzSrv9X4D3y5PGdrh/T87214/S/FP1gu1qzXzrZex40/Pms6p9ns9b8reauS3pXt+2B8bu7qaMSu5LVs/9nl/WPLr83zefk0/hPHG/f/+2P5nTgSEelF/EhEPBoRx7K2PxYRj0fE8TXi/+mlJ97dfPydlcY/uc75T2rX6zeRKF768bsVlQ62En96/k9XUieyPRv5/NtoA7f6/gEAAMB/QaHy2/+kMLyULhSGh6u/lz8Yewulmdm5Zy7MvH9lsvqMwGD0F/I7XQM190NHs2l9nh+ry5/K7ht/UdxTyQ9PzJQmux089Lh9Tfp/6s9it1sHdJzntaB36f/Qu/R/6F36P/SsRs//79lAGWAHaPT9/1EX2gHce8b/0Lta7f/VyYEpAewEvv+hd+n/0JO28lx/JxP5+sN2ac+KRLm8Xpm+7dLUziWisC2aIdGhRJc/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrk3wAAAP//+TvoKw==") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x121401, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r6, 0x400454dc, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r4, @ANYBLOB="4953a0549ce7695abc03000000fbdb670000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800178004000080", @ANYRES8=0x0, @ANYRES32=r4, @ANYRES16=r3, @ANYRESOCT=r4], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x200449a0) syz_clone(0x200000, &(0x7f0000000380)="0b365ba161d528096fdd0850782a757434146bb1adb7e9053ab5504f725ab49e7610cc0928baf1e5329fb3896183a8cc8fa8b4df6cc9ab0358e2795f6b00b038e76a82459f5102ca15a848090972e63ce4bc2e96161ed81e5b64b3fef94fc634ad93c0b4d6efe5de99bde02730e889168af6f865be4d86c94ed1d6367cf89d98500b46761ea40a269e43d901a99df0b943bef65e37313df6134d88db1997380892e67ffcf2", 0xa5, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000440)="44c1d546a054e2a710afe66ac4601900f30624b705aa3a5be55906af113e7a3180f3559c779465b61ae6b898d19bb259847befb825b46226a906a5c41b7eec98bf976ed5bb5bc88b8b418539a43f1cfc1fb0a8c8f29b4e8a09d75e36b7f5cf11e13c9ae96885f198c39aeee420e4ae80404a0fa6895299") 41.149603494s ago: executing program 9 (id=5711): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32=0x1, @ANYBLOB="ff27070200000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000008000000000000000000000000000000f4d34e20661b65f8e40affdaf6"], 0x50) 39.856522243s ago: executing program 9 (id=5733): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='E', 0x1}], 0x1}}], 0x1, 0x8010) 39.834017624s ago: executing program 40 (id=5733): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='E', 0x1}], 0x1}}], 0x1, 0x8010) 2.252868367s ago: executing program 4 (id=6256): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002c40), 0x80, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000004}, 0x18) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/184, 0xb8}], 0x1) (fail_nth: 1) 1.893633972s ago: executing program 4 (id=6261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) nanosleep(&(0x7f0000000280), 0x0) 1.885132322s ago: executing program 4 (id=6262): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004010, &(0x7f00000001c0), 0x1, 0x790, &(0x7f0000001740)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f00000010c0)=""/184, 0xb8) 1.788715004s ago: executing program 8 (id=6263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) nanosleep(&(0x7f0000000280), 0x0) 1.668546206s ago: executing program 4 (id=6265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = inotify_init1(0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000600)={[0xffffffffffff7ffa]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x86000809) rmdir(&(0x7f0000001c00)='./control\x00') recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) truncate(&(0x7f0000000040)='./file0\x00', 0x9) 1.649618406s ago: executing program 8 (id=6266): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4000080) 1.604925836s ago: executing program 8 (id=6269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r0, &(0x7f00000003c0), 0x0, 0x0, 0x7bc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x16, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=0x0, @ANYBLOB="9a8690b0cf818ee1ce239e21c57b9100baa868e3beef4502fb99e69a2ec780da7b81f733702841b877bc5c2187179a8760dee34b96a740ce0c6adb8f8d6b27d6c3fb499bb7df857bcc857ab2427ba7e1c8bd444cbafc2be30097bf7af8591331a6128ef786fba5acbf03d2a4fc32461a4e31c26d2fc44f3f6549718d2b2ad7e58d99297b635071b3d4a67a4b8379d1ecf8911a4c2e080036dc2fbba06de0a8d7159f3eb2f3ee254cb588d1998d1bd951f09ec07832bbc69bf07a8313d29d651b351847c979725fbaa94cc1af404c228b21b0e05772626c37a469c925f37a2b1cbf59aede2a52", @ANYRES8=r4, @ANYRESDEC=r3, @ANYBLOB="7a4c8b5d26cc1f", @ANYRESHEX, @ANYRESDEC=r2, @ANYRESHEX], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) r10 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r10, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) 1.444239229s ago: executing program 6 (id=6274): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4) r3 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1.420711859s ago: executing program 6 (id=6275): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xb9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7, 0x2, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 1.009613945s ago: executing program 7 (id=6281): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000100)={0x3, 'syz0\x00'}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x5, 0x1, 0x80, 0xfffffff8}]}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x110480, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) signalfd4(r4, &(0x7f00000004c0)={[0x100000000]}, 0x8, 0x8a6d4cf0811010b6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='tunl0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r5 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) kcmp(r5, r5, 0x5, r0, 0xffffffffffffffff) 964.082236ms ago: executing program 7 (id=6282): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x62, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 769.588769ms ago: executing program 3 (id=6287): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40100, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYBLOB="9feb0100180000000000e5df057d394dc5b3186bd3f81b341bc59f4cc800000100000000bf4204164fd5048d5da521bd1f269adc2ec374f1f54a6eb7afc25ca0a45e2630f195695226b2a348c628c5cfab37c5423bd1d8cf4d32f4fba862f4e82dc88fceb3a15afdf17e6982b9586418c586f672ad9df827a1fb99424dfd691e7b11ad3cb8b9bb420d9d0a5aa47929e1913eaefdc787f49307f43880c49cd4b0d3343c3ffa6f18cffc1206d86e7fc7c9765083998531c298fd4bb76d81ea56e353aa20a37cbdcea42a6b3c4dcf667054a9c8f5cb1e2b9e8b157ee6e65d"], 0x0, 0x1a, 0x0, 0x1, 0xffffffff}, 0x28) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 769.198429ms ago: executing program 3 (id=6288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 725.830259ms ago: executing program 7 (id=6297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) nanosleep(&(0x7f0000000280), 0x0) 724.948839ms ago: executing program 4 (id=6289): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000200)=ANY=[@ANYBLOB="c40000000000000000000000000000000000000000000000000000000002000000000002000000000a00"/62, @ANYRES64, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000200000000000000fbffffffffffffff0000000000000000050000000000000000000000000000000800000000000000000000000000000000000000000000fd5a00ff"], 0xc4}}, 0x4004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_clone(0x8002000, &(0x7f0000000300)="990b5246948b746f0430720cbdd37a6bf1619898dc01dbdc96cf1271c1cca7984bf9a1bc75114515a614d7cc4824e052465dd8d6a6ec802f40556d0ef7a8b1fd9286d594c4148840dc98af756b02daed700cef0480122a40892fc1548be9cb5553b0d802de4cecead1ecb6ec0d066bd8ea24d7f2d8df429e50cd2a633d6170269faa70a6a3aaf32330d5cadd0b16200e6ba38e423c5c550d280ccf53ccecc128624f55cccb149704de115aeff2b10764b9528376461e5ece342ab30d7ceaef00137f791486df283fbac927a5c8057c289323357423f4654a1ab1d27203e0", 0xde, &(0x7f0000000040), &(0x7f0000000400), &(0x7f0000000500)="3988b8932aa80aee84eebe4da211dc385d6b8e9381ab4d6d789436f996191eda734d629f633e57a98a101bfa5d101f013c166271e26d54bfb8f03c2276aca5dbde8bcc13e749730d86b5ecf799eb6e9598b0b9da9293191af30fa4ec4b41b4d6267a15601d7c0dc077949a0d4c88d794ef4c60eabdfb88dc2fdf3949a2dac47b2b3f9e3d34267733f2ee8d5d676fe896554ea222093e155546e43bc98e852a8d26573d19611c81ed7d192a0b2824712252962ed2ef28176f7ca9d0690b26a33c627b85428dbf0fbd4c565eb211b07f4f379220787f4188e1e1a959b28c6d1d1fcf83d1c38ad5a2") getpriority(0x2, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x201, &(0x7f0000000000)={0x0, 0x300}) r5 = socket$inet6(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000d26a6a1b57858d4af338fe75c300"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x8000000004) setuid(0xee01) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010004080800418e00000004fcff", 0x58}], 0x1) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x143f03) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r8]) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1a000, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) 720.45502ms ago: executing program 8 (id=6290): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x11, 0x10, 0x0, 0xffffffffffffff4c}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x80, 0x7, 0x62a, 0x4, {{0x2c, 0x4, 0x1, 0x12, 0xb0, 0x64, 0x0, 0x89, 0x2f, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x12, "75cef2b632989609719d0a2a8b253e00"}, @ssrr={0x89, 0xf, 0xef, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x28, 0xc9, 0x0, 0x6, [0x6, 0x7, 0x6, 0x7, 0x4, 0xa, 0x6, 0x6, 0x26b5]}, @timestamp_prespec={0x44, 0x2b, 0x82, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xffff8000}, {@rand_addr=0x64010102, 0x5}, {@empty, 0xffffffff}, {@empty, 0xfff}, {@loopback, 0x6}, {@multicast2, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x5}, {@empty, 0x6d}]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r8, 0x5437, 0x300) r9 = dup2(r5, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r10, @ANYRESOCT=r10, @ANYRES64=r10], 0x48) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000000000000000008001e0040000000", 0x24) getsockname$packet(r12, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000050000000000000001000000a0d6ff0701000000852000000500000018010019645c7df149c73508230606b2002020702500000000002020207b1af8ff00000000bfa100000008000007", @ANYRES32=r11, @ANYBLOB="0000000000000000950000000000000085000000a10000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xf4, &(0x7f0000000900)=""/244, 0x40f00, 0x0, '\x00', r13, @fallback=0x29, r14, 0x8, &(0x7f0000000a00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, &(0x7f0000000a40)=[r11, r11, r11, r11, r11, 0xffffffffffffffff, r11, r11, r11], 0x0, 0x10, 0x3}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fddbdf25100000001c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08f61600", @ANYRES32=r15, @ANYBLOB="08000700fcffffff08000600050000002000018008000300000000001400020068737230000000000000000000000000080008000900000008000800000800000800060006000000"], 0x78}, 0x1, 0x0, 0x0, 0x4008081}, 0x800) recvmmsg(r2, 0x0, 0x0, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) 675.85011ms ago: executing program 7 (id=6291): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x11, 0x10, 0x0, 0xffffffffffffff4c}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = syz_genetlink_get_family_id$ethtool(0x0, r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x80, 0x7, 0x62a, 0x4, {{0x2c, 0x4, 0x1, 0x12, 0xb0, 0x64, 0x0, 0x89, 0x2f, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x12, "75cef2b632989609719d0a2a8b253e00"}, @ssrr={0x89, 0xf, 0xef, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x28, 0xc9, 0x0, 0x6, [0x6, 0x7, 0x6, 0x7, 0x4, 0xa, 0x6, 0x6, 0x26b5]}, @timestamp_prespec={0x44, 0x2b, 0x82, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xffff8000}, {@rand_addr=0x64010102, 0x5}, {@empty, 0xffffffff}, {@empty, 0xfff}, {@loopback, 0x6}, {@multicast2, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x5}, {@empty, 0x6d}]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x200000000000000) ioctl$TIOCVHANGUP(r8, 0x5437, 0x300) r9 = dup2(r5, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64=r10, @ANYRESOCT=r10, @ANYRES64=r10], 0x48) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000000000000000000008001e0040000000", 0x24) getsockname$packet(r12, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x14) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000950000000000000085000000a10000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0xf4, &(0x7f0000000900)=""/244, 0x40f00, 0x0, '\x00', r13, @fallback=0x29, r14, 0x8, &(0x7f0000000a00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, &(0x7f0000000a40)=[r11, r11, r11, r11, r11, 0xffffffffffffffff, r11, r11, r11], 0x0, 0x10, 0x3}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040029bd7000fddbdf25100000001c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08f61600", @ANYRES32=r15, @ANYBLOB="08000700fcffffff08000600050000002000018008000300000000001400020068737230000000000000000000000000080008000900000008000800000800000800060006000000"], 0x78}, 0x1, 0x0, 0x0, 0x4008081}, 0x800) recvmmsg(r2, 0x0, 0x0, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) 675.27934ms ago: executing program 3 (id=6292): syz_emit_ethernet(0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x10001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bind$packet(r2, &(0x7f0000000380)={0x11, 0x491392f19d235a36, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 624.810601ms ago: executing program 6 (id=6293): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000100)={0x3, 'syz0\x00'}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x5, 0x1, 0x80, 0xfffffff8}]}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x110480, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) signalfd4(r4, &(0x7f00000004c0)={[0x100000000]}, 0x8, 0x8a6d4cf0811010b6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='tunl0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r5 = getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) kcmp(r5, r5, 0x5, r0, 0xffffffffffffffff) 607.769151ms ago: executing program 3 (id=6294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) nanosleep(&(0x7f0000000280), 0x0) 516.096293ms ago: executing program 3 (id=6295): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r2}, 0x10) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x5c) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xb9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7, 0x2, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r8 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002940), 0x40000000000017d, 0x888) move_mount(r7, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 496.071633ms ago: executing program 6 (id=6296): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYRESOCT=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc814}, 0x4000914) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r2 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) fchownat(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', 0x0, r5, 0x1000) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)={0x20, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}}, 0x20}}, 0x4000054) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x69e, &(0x7f00000017c0)="$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") r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 400.813544ms ago: executing program 7 (id=6298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @multicast1}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 321.944235ms ago: executing program 4 (id=6299): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000fcffff000d000000800000000000003bc7b4d875d552a07c0acc82f3570ede6fd2431e7b7258ba8037b113d0221836440092a7c8932e219149bccafd58056c2fae1cb2a5175a8a842da07ee49d8f44dd3962a55b41509f099bb800ddca4ecc77213ed0f337f3632553233d6a6a7c323413da1c42272b8d9eef515bfd40a8e77ebe8101d10819a0e80f764c5494657043047d38fcf28fbc50e4f98c08db588ef8b616ac6c31671bf45577cfb48f132c88ef6e6c345b2cfea237b2bdf3775c8a82283c", @ANYRES32, @ANYBLOB="f4fbffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) 269.504166ms ago: executing program 8 (id=6300): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa0100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x9}, 0x2, 0x0, 0x5, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) 256.614686ms ago: executing program 7 (id=6301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = inotify_init1(0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000600)={[0xffffffffffff7ffa]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0x86000809) rmdir(&(0x7f0000001c00)='./control\x00') recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/53, 0x35}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) truncate(&(0x7f0000000040)='./file0\x00', 0x9) 252.081626ms ago: executing program 6 (id=6302): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f00000059c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 169.375038ms ago: executing program 8 (id=6303): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x20000000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) sync() (fail_nth: 8) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r7, r6, 0x0, 0x3ffff) 132.578438ms ago: executing program 6 (id=6304): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@jqfmt_vfsv1}]}, 0x1, 0x79c, &(0x7f0000001700)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xb9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x7, 0x2, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @local, 0x3}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x888) 0s ago: executing program 3 (id=6305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYRESOCT=r0], 0xfc}, 0x1, 0x0, 0x0, 0xc814}, 0x4000914) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) r2 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000001fc0)=0xe8) fstat(r3, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000001e80)='./file0\x00', r5, r6, 0x1000) socket$inet_icmp(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)={0x20, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}}, 0x20}}, 0x4000054) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x69e, &(0x7f00000017c0)="$eJzs3VtrG+kdx/HfyLKteEtY2hJCyOFJ0gWHpspI3jiIFLrT0cieVtKIGbnYUFjSjb2EyNk2SaHxzdY3PcD2DfSuN73oiyj0et9Fb0oLS3tX6I3KHHSKTnGiOLub70fsavTMf+b5z4wyf8bSPBIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDlVm27ZKnuN3d2zXRuNQwaM+ana1vWjXTixtx+JSv+T4WCzqdN5789mH0u/t81XUxfXVQhfiro6J1z7979Vj7XW35GQi9DJ13hk2dHD+91OvuPXyB2SSde/ZukXG/qTHZMJgRteU0/CvyGs+UZPwpMZXPTvrVdi0zNr3vRXtT2GsYNvVw7CM26e8OUKpUN4xX3gp3mVtWpe73GO98r2/am+dFqeqAlFSN326/X/eZWEhPPjmPumM9+mgZ4TsOYgwed/Y15WxIHlV4kqDwvqGyXy6VSuVzavF25fce282MNdsyy+zQWsfA3Lb5iFnPiBhYgF9f/v1tSXQU1taNdmYkPV1WFCtSYMj/Tq//v3fJm9jtc/3tV/rz0g2z2BSX1/3L66vK0+v9cDqvZ0kamkD2PPawp7S/wsAbTy0lGRk/0TEd6qHvqqKN9PX7ZdY8+rixkLafw2JKnpnxFCuSrISdpMVmLUUWb2pStD7WtmiIZ1eSrLk+R9hSpLS95R7kK5clRW4FCGa3L1Q0ZlVRRRRsy8lTUngLtqKktVeXov91u90APkv2+MSNH9YJKUwJWh4PKM9Y0rf7/7NP0fZfVf5v6/7ZK3wfZeejzWTHAl0A3u/4flpu/2JXXlxEAAAAAAFg0K/nru5V8dn9JUlc1v+7ZbzotAAAAAACwQJa6q7ooK77+l3RJFtf/AAAAAAB83VjJPXaWpLXkS/3W4E6oF/kjwNIppAgAAAAAAF5Rcuf/5RWpmwxacUXWia7/AQAAAADAV8DvhsbYz/fG2O32PtbPSYpaq9Zf/72qcNk6bu1+xzp0pGU5h1nM2DcA2rUL1tlsoN7kaUVS8sr1LlpZb9kgmP1xB784mDfWvxUOJyA5K0vDK5iSgBX3vJnPXukzXU0XuZqNM3//KKdkTtrLWs2ve0U3qN8tyXHO5trebvuXjx78Sgr723nwoLNf/OiTzv0kl+O46fgwXumnI+nkJu+MQS5Pk/EWknsuJm3xGdV6Xf6+2Vizkn7t3vYvyTnMDXc06wAM+vyNrqXH7NpaGrt21B9xP97+Qrz9pWJyyEa2Ply2BlmUnt/ySQdiShaFJIvracz19esq/yOd7h+FnFX47pJULo4fg5EsysNZzN8X1n/G9sVQFslTb87QvtiIs/hbvKIpWWycLIuxIwIAb8qBLik5C11SMoh5vwoVsrrbKw+9k9pL1Z351f2D0er+9I/dbrLAkpTPPpuY2UtB8Rl93Urq0Eq6SfkLE87odlZXCppyRrdfobrFff1l8BtIWdpjWfyv2+3eLSX9/uG5qvqnke7G+o3q5aV4F956evjzZAD82Mf7H+8/Kpc3Nu33bft2WcvJZmRPS6L2AADGzP+NnbkR1vu6mkZcvf+v99KpkYr3zf5XCor6SJ+oo/u62fsJgSuT17o29DWEm+lVq4auWs25d+8mv0s3GlvSzalXdUktHYot92OX1VtktFIPYjde81EAAOB0XZtThyfX/8JI/b+p9TRi/cLE6+7RWp5dHfcv6afFluYn/8Gi9wYAAG8HL/zCWmv/1gpDv/VhqVIpOe1tz4SB+2MT+tUtz/jNthe6205zyzOtMGgHblA3rVCrftWLTLTTagVh29SC0LSCyN9NfvndZD/9HnkNp9n23ahV95zIM27QbDtu21T9yDWtnR/W/WjbC5OFo5bn+jXfddp+0DRRsBO6XtGYyPOGAv2q12z7NT+ebJpW6DeccM/8JKjvNDxT9SI39FvtIF1hry+/WQvCRrLaYr476fsCAAC8dZ48O3p4r9PZf/z8xJn40jxtOdaUmPGJFT15Fl+Vxy35bBZjBAEA8CUzKOAnWKjwGhMCAAAAAAAAAAAAAAAAAAAAAABj5t/Sd8KJ5Uk3C0r9ll+czVr0aw1uMRxbj6VFJ3aSidxJl+rdEnH08PMZwWf6Lb3dPxxzfGob+M9vSO8kLUpb8ovv68yMg/s6Jr5/kO7RqTHxzImzVvvHIr/4fw7xxKM/T5nV7Xa7sxdfHd2HK7M2cHQiL+nxyiscgtM/FwE4Xf8PAAD//77nMyc=") r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) kernel console output (not intermixed with test programs): :object_r:device_t tclass=chr_file permissive=1 [ 529.684457][T24226] FAULT_INJECTION: forcing a failure. [ 529.684457][T24226] name failslab, interval 1, probability 0, space 0, times 0 [ 529.697343][T24226] CPU: 1 UID: 0 PID: 24226 Comm: syz.6.5542 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 529.697387][T24226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.697440][T24226] Call Trace: [ 529.697448][T24226] [ 529.697456][T24226] __dump_stack+0x1d/0x30 [ 529.697479][T24226] dump_stack_lvl+0xe8/0x140 [ 529.697505][T24226] dump_stack+0x15/0x1b [ 529.697528][T24226] should_fail_ex+0x265/0x280 [ 529.697591][T24226] should_failslab+0x8c/0xb0 [ 529.697705][T24226] __kmalloc_noprof+0xa5/0x3e0 [ 529.697740][T24226] ? io_alloc_ocqe+0x51/0x250 [ 529.697877][T24226] io_alloc_ocqe+0x51/0x250 [ 529.697926][T24226] ? __fsnotify_parent+0x152/0x330 [ 529.698006][T24226] io_cqe_overflow_locked+0x26/0x40 [ 529.698033][T24226] __io_submit_flush_completions+0x258/0xa00 [ 529.698110][T24226] ? io_req_task_complete+0x89/0xa0 [ 529.698148][T24226] ctx_flush_and_put+0x9b/0x150 [ 529.698186][T24226] io_handle_tw_list+0x1a9/0x1c0 [ 529.698225][T24226] tctx_task_work_run+0x6d/0x1a0 [ 529.698414][T24226] tctx_task_work+0x3f/0x80 [ 529.698453][T24226] task_work_run+0x131/0x1a0 [ 529.698483][T24226] get_signal+0xe13/0xf70 [ 529.698549][T24226] ? proc_fail_nth_write+0x12d/0x160 [ 529.698600][T24226] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 529.698645][T24226] ? vfs_write+0x75e/0x8e0 [ 529.698727][T24226] ? __rcu_read_unlock+0x4f/0x70 [ 529.698758][T24226] ? __fget_files+0x184/0x1c0 [ 529.698786][T24226] arch_do_signal_or_restart+0x96/0x480 [ 529.698838][T24226] exit_to_user_mode_loop+0x7a/0x100 [ 529.698869][T24226] do_syscall_64+0x1d6/0x200 [ 529.698895][T24226] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 529.698933][T24226] ? clear_bhb_loop+0x40/0x90 [ 529.698993][T24226] ? clear_bhb_loop+0x40/0x90 [ 529.699100][T24226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.699131][T24226] RIP: 0033:0x7f353705e929 [ 529.699209][T24226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.699236][T24226] RSP: 002b:00007f35356c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 529.699262][T24226] RAX: 0000000000000001 RBX: 00007f3537285fa0 RCX: 00007f353705e929 [ 529.699281][T24226] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000004 [ 529.699299][T24226] RBP: 00007f35356c7090 R08: 0000000000000000 R09: fffffffffffffc76 [ 529.699373][T24226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.699392][T24226] R13: 0000000000000000 R14: 00007f3537285fa0 R15: 00007ffd6f3ccaa8 [ 529.699416][T24226] [ 529.963254][T24108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.975148][T24108] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.018712][T13431] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.025861][T13431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.043780][T24228] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #12: comm syz.3.5540: corrupted in-inode xattr: bad e_name length [ 530.062401][T13431] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.069556][T13431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.113259][ T29] audit: type=1326 audit(1751672427.266:20683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24229 comm="syz.6.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 530.166966][T24230] loop6: detected capacity change from 0 to 1024 [ 530.184831][T24230] EXT4-fs: inline encryption not supported [ 530.191426][T24230] EXT4-fs: Ignoring removed i_version option [ 530.197707][ T29] audit: type=1326 audit(1751672427.266:20684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24229 comm="syz.6.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 530.222111][ T29] audit: type=1326 audit(1751672427.296:20685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24229 comm="syz.6.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 530.245759][ T29] audit: type=1326 audit(1751672427.296:20686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24229 comm="syz.6.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 530.251119][T24108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.284193][T24230] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 530.311034][T24230] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 2: comm syz.6.5543: lblock 2 mapped to illegal pblock 2 (length 1) [ 530.327318][T24230] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 48: comm syz.6.5543: lblock 0 mapped to illegal pblock 48 (length 1) [ 530.344518][T24230] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5543: Failed to acquire dquot type 0 [ 530.356668][T24230] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 530.372292][T24230] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.5543: mark_inode_dirty error [ 530.402529][T24230] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 530.423663][T24230] EXT4-fs (loop6): 1 orphan inode deleted [ 530.518585][T13450] EXT4-fs error (device loop6): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 530.561816][T13450] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0 [ 530.589380][T24230] EXT4-fs error (device loop6): __ext4_get_inode_loc:4792: comm syz.6.5543: Invalid inode table block 1 in block_group 0 [ 530.608410][T24246] loop4: detected capacity change from 0 to 164 [ 530.612659][T24230] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 530.628784][T24251] loop3: detected capacity change from 0 to 164 [ 530.639720][T24230] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz.6.5543: mark_inode_dirty error [ 530.661617][T24246] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 530.671529][T24255] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5545'. [ 530.688933][T24251] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 530.723786][T24108] veth0_vlan: entered promiscuous mode [ 530.769566][T24108] veth1_vlan: entered promiscuous mode [ 530.800629][T24260] loop6: detected capacity change from 0 to 2048 [ 530.825908][T24108] veth0_macvtap: entered promiscuous mode [ 530.834355][T24260] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5548: path /167/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 530.858219][T24108] veth1_macvtap: entered promiscuous mode [ 530.870146][T24108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.889619][T24108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.902629][T24108] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.912177][T24108] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.920982][T24108] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.929806][T24108] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.067977][T24274] loop3: detected capacity change from 0 to 2048 [ 531.074364][T24277] tipc: Enabling of bearer rejected, already enabled [ 531.191116][T24284] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #12: comm syz.3.5553: corrupted in-inode xattr: bad e_name length [ 531.450423][T24300] loop6: detected capacity change from 0 to 128 [ 531.505110][T24301] loop3: detected capacity change from 0 to 1024 [ 531.725721][T24305] loop9: detected capacity change from 0 to 128 [ 531.803192][T24307] tipc: Enabling of bearer rejected, already enabled [ 531.853112][T24313] loop4: detected capacity change from 0 to 2048 [ 531.866250][T24313] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.4.5567: path /541/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 531.955005][T24318] loop4: detected capacity change from 0 to 128 [ 531.977426][T24318] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.012380][T24318] loop4: detected capacity change from 0 to 512 [ 532.019679][T24318] journal_path: Non-blockdev passed as './file0/../file0' [ 532.026852][T24318] EXT4-fs: error: could not find journal device path [ 532.042911][T24331] loop9: detected capacity change from 0 to 128 [ 532.064583][T24329] loop6: detected capacity change from 0 to 164 [ 532.074845][T24329] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 532.240822][T24337] loop4: detected capacity change from 0 to 1024 [ 532.341814][T24344] loop6: detected capacity change from 0 to 2048 [ 532.364413][T24344] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5579: path /177/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 532.399318][T24358] SELinux: Context Ü is not valid (left unmapped). [ 532.648267][T24374] loop6: detected capacity change from 0 to 164 [ 532.675233][T24374] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 532.717290][T24381] loop8: detected capacity change from 0 to 8192 [ 532.818094][T24385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24385 comm=syz.9.5592 [ 532.973917][T24390] loop6: detected capacity change from 0 to 8192 [ 533.170041][T24390] loop6: p1 p3 p4 [ 533.186524][T24390] loop6: p1 size 8390912 extends beyond EOD, truncated [ 533.205607][T24390] loop6: p3 size 589824 extends beyond EOD, truncated [ 533.247115][T24405] loop4: detected capacity change from 0 to 512 [ 533.254758][T24405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 533.293191][T24405] EXT4-fs (loop4): 1 truncate cleaned up [ 533.308136][T24415] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5602'. [ 533.328767][T24405] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 49 (only 1 groups) [ 533.367402][T24405] netlink: 'syz.4.5599': attribute type 39 has an invalid length. [ 533.390377][T24415] loop3: detected capacity change from 0 to 128 [ 533.394373][T24421] loop9: detected capacity change from 0 to 2048 [ 533.405340][T24405] veth1_macvtap: left promiscuous mode [ 533.412343][T24423] loop8: detected capacity change from 0 to 128 [ 533.461273][T24421] EXT4-fs error (device loop9): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.9.5605: path /594/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 533.529226][T24415] syz.3.5602: attempt to access beyond end of device [ 533.529226][T24415] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 533.545842][T24415] syz.3.5602: attempt to access beyond end of device [ 533.545842][T24415] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 533.594928][T24415] syz.3.5602: attempt to access beyond end of device [ 533.594928][T24415] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 533.613397][T24415] syz.3.5602: attempt to access beyond end of device [ 533.613397][T24415] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 533.627694][T24415] syz.3.5602: attempt to access beyond end of device [ 533.627694][T24415] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 533.646963][T24415] syz.3.5602: attempt to access beyond end of device [ 533.646963][T24415] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 533.671795][T24415] syz.3.5602: attempt to access beyond end of device [ 533.671795][T24415] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 533.685815][T24415] syz.3.5602: attempt to access beyond end of device [ 533.685815][T24415] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 533.699623][T24441] random: crng reseeded on system resumption [ 533.706699][T24415] syz.3.5602: attempt to access beyond end of device [ 533.706699][T24415] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 533.721011][T24443] hub 2-0:1.0: USB hub found [ 533.724287][T24444] loop8: detected capacity change from 0 to 128 [ 533.726208][T24443] hub 2-0:1.0: 8 ports detected [ 533.737334][T24415] syz.3.5602: attempt to access beyond end of device [ 533.737334][T24415] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 534.038186][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5617'. [ 534.051754][T24455] loop8: detected capacity change from 0 to 512 [ 534.058394][T24455] EXT4-fs: Ignoring removed bh option [ 534.063949][T24455] EXT4-fs: Ignoring removed mblk_io_submit option [ 534.071910][T24455] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 534.082517][T24455] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 534.090751][T24455] EXT4-fs (loop8): orphan cleanup on readonly fs [ 534.094191][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 534.094213][ T29] audit: type=1326 audit(1751672431.246:21001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35370558e7 code=0x7ffc0000 [ 534.097881][T24455] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 534.114189][ T29] audit: type=1326 audit(1751672431.266:21002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3536ffab19 code=0x7ffc0000 [ 534.127233][T24455] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 534.131473][T24455] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.5617: Failed to acquire dquot type 1 [ 534.137702][ T29] audit: type=1326 audit(1751672431.266:21003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35370558e7 code=0x7ffc0000 [ 534.174569][T24455] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5617: Invalid block bitmap block 0 in block_group 0 [ 534.183184][ T29] audit: type=1326 audit(1751672431.266:21004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3536ffab19 code=0x7ffc0000 [ 534.183231][ T29] audit: type=1326 audit(1751672431.266:21005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 534.231406][T24455] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5617: Invalid block bitmap block 0 in block_group 0 [ 534.246058][ T29] audit: type=1326 audit(1751672431.266:21006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f35370558e7 code=0x7ffc0000 [ 534.272335][T24455] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5617: Invalid block bitmap block 0 in block_group 0 [ 534.283172][ T29] audit: type=1326 audit(1751672431.266:21007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3536ffab19 code=0x7ffc0000 [ 534.283220][ T29] audit: type=1326 audit(1751672431.266:21008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.6.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 534.307876][T24455] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.5617: Failed to acquire dquot type 1 [ 534.382198][T24455] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.5617: Failed to acquire dquot type 1 [ 534.393734][T24455] EXT4-fs (loop8): 1 orphan inode deleted [ 534.473224][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5620'. [ 534.492058][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5620'. [ 534.535838][T24476] pimreg: left allmulticast mode [ 534.731425][T24497] netlink: 'syz.4.5633': attribute type 12 has an invalid length. [ 534.763778][T24497] lo speed is unknown, defaulting to 1000 [ 534.798997][T24495] tipc: Started in network mode [ 534.805505][T24495] tipc: Node identity ac14140f, cluster identity 4711 [ 534.818204][T24495] tipc: New replicast peer: 10.1.1.2 [ 534.826384][T24495] tipc: Enabled bearer , priority 10 [ 534.889501][T24508] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5636'. [ 534.907871][ T7749] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 534.915965][ T7749] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 534.933258][T24508] loop8: detected capacity change from 0 to 1024 [ 534.948272][T24508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.960347][T24510] FAULT_INJECTION: forcing a failure. [ 534.960347][T24510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.973538][T24510] CPU: 1 UID: 0 PID: 24510 Comm: syz.6.5637 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 534.973572][T24510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 534.973653][T24510] Call Trace: [ 534.973661][T24510] [ 534.973670][T24510] __dump_stack+0x1d/0x30 [ 534.973697][T24510] dump_stack_lvl+0xe8/0x140 [ 534.973729][T24510] dump_stack+0x15/0x1b [ 534.973750][T24510] should_fail_ex+0x265/0x280 [ 534.973789][T24510] should_fail+0xb/0x20 [ 534.973883][T24510] should_fail_usercopy+0x1a/0x20 [ 534.974028][T24510] _copy_from_iter+0xcf/0xe40 [ 534.974074][T24510] ? __build_skb_around+0x1a0/0x200 [ 534.974126][T24510] ? __alloc_skb+0x223/0x320 [ 534.974234][T24510] netlink_sendmsg+0x471/0x6b0 [ 534.974264][T24510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.974289][T24510] __sock_sendmsg+0x145/0x180 [ 534.974321][T24510] ____sys_sendmsg+0x31e/0x4e0 [ 534.974407][T24510] ___sys_sendmsg+0x17b/0x1d0 [ 534.974463][T24510] __x64_sys_sendmsg+0xd4/0x160 [ 534.974556][T24510] x64_sys_call+0x2999/0x2fb0 [ 534.974584][T24510] do_syscall_64+0xd2/0x200 [ 534.974603][T24510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 534.974688][T24510] ? clear_bhb_loop+0x40/0x90 [ 534.974728][T24510] ? clear_bhb_loop+0x40/0x90 [ 534.974758][T24510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.974787][T24510] RIP: 0033:0x7f353705e929 [ 534.974818][T24510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.974885][T24510] RSP: 002b:00007f35356c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.974962][T24510] RAX: ffffffffffffffda RBX: 00007f3537285fa0 RCX: 00007f353705e929 [ 534.974980][T24510] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000006 [ 534.974997][T24510] RBP: 00007f35356c7090 R08: 0000000000000000 R09: 0000000000000000 [ 534.975012][T24510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.975026][T24510] R13: 0000000000000000 R14: 00007f3537285fa0 R15: 00007ffd6f3ccaa8 [ 534.975050][T24510] [ 534.975749][T24508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 535.123675][T24521] loop4: detected capacity change from 0 to 512 [ 535.221008][T24521] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 535.295999][T24532] loop6: detected capacity change from 0 to 2048 [ 535.306039][T24532] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5645: path /194/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 535.408855][T24537] tipc: Enabling of bearer rejected, already enabled [ 535.534618][T24552] loop8: detected capacity change from 0 to 128 [ 535.575135][T24557] FAULT_INJECTION: forcing a failure. [ 535.575135][T24557] name failslab, interval 1, probability 0, space 0, times 0 [ 535.588758][T24557] CPU: 0 UID: 0 PID: 24557 Comm: syz.4.5655 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 535.588790][T24557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.588806][T24557] Call Trace: [ 535.588814][T24557] [ 535.588824][T24557] __dump_stack+0x1d/0x30 [ 535.588906][T24557] dump_stack_lvl+0xe8/0x140 [ 535.588926][T24557] dump_stack+0x15/0x1b [ 535.588942][T24557] should_fail_ex+0x265/0x280 [ 535.588978][T24557] should_failslab+0x8c/0xb0 [ 535.589037][T24557] __kvmalloc_node_noprof+0x123/0x4e0 [ 535.589072][T24557] ? listxattr+0x4a/0x260 [ 535.589102][T24557] listxattr+0x4a/0x260 [ 535.589129][T24557] path_listxattrat+0x106/0x2a0 [ 535.589161][T24557] __x64_sys_llistxattr+0x4d/0x60 [ 535.589229][T24557] x64_sys_call+0x2a1d/0x2fb0 [ 535.589272][T24557] do_syscall_64+0xd2/0x200 [ 535.589292][T24557] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 535.589363][T24557] ? clear_bhb_loop+0x40/0x90 [ 535.589389][T24557] ? clear_bhb_loop+0x40/0x90 [ 535.589415][T24557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.589439][T24557] RIP: 0033:0x7f51c750e929 [ 535.589457][T24557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.589507][T24557] RSP: 002b:00007f51c5b77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 535.589594][T24557] RAX: ffffffffffffffda RBX: 00007f51c7735fa0 RCX: 00007f51c750e929 [ 535.589608][T24557] RDX: 0000000000000026 RSI: 0000200000000080 RDI: 0000200000000580 [ 535.589621][T24557] RBP: 00007f51c5b77090 R08: 0000000000000000 R09: 0000000000000000 [ 535.589635][T24557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.589659][T24557] R13: 0000000000000000 R14: 00007f51c7735fa0 R15: 00007fff99ccca58 [ 535.589680][T24557] [ 535.732988][T24558] lo speed is unknown, defaulting to 1000 [ 535.846011][T24571] FAULT_INJECTION: forcing a failure. [ 535.846011][T24571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.859213][T24571] CPU: 1 UID: 0 PID: 24571 Comm: syz.3.5657 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 535.859301][T24571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.859317][T24571] Call Trace: [ 535.859324][T24571] [ 535.859331][T24571] __dump_stack+0x1d/0x30 [ 535.859357][T24571] dump_stack_lvl+0xe8/0x140 [ 535.859380][T24571] dump_stack+0x15/0x1b [ 535.859397][T24571] should_fail_ex+0x265/0x280 [ 535.859446][T24571] should_fail+0xb/0x20 [ 535.859483][T24571] should_fail_usercopy+0x1a/0x20 [ 535.859632][T24571] _copy_from_user+0x1c/0xb0 [ 535.859653][T24571] memdup_user+0x5e/0xd0 [ 535.859720][T24571] strndup_user+0x68/0xb0 [ 535.859751][T24571] __se_sys_request_key+0x11e/0x290 [ 535.859784][T24571] ? fput+0x8f/0xc0 [ 535.859823][T24571] __x64_sys_request_key+0x55/0x70 [ 535.859848][T24571] x64_sys_call+0x2f19/0x2fb0 [ 535.859888][T24571] do_syscall_64+0xd2/0x200 [ 535.859913][T24571] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 535.859942][T24571] ? clear_bhb_loop+0x40/0x90 [ 535.859963][T24571] ? clear_bhb_loop+0x40/0x90 [ 535.860044][T24571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.860136][T24571] RIP: 0033:0x7f19089ce929 [ 535.860155][T24571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.860179][T24571] RSP: 002b:00007f1907037038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 535.860203][T24571] RAX: ffffffffffffffda RBX: 00007f1908bf5fa0 RCX: 00007f19089ce929 [ 535.860221][T24571] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000000 [ 535.860396][T24571] RBP: 00007f1907037090 R08: 0000000000000000 R09: 0000000000000000 [ 535.860412][T24571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.860427][T24571] R13: 0000000000000000 R14: 00007f1908bf5fa0 R15: 00007ffd16482d78 [ 535.860445][T24571] [ 535.860464][ T3418] tipc: Node number set to 2886997007 [ 536.080364][T24558] chnl_net:caif_netlink_parms(): no params data found [ 536.098221][T24578] tipc: Enabling of bearer rejected, already enabled [ 536.161537][T24594] loop6: detected capacity change from 0 to 1024 [ 536.187200][T24558] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.194500][T24558] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.202369][T24587] loop8: detected capacity change from 0 to 164 [ 536.212367][T24558] bridge_slave_0: entered allmulticast mode [ 536.219318][T24558] bridge_slave_0: entered promiscuous mode [ 536.235742][T24558] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.240827][T24582] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 536.242967][T24558] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.266954][T24558] bridge_slave_1: entered allmulticast mode [ 536.273766][T24558] bridge_slave_1: entered promiscuous mode [ 536.286070][T24601] loop4: detected capacity change from 0 to 164 [ 536.305885][T24598] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 536.316297][T24558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.327113][T24558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.365291][T24558] team0: Port device team_slave_0 added [ 536.372651][T24558] team0: Port device team_slave_1 added [ 536.392305][T24558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.399821][T24558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.426584][T24558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.427504][T24608] loop8: detected capacity change from 0 to 128 [ 536.441089][T24558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.451608][T24558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.478204][T24558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.506700][T24611] FAULT_INJECTION: forcing a failure. [ 536.506700][T24611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.520608][T24611] CPU: 0 UID: 0 PID: 24611 Comm: syz.4.5670 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 536.520709][T24611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 536.520722][T24611] Call Trace: [ 536.520727][T24611] [ 536.520734][T24611] __dump_stack+0x1d/0x30 [ 536.520753][T24611] dump_stack_lvl+0xe8/0x140 [ 536.520771][T24611] dump_stack+0x15/0x1b [ 536.520785][T24611] should_fail_ex+0x265/0x280 [ 536.520843][T24611] should_fail+0xb/0x20 [ 536.520869][T24611] should_fail_usercopy+0x1a/0x20 [ 536.520912][T24611] _copy_from_user+0x1c/0xb0 [ 536.520931][T24611] ___sys_sendmsg+0xc1/0x1d0 [ 536.520974][T24611] __x64_sys_sendmsg+0xd4/0x160 [ 536.521068][T24611] x64_sys_call+0x2999/0x2fb0 [ 536.521087][T24611] do_syscall_64+0xd2/0x200 [ 536.521146][T24611] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 536.521170][T24611] ? clear_bhb_loop+0x40/0x90 [ 536.521189][T24611] ? clear_bhb_loop+0x40/0x90 [ 536.521208][T24611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.521300][T24611] RIP: 0033:0x7f51c750e929 [ 536.521315][T24611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.521331][T24611] RSP: 002b:00007f51c5b56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.521348][T24611] RAX: ffffffffffffffda RBX: 00007f51c7736080 RCX: 00007f51c750e929 [ 536.521359][T24611] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 536.521376][T24611] RBP: 00007f51c5b56090 R08: 0000000000000000 R09: 0000000000000000 [ 536.521387][T24611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.521398][T24611] R13: 0000000000000000 R14: 00007f51c7736080 R15: 00007fff99ccca58 [ 536.521415][T24611] [ 536.525713][T24558] hsr_slave_0: entered promiscuous mode [ 536.572659][T24613] loop6: detected capacity change from 0 to 128 [ 536.574147][T24558] hsr_slave_1: entered promiscuous mode [ 536.725552][T24558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.734000][T24558] Cannot create hsr debugfs directory [ 536.813658][T24558] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.859098][T24623] tipc: Enabling of bearer rejected, already enabled [ 536.871133][T24558] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.903347][T24632] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5677'. [ 536.919515][T24629] loop3: detected capacity change from 0 to 164 [ 536.929396][T24629] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 536.938638][T24558] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.000727][T24558] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.046645][T24644] loop6: detected capacity change from 0 to 1024 [ 537.120740][T24558] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 537.138750][T24558] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 537.148879][T24558] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 537.158278][T24558] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 537.213654][T24558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.231667][T24558] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.242604][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.249806][T13425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.274776][T13425] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.282034][T13425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.348239][T24558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.497290][T24558] veth0_vlan: entered promiscuous mode [ 537.510041][T24558] veth1_vlan: entered promiscuous mode [ 537.535004][T24678] loop6: detected capacity change from 0 to 128 [ 537.541633][T24676] loop4: detected capacity change from 0 to 2048 [ 537.542123][T24558] veth0_macvtap: entered promiscuous mode [ 537.557221][T24558] veth1_macvtap: entered promiscuous mode [ 537.569143][T24558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.579995][T24676] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.4.5686: path /575/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 537.581613][T24558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.612541][T24558] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.621490][T24558] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.631074][T24558] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.639960][T24558] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.903532][T24710] loop6: detected capacity change from 0 to 1024 [ 538.074231][T24719] tipc: Enabling of bearer rejected, already enabled [ 538.127225][T24721] loop4: detected capacity change from 0 to 164 [ 538.137096][T24721] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 538.457020][T24735] loop9: detected capacity change from 0 to 512 [ 538.465310][T24735] EXT4-fs: Ignoring removed i_version option [ 538.473130][T24735] EXT4-fs (loop9): orphan cleanup on readonly fs [ 538.481859][T24735] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5705: bg 0: block 131: padding at end of block bitmap is not set [ 538.497191][T24735] EXT4-fs (loop9): Remounting filesystem read-only [ 538.505431][T24735] EXT4-fs (loop9): 1 truncate cleaned up [ 539.085620][T24761] lo speed is unknown, defaulting to 1000 [ 539.101804][T24762] lo speed is unknown, defaulting to 1000 [ 539.195494][T24775] loop4: detected capacity change from 0 to 1024 [ 539.254803][T24776] tipc: Enabling of bearer rejected, already enabled [ 539.375178][T24783] loop8: detected capacity change from 0 to 164 [ 539.394375][T24783] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 539.568327][T24801] loop3: detected capacity change from 0 to 2048 [ 539.721273][T24811] loop4: detected capacity change from 0 to 2048 [ 540.179468][T24809] Set syz1 is full, maxelem 65536 reached [ 540.190739][ T6063] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.242428][T24823] loop6: detected capacity change from 0 to 164 [ 540.252423][T24823] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 540.298833][T24817] lo speed is unknown, defaulting to 1000 [ 540.358785][T24832] loop8: detected capacity change from 0 to 164 [ 540.376462][T24832] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 540.379105][T24817] chnl_net:caif_netlink_parms(): no params data found [ 540.445840][T24817] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.453789][T24817] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.481179][T24817] bridge_slave_0: entered allmulticast mode [ 540.498143][T24817] bridge_slave_0: entered promiscuous mode [ 540.514267][T24817] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.521569][T24817] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.539155][T24817] bridge_slave_1: entered allmulticast mode [ 540.562896][T24817] bridge_slave_1: entered promiscuous mode [ 540.600318][T24817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.611228][T24817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.637503][T24854] loop4: detected capacity change from 0 to 2048 [ 540.653107][T24817] team0: Port device team_slave_0 added [ 540.662234][T24817] team0: Port device team_slave_1 added [ 540.726413][T24817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.733584][T24817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.760910][T24817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.785622][T24817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.792825][T24817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.818893][T24817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.853412][T24868] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #12: comm syz.4.5743: corrupted in-inode xattr: bad e_name length [ 540.904787][T24870] loop8: detected capacity change from 0 to 164 [ 540.915997][T24870] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 540.931599][T24817] hsr_slave_0: entered promiscuous mode [ 540.937968][T24817] hsr_slave_1: entered promiscuous mode [ 540.945565][T24817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.953379][T24817] Cannot create hsr debugfs directory [ 541.176928][T24880] loop8: detected capacity change from 0 to 1024 [ 541.430120][T24862] Set syz1 is full, maxelem 65536 reached [ 541.491902][T24886] loop3: detected capacity change from 0 to 2048 [ 541.511490][T24886] EXT4-fs mount: 77 callbacks suppressed [ 541.511510][T24886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.704273][ T6063] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.732392][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.774996][ T6063] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.861880][ T6063] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.938004][T24910] loop4: detected capacity change from 0 to 2048 [ 541.949740][T24910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.966874][T24913] loop6: detected capacity change from 0 to 2048 [ 541.976001][T24910] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.4.5761: path /593/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 541.982569][T24913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.010020][ T6063] bridge_slave_1: left allmulticast mode [ 542.015721][ T6063] bridge_slave_1: left promiscuous mode [ 542.022268][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.030996][ T6063] bridge_slave_0: left allmulticast mode [ 542.036798][ T6063] bridge_slave_0: left promiscuous mode [ 542.042627][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.057011][T24913] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5762: path /218/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 542.092564][T14095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.125184][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.146226][T24917] loop8: detected capacity change from 0 to 1024 [ 542.180462][T24917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.201523][ T6063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.223691][ T6063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.262723][ T6063] bond0 (unregistering): Released all slaves [ 542.272759][T24932] loop6: detected capacity change from 0 to 2048 [ 542.291079][T24932] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.338339][T24817] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 542.351899][T24932] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5769: path /223/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 542.376539][T24817] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 542.387375][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.401143][T24817] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 542.419216][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.452225][ T6063] hsr_slave_0: left promiscuous mode [ 542.476015][ T6063] hsr_slave_1: left promiscuous mode [ 542.493218][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 542.500784][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.520745][T24943] loop4: detected capacity change from 0 to 2048 [ 542.537522][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 542.545129][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.557492][T24943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.578299][T24943] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.4.5774: path /596/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 542.682240][ T6063] veth1_macvtap: left promiscuous mode [ 542.688022][ T6063] veth0_macvtap: left promiscuous mode [ 542.693780][ T6063] veth1_vlan: left promiscuous mode [ 542.699326][ T6063] veth0_vlan: left promiscuous mode [ 542.721096][T14095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.784954][T24950] loop4: detected capacity change from 0 to 256 [ 542.839685][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.013502][ T6063] team0 (unregistering): Port device team_slave_1 removed [ 543.067217][ T6063] team0 (unregistering): Port device team_slave_0 removed [ 543.262696][T24941] Set syz1 is full, maxelem 65536 reached [ 543.270249][T24817] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 543.294386][T24953] tipc: Enabling of bearer rejected, already enabled [ 543.384294][T24967] loop6: detected capacity change from 0 to 2048 [ 543.384705][T24969] loop4: detected capacity change from 0 to 2048 [ 543.409534][T24967] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.424510][T24817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.433860][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 543.433878][ T29] audit: type=1326 audit(1751672440.586:21072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.3.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19089ce929 code=0x7ffc0000 [ 543.437798][T24817] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.443129][T24967] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5780: path /225/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 543.478131][T24817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.502566][T24817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.508641][ T29] audit: type=1326 audit(1751672440.656:21073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.3.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19089ce929 code=0x7ffc0000 [ 543.537489][ T29] audit: type=1326 audit(1751672440.656:21074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.3.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19089ce929 code=0x7ffc0000 [ 543.561870][ T29] audit: type=1326 audit(1751672440.656:21075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.3.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19089ce929 code=0x7ffc0000 [ 543.567714][T24817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.594648][ T29] audit: type=1326 audit(1751672440.746:21076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.3.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f19089ce929 code=0x7ffc0000 [ 543.598155][T13431] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.618441][ T29] audit: type=1326 audit(1751672440.746:21077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.3.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19089ce929 code=0x7ffc0000 [ 543.625381][T13431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.630436][T13431] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.650534][ T29] audit: type=1326 audit(1751672440.746:21078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24970 comm="syz.3.5782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19089ce929 code=0x7ffc0000 [ 543.656913][T13431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.687923][T24982] loop8: detected capacity change from 0 to 164 [ 543.706074][T24982] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 543.706357][T24969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.749700][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.814549][T24997] loop8: detected capacity change from 0 to 164 [ 543.842151][T24997] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 543.916867][T24817] veth0_vlan: entered promiscuous mode [ 543.927437][T24817] veth1_vlan: entered promiscuous mode [ 543.946160][T24817] veth0_macvtap: entered promiscuous mode [ 543.955598][T24817] veth1_macvtap: entered promiscuous mode [ 543.967659][T24817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 543.979832][T24817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.989583][T25013] tipc: Enabling of bearer rejected, already enabled [ 544.001053][T24817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.009872][T24817] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.018698][T24817] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.027680][T24817] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.145385][ T29] audit: type=1326 audit(1751672441.296:21079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25023 comm="syz.7.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 544.169676][ T29] audit: type=1326 audit(1751672441.296:21080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25023 comm="syz.7.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 544.193572][ T29] audit: type=1326 audit(1751672441.296:21081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25023 comm="syz.7.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 544.251239][T14095] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.398266][T25038] loop6: detected capacity change from 0 to 2048 [ 544.460419][T25038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.514652][T25038] lo speed is unknown, defaulting to 1000 [ 544.813444][T25036] lo speed is unknown, defaulting to 1000 [ 545.112685][T25036] chnl_net:caif_netlink_parms(): no params data found [ 545.327440][T25036] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.334758][T25036] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.344321][T25036] bridge_slave_0: entered allmulticast mode [ 545.416870][T25036] bridge_slave_0: entered promiscuous mode [ 545.472569][T25036] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.479826][T25036] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.758125][T25028] Set syz1 is full, maxelem 65536 reached [ 545.771550][T25036] bridge_slave_1: entered allmulticast mode [ 545.834566][T25036] bridge_slave_1: entered promiscuous mode [ 545.992533][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.041094][T25064] loop7: detected capacity change from 0 to 2048 [ 546.050205][T25064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.173749][T25047] Set syz1 is full, maxelem 65536 reached [ 546.182269][T25036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.205969][T13450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.217212][T13450] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.242669][T25036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.315069][T25074] loop8: detected capacity change from 0 to 2048 [ 546.323813][T13450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.335065][T13450] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.348782][T25074] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.363625][T25075] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #12: comm syz.7.5805: corrupted in-inode xattr: bad e_name length [ 546.378150][T25062] tipc: Started in network mode [ 546.385519][T25062] tipc: Node identity ac14140f, cluster identity 4711 [ 546.411988][T25062] tipc: New replicast peer: 10.1.1.2 [ 546.418312][T25062] tipc: Enabled bearer , priority 10 [ 546.450713][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.472292][T25036] team0: Port device team_slave_0 added [ 546.484262][T13450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.494787][T13450] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.517859][T25082] loop6: detected capacity change from 0 to 2048 [ 546.527508][T25036] team0: Port device team_slave_1 added [ 546.530152][T25082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.550231][T25082] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5811: path /232/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 546.588867][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.604684][T25036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.611727][T25036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.638613][T25036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.661130][T13450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.671595][T13450] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.685939][T25036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.693678][T25036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.720627][T25036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.922893][T25036] hsr_slave_0: entered promiscuous mode [ 546.929232][T25036] hsr_slave_1: entered promiscuous mode [ 546.935185][T25036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.942943][T25036] Cannot create hsr debugfs directory [ 546.977764][T25106] loop3: detected capacity change from 0 to 256 [ 546.984963][T13450] team0: left allmulticast mode [ 546.994282][T13450] team_slave_0: left allmulticast mode [ 546.999898][T13450] team_slave_1: left allmulticast mode [ 547.005772][T13450] team0: left promiscuous mode [ 547.007815][T25106] bio_check_eod: 33 callbacks suppressed [ 547.007837][T25106] syz.3.5817: attempt to access beyond end of device [ 547.007837][T25106] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 547.013827][T13450] team_slave_0: left promiscuous mode [ 547.036330][T13450] team_slave_1: left promiscuous mode [ 547.042100][T13450] bridge0: port 3(team0) entered disabled state [ 547.054389][T25108] loop6: detected capacity change from 0 to 2048 [ 547.062301][T13450] bridge_slave_1: left allmulticast mode [ 547.068043][T13450] bridge_slave_1: left promiscuous mode [ 547.073996][T13450] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.081455][T25108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 547.095838][T13450] bridge_slave_0: left allmulticast mode [ 547.101911][T13450] bridge_slave_0: left promiscuous mode [ 547.107753][T13450] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.143785][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.220347][T25108] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #12: comm syz.6.5818: corrupted in-inode xattr: bad e_name length [ 548.250852][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.562369][ T3418] tipc: Node number set to 2886997007 [ 560.568178][T25115] Set syz1 is full, maxelem 65536 reached [ 560.598452][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 560.598471][ T29] audit: type=1326 audit(1751672457.746:21194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.649174][ T29] audit: type=1326 audit(1751672457.746:21195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.657386][T25142] loop6: detected capacity change from 0 to 2048 [ 560.673112][ T29] audit: type=1326 audit(1751672457.756:21196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.673162][ T29] audit: type=1326 audit(1751672457.756:21197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.673196][ T29] audit: type=1326 audit(1751672457.756:21198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.673229][ T29] audit: type=1326 audit(1751672457.756:21199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.673332][ T29] audit: type=1326 audit(1751672457.756:21200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.673367][ T29] audit: type=1326 audit(1751672457.756:21201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.673398][ T29] audit: type=1326 audit(1751672457.756:21202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.673508][ T29] audit: type=1326 audit(1751672457.756:21203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25137 comm="syz.8.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cffdae929 code=0x7ffc0000 [ 560.786273][T25145] loop8: detected capacity change from 0 to 2048 [ 560.851323][T25142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.900957][T25145] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.915923][T13450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.927515][T13450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.937909][T13450] bond0 (unregistering): Released all slaves [ 560.947961][T13450] bond1 (unregistering): Released all slaves [ 560.983684][T13450] tipc: Disabling bearer [ 560.989896][T13450] tipc: Disabling bearer [ 560.995236][T13450] tipc: Left network mode [ 561.030023][T13450] hsr_slave_0: left promiscuous mode [ 561.033954][T25157] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #12: comm syz.8.5830: corrupted in-inode xattr: bad e_name length [ 561.049740][T13450] hsr_slave_1: left promiscuous mode [ 561.055542][T13450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.063170][T13450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.098159][T13450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.105770][T13450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.115004][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.126624][T13450] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 561.133654][T13450] batman_adv: batadv0: Removing interface: ipvlan2 [ 561.152138][T13450] veth0_macvtap: left promiscuous mode [ 561.157759][T13450] veth1_vlan: left promiscuous mode [ 561.166109][T25164] loop8: detected capacity change from 0 to 2048 [ 561.176383][T25164] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.182522][T13450] veth0_vlan: left promiscuous mode [ 561.195321][T25164] EXT4-fs error (device loop8): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.8.5835: path /72/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 561.235109][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.252310][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.277827][T13450] pimreg (unregistering): left allmulticast mode [ 561.325198][T25176] loop6: detected capacity change from 0 to 2048 [ 561.334666][T25176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.357933][T25176] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5840: path /241/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 561.381694][T13450] team0 (unregistering): Port device team_slave_1 removed [ 561.448795][T13450] team0 (unregistering): Port device team_slave_0 removed [ 561.559485][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.879520][T25208] loop8: detected capacity change from 0 to 2048 [ 561.888294][T25208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.903216][T25208] EXT4-fs error (device loop8): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.8.5851: path /80/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 561.921753][T25036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 561.945734][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.957461][T25036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 561.977037][T25036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 561.996218][T25036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 562.076955][T25227] loop6: detected capacity change from 0 to 164 [ 562.096284][T25227] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 562.096884][T25036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.120748][T25036] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.140278][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.147484][T13425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.164768][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.171973][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.218467][T25238] loop6: detected capacity change from 0 to 2048 [ 562.242924][T25241] loop8: detected capacity change from 0 to 2048 [ 562.256523][T25238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.280214][T25241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.280680][T25238] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5862: path /246/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 562.328917][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.368239][T25036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.412250][T25255] loop7: detected capacity change from 0 to 2048 [ 562.435016][T25260] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #12: comm syz.8.5863: corrupted in-inode xattr: bad e_name length [ 562.464239][T25255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.492315][T25255] EXT4-fs error (device loop7): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.7.5867: path /19/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 562.537716][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.582577][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.620548][T25036] veth0_vlan: entered promiscuous mode [ 562.642532][T25036] veth1_vlan: entered promiscuous mode [ 562.676917][T25036] veth0_macvtap: entered promiscuous mode [ 562.707685][T25292] loop3: detected capacity change from 0 to 2048 [ 562.718729][T25292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.731888][T25036] veth1_macvtap: entered promiscuous mode [ 562.743138][T25292] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.5877: path /76/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 562.746035][T25036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.773460][T25036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.782602][T25036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.791668][T25036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.793416][T25294] loop8: detected capacity change from 0 to 164 [ 562.800460][T25036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.815779][T25036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.831371][T25294] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 562.854466][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.914529][T25299] 9pnet_virtio: no channels available for device 127.0.0.1 [ 562.922206][T25303] loop8: detected capacity change from 0 to 2048 [ 562.930568][T25299] loop3: detected capacity change from 0 to 256 [ 562.941488][T25303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.003185][T25311] loop3: detected capacity change from 0 to 2048 [ 563.017415][T25305] loop4: detected capacity change from 0 to 164 [ 563.028374][T25305] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 563.040975][T25311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.083345][T25312] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #12: comm syz.8.5880: corrupted in-inode xattr: bad e_name length [ 563.111108][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.143304][T25324] FAULT_INJECTION: forcing a failure. [ 563.143304][T25324] name failslab, interval 1, probability 0, space 0, times 0 [ 563.156823][T25324] CPU: 0 UID: 0 PID: 25324 Comm: syz.4.5886 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 563.156854][T25324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.156868][T25324] Call Trace: [ 563.156875][T25324] [ 563.156883][T25324] __dump_stack+0x1d/0x30 [ 563.156908][T25324] dump_stack_lvl+0xe8/0x140 [ 563.156930][T25324] dump_stack+0x15/0x1b [ 563.156948][T25324] should_fail_ex+0x265/0x280 [ 563.156983][T25324] should_failslab+0x8c/0xb0 [ 563.157008][T25324] kmem_cache_alloc_noprof+0x50/0x310 [ 563.157038][T25324] ? mas_alloc_nodes+0x265/0x520 [ 563.157062][T25324] mas_alloc_nodes+0x265/0x520 [ 563.157086][T25324] mas_preallocate+0x33e/0x520 [ 563.157127][T25324] vma_link+0x8b/0x220 [ 563.157155][T25324] insert_vm_struct+0x113/0x1a0 [ 563.157183][T25324] create_init_stack_vma+0x1a9/0x390 [ 563.157214][T25324] alloc_bprm+0x2b9/0x350 [ 563.157252][T25324] do_execveat_common+0x12e/0x750 [ 563.157293][T25324] __x64_sys_execve+0x5c/0x70 [ 563.157329][T25324] x64_sys_call+0x13ab/0x2fb0 [ 563.157352][T25324] do_syscall_64+0xd2/0x200 [ 563.157370][T25324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 563.157398][T25324] ? clear_bhb_loop+0x40/0x90 [ 563.157421][T25324] ? clear_bhb_loop+0x40/0x90 [ 563.157445][T25324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.157468][T25324] RIP: 0033:0x7f398947e929 [ 563.157485][T25324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.157504][T25324] RSP: 002b:00007f3987ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 563.157523][T25324] RAX: ffffffffffffffda RBX: 00007f39896a5fa0 RCX: 00007f398947e929 [ 563.157536][T25324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 563.157549][T25324] RBP: 00007f3987ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 563.157562][T25324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.157574][T25324] R13: 0000000000000000 R14: 00007f39896a5fa0 R15: 00007fff20361a68 [ 563.157595][T25324] [ 563.417724][T25331] loop6: detected capacity change from 0 to 2048 [ 563.426822][T25331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.446566][T25331] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5889: path /250/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 563.499160][T25340] loop4: detected capacity change from 0 to 164 [ 563.506845][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.518487][T25340] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 563.526515][T25342] loop8: detected capacity change from 0 to 164 [ 563.544773][T25342] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 563.717668][T25370] loop6: detected capacity change from 0 to 2048 [ 563.738405][T25372] team0 (unregistering): Port device team_slave_0 removed [ 563.738707][T25370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.764340][T25370] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5906: path /256/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 563.787096][T25372] team0 (unregistering): Port device team_slave_1 removed [ 563.814344][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.849754][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.863772][T25375] loop8: detected capacity change from 0 to 164 [ 563.882757][T25375] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 563.938898][T25391] FAULT_INJECTION: forcing a failure. [ 563.938898][T25391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.942977][T25389] FAULT_INJECTION: forcing a failure. [ 563.942977][T25389] name failslab, interval 1, probability 0, space 0, times 0 [ 563.952793][T25391] CPU: 1 UID: 0 PID: 25391 Comm: syz.6.5917 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 563.952847][T25391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.952867][T25391] Call Trace: [ 563.952879][T25391] [ 563.952890][T25391] __dump_stack+0x1d/0x30 [ 563.952920][T25391] dump_stack_lvl+0xe8/0x140 [ 563.952950][T25391] dump_stack+0x15/0x1b [ 563.953054][T25391] should_fail_ex+0x265/0x280 [ 563.953100][T25391] should_fail+0xb/0x20 [ 563.953141][T25391] should_fail_usercopy+0x1a/0x20 [ 563.953209][T25391] _copy_to_user+0x20/0xa0 [ 563.953240][T25391] simple_read_from_buffer+0xb5/0x130 [ 563.953287][T25391] proc_fail_nth_read+0x100/0x140 [ 563.953381][T25391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.953428][T25391] vfs_read+0x1a0/0x6f0 [ 563.953549][T25391] ? __rcu_read_unlock+0x4f/0x70 [ 563.953581][T25391] ? __fget_files+0x184/0x1c0 [ 563.953613][T25391] ksys_read+0xda/0x1a0 [ 563.953714][T25391] __x64_sys_read+0x40/0x50 [ 563.953760][T25391] x64_sys_call+0x2d77/0x2fb0 [ 563.953838][T25391] do_syscall_64+0xd2/0x200 [ 563.953868][T25391] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 563.953906][T25391] ? clear_bhb_loop+0x40/0x90 [ 563.953937][T25391] ? clear_bhb_loop+0x40/0x90 [ 563.953969][T25391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.954001][T25391] RIP: 0033:0x7f353705d33c [ 563.954098][T25391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 563.954156][T25391] RSP: 002b:00007f35356c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.954186][T25391] RAX: ffffffffffffffda RBX: 00007f3537285fa0 RCX: 00007f353705d33c [ 563.954205][T25391] RDX: 000000000000000f RSI: 00007f35356c70a0 RDI: 0000000000000005 [ 563.954261][T25391] RBP: 00007f35356c7090 R08: 0000000000000000 R09: 0000000000000000 [ 563.954280][T25391] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 563.954298][T25391] R13: 0000000000000000 R14: 00007f3537285fa0 R15: 00007ffd6f3ccaa8 [ 563.954326][T25391] [ 564.179788][T25389] CPU: 0 UID: 0 PID: 25389 Comm: syz.4.5915 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 564.179826][T25389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.179844][T25389] Call Trace: [ 564.179852][T25389] [ 564.179862][T25389] __dump_stack+0x1d/0x30 [ 564.179881][T25389] dump_stack_lvl+0xe8/0x140 [ 564.180011][T25389] dump_stack+0x15/0x1b [ 564.180093][T25389] should_fail_ex+0x265/0x280 [ 564.180123][T25389] should_failslab+0x8c/0xb0 [ 564.180199][T25389] kmem_cache_alloc_node_noprof+0x57/0x320 [ 564.180225][T25389] ? __alloc_skb+0x101/0x320 [ 564.180253][T25389] __alloc_skb+0x101/0x320 [ 564.180306][T25389] ? _raw_spin_unlock_bh+0x36/0x40 [ 564.180329][T25389] inet_ifmcaddr_notify+0x64/0x120 [ 564.180372][T25389] __ip_mc_dec_group+0x1ac/0x3d0 [ 564.180402][T25389] ip_mc_down+0x13d/0x1c0 [ 564.180421][T25389] inetdev_event+0x1b3/0xc10 [ 564.180528][T25389] ? __pfx_ib_netdevice_event+0x10/0x10 [ 564.180548][T25389] ? ib_netdevice_event+0x28b/0x5f0 [ 564.180575][T25389] ? __pfx_arp_netdev_event+0x10/0x10 [ 564.180595][T25389] ? __pfx_inetdev_event+0x10/0x10 [ 564.180643][T25389] raw_notifier_call_chain+0x6c/0x1b0 [ 564.180661][T25389] ? call_netdevice_notifiers_info+0x9c/0x100 [ 564.180685][T25389] call_netdevice_notifiers_info+0xae/0x100 [ 564.180753][T25389] dev_close_many+0x170/0x240 [ 564.180866][T25389] unregister_netdevice_many_notify+0x441/0x1690 [ 564.180975][T25389] ? unregister_netdevice_queue+0x12b/0x220 [ 564.181006][T25389] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 564.181037][T25389] rtnl_dellink+0x3cb/0x550 [ 564.181078][T25389] ? security_capable+0x83/0x90 [ 564.181176][T25389] ? ns_capable+0x7d/0xb0 [ 564.181193][T25389] ? __pfx_rtnl_dellink+0x10/0x10 [ 564.181250][T25389] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 564.181276][T25389] ? netlink_rcv_skb+0x7e/0x220 [ 564.181312][T25389] netlink_rcv_skb+0x120/0x220 [ 564.181341][T25389] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 564.181367][T25389] rtnetlink_rcv+0x1c/0x30 [ 564.181429][T25389] netlink_unicast+0x5a1/0x670 [ 564.181524][T25389] netlink_sendmsg+0x58b/0x6b0 [ 564.181543][T25389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.181567][T25389] __sock_sendmsg+0x145/0x180 [ 564.181590][T25389] ____sys_sendmsg+0x31e/0x4e0 [ 564.181631][T25389] ___sys_sendmsg+0x17b/0x1d0 [ 564.181677][T25389] __x64_sys_sendmsg+0xd4/0x160 [ 564.181850][T25389] x64_sys_call+0x2999/0x2fb0 [ 564.181872][T25389] do_syscall_64+0xd2/0x200 [ 564.181890][T25389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 564.181922][T25389] ? clear_bhb_loop+0x40/0x90 [ 564.182023][T25389] ? clear_bhb_loop+0x40/0x90 [ 564.182047][T25389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.182066][T25389] RIP: 0033:0x7f398947e929 [ 564.182080][T25389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.182111][T25389] RSP: 002b:00007f3987ae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.182128][T25389] RAX: ffffffffffffffda RBX: 00007f39896a5fa0 RCX: 00007f398947e929 [ 564.182139][T25389] RDX: 0000000000004884 RSI: 0000200000000080 RDI: 0000000000000009 [ 564.182150][T25389] RBP: 00007f3987ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 564.182162][T25389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.182175][T25389] R13: 0000000000000000 R14: 00007f39896a5fa0 R15: 00007fff20361a68 [ 564.182262][T25389] [ 564.541067][T25389] team0 (unregistering): Port device team_slave_0 removed [ 564.552497][T25405] loop8: detected capacity change from 0 to 2048 [ 564.562542][T25389] team0 (unregistering): Port device team_slave_1 removed [ 564.573674][T25405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.591732][T25405] EXT4-fs error (device loop8): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.8.5921: path /101/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 564.629264][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.675965][T25417] loop8: detected capacity change from 0 to 512 [ 564.683957][T25417] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 564.686820][T25419] lo speed is unknown, defaulting to 1000 [ 564.693890][T25417] EXT4-fs (loop8): orphan cleanup on readonly fs [ 564.705208][T25417] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.5925: iget: bad i_size value: 38620345925642 [ 564.719182][T25417] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.5925: couldn't read orphan inode 15 (err -117) [ 564.728428][T25419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5927'. [ 564.733104][T25417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.754181][T25417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.877233][T25438] loop3: detected capacity change from 0 to 164 [ 564.894588][T25438] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 564.945601][T25448] loop7: detected capacity change from 0 to 2048 [ 564.954970][T25448] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.970572][T25448] EXT4-fs error (device loop7): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.7.5936: path /30/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 565.007841][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.251219][T25478] loop8: detected capacity change from 0 to 164 [ 565.261182][T25478] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 565.314023][T25480] tipc: Started in network mode [ 565.322424][T25480] tipc: Node identity ac14140f, cluster identity 4711 [ 565.335659][T25480] tipc: New replicast peer: 10.1.1.2 [ 565.343140][T25480] tipc: Enabled bearer , priority 10 [ 565.512394][T25502] ALSA: seq fatal error: cannot create timer (-19) [ 565.582415][T25512] loop8: detected capacity change from 0 to 164 [ 565.592481][T25512] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 565.624950][T25517] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5959'. [ 565.645638][T25502] loop6: detected capacity change from 0 to 2048 [ 565.661060][T25502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.785864][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.821863][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 565.821879][ T29] audit: type=1326 audit(1751672462.976:21684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 565.860216][ T29] audit: type=1326 audit(1751672462.976:21685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 565.884831][ T29] audit: type=1326 audit(1751672462.976:21686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 565.908480][ T29] audit: type=1326 audit(1751672462.976:21687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 565.932874][ T29] audit: type=1326 audit(1751672462.976:21688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 565.957292][ T29] audit: type=1326 audit(1751672462.976:21689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 565.981714][ T29] audit: type=1326 audit(1751672462.976:21690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 566.005739][ T29] audit: type=1326 audit(1751672462.976:21691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 566.029755][ T29] audit: type=1326 audit(1751672462.976:21692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 566.054326][ T29] audit: type=1326 audit(1751672462.976:21693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25527 comm="syz.6.5966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f353705e929 code=0x7ffc0000 [ 566.100135][T25534] loop3: detected capacity change from 0 to 2048 [ 566.123141][T25531] loop6: detected capacity change from 0 to 2048 [ 566.130881][T25534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.156142][T25531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.169259][T25534] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.5968: path /90/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 566.208380][T25531] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.5967: path /267/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 566.237709][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.294137][T25553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5977'. [ 566.321975][T25553] loop4: detected capacity change from 0 to 512 [ 566.338835][T20176] tipc: Node number set to 2886997007 [ 566.355849][T25553] EXT4-fs: Ignoring removed bh option [ 566.361423][T25553] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.372347][T25553] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 566.387129][T25559] tipc: Enabling of bearer rejected, already enabled [ 566.396453][T25553] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 566.405144][T25553] EXT4-fs (loop4): orphan cleanup on readonly fs [ 566.428010][T25562] loop7: detected capacity change from 0 to 2048 [ 566.443648][T25553] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5977: Failed to acquire dquot type 1 [ 566.462357][T25553] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5977: Invalid block bitmap block 0 in block_group 0 [ 566.491846][T25553] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5977: Invalid block bitmap block 0 in block_group 0 [ 566.524368][T25566] loop6: detected capacity change from 0 to 128 [ 566.532526][T25570] loop3: detected capacity change from 0 to 128 [ 566.540286][T25562] EXT4-fs error (device loop7): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.7.5979: path /41/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 566.569015][T25553] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.5977: Invalid block bitmap block 0 in block_group 0 [ 566.613814][T25553] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5977: Failed to acquire dquot type 1 [ 566.634237][T25553] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5977: Failed to acquire dquot type 1 [ 566.658914][T25553] EXT4-fs (loop4): 1 orphan inode deleted [ 566.720127][T25575] loop6: detected capacity change from 0 to 164 [ 566.750664][T25575] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 566.866465][T25574] loop7: detected capacity change from 0 to 164 [ 566.902970][T25589] loop3: detected capacity change from 0 to 1024 [ 566.990620][T25597] loop7: detected capacity change from 0 to 2048 [ 567.244120][T25613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5996'. [ 567.299308][T25619] loop3: detected capacity change from 0 to 2048 [ 567.311221][T25619] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.5998: path /97/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 567.740684][T25638] loop6: detected capacity change from 0 to 2048 [ 567.780426][T25638] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6006: path /278/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 567.983443][T25626] Set syz1 is full, maxelem 65536 reached [ 568.086006][T25655] loop3: detected capacity change from 0 to 2048 [ 568.102772][T25655] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.6012: path /101/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 568.978356][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6025'. [ 569.014397][T25694] loop6: detected capacity change from 0 to 2048 [ 569.060433][T25694] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6028: path /283/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 569.180404][T25705] loop3: detected capacity change from 0 to 2048 [ 569.212157][T25705] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.6033: path /104/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 569.346270][T25727] tipc: Enabling of bearer rejected, already enabled [ 569.431565][T25739] loop8: detected capacity change from 0 to 2048 [ 569.442564][T25739] EXT4-fs error (device loop8): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.8.6046: path /137/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 569.510420][T25747] loop8: detected capacity change from 0 to 2048 [ 569.541518][T25754] loop3: detected capacity change from 0 to 2048 [ 569.647056][T25769] loop6: detected capacity change from 0 to 2048 [ 569.659068][T25769] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6057: path /294/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 569.706489][T25754] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #12: comm syz.3.6052: corrupted in-inode xattr: bad e_name length [ 569.746966][T25774] loop6: detected capacity change from 0 to 164 [ 569.756111][T25774] xt_check_match: 1 callbacks suppressed [ 569.756131][T25774] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 569.778020][T25776] loop3: detected capacity change from 0 to 2048 [ 569.787932][T25776] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.6060: path /112/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 570.033899][T25798] ALSA: seq fatal error: cannot create timer (-19) [ 570.053285][T25806] loop6: detected capacity change from 0 to 2048 [ 570.067709][T25806] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6072: path /303/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 570.139648][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6075'. [ 570.192660][T25816] loop4: detected capacity change from 0 to 512 [ 570.202804][T25816] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 570.211071][T25816] EXT4-fs (loop4): orphan cleanup on readonly fs [ 570.217710][T25816] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.6076: iget: bad i_size value: 38620345925642 [ 570.231871][T25816] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.6076: couldn't read orphan inode 15 (err -117) [ 570.392053][T25842] loop7: detected capacity change from 0 to 2048 [ 570.398132][T25844] loop8: detected capacity change from 0 to 2048 [ 570.409850][T25844] EXT4-fs error (device loop8): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.8.6086: path /140/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 570.457608][T25850] netlink: 268 bytes leftover after parsing attributes in process `syz.8.6087'. [ 570.502711][T25850] loop8: detected capacity change from 0 to 128 [ 570.544435][T25842] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #12: comm syz.7.6085: corrupted in-inode xattr: bad e_name length [ 570.563977][T25852] syz.8.6087: attempt to access beyond end of device [ 570.563977][T25852] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 570.582116][T25852] syz.8.6087: attempt to access beyond end of device [ 570.582116][T25852] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 570.595866][T25852] syz.8.6087: attempt to access beyond end of device [ 570.595866][T25852] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 570.609525][T25852] syz.8.6087: attempt to access beyond end of device [ 570.609525][T25852] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 570.623396][T25852] syz.8.6087: attempt to access beyond end of device [ 570.623396][T25852] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 570.637162][T25852] syz.8.6087: attempt to access beyond end of device [ 570.637162][T25852] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 570.652602][T25852] syz.8.6087: attempt to access beyond end of device [ 570.652602][T25852] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 570.666536][T25852] syz.8.6087: attempt to access beyond end of device [ 570.666536][T25852] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 570.687914][T25852] syz.8.6087: attempt to access beyond end of device [ 570.687914][T25852] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 570.702086][T25852] syz.8.6087: attempt to access beyond end of device [ 570.702086][T25852] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 570.798932][T25863] loop3: detected capacity change from 0 to 1024 [ 570.937048][T25870] loop8: detected capacity change from 0 to 2048 [ 571.005503][T25872] loop7: detected capacity change from 0 to 164 [ 571.015598][T25872] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 571.073557][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 571.073575][ T29] audit: type=1326 audit(1751672468.226:22210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.121409][ T29] audit: type=1326 audit(1751672468.266:22211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.145700][T25883] loop6: detected capacity change from 0 to 2048 [ 571.152348][ T29] audit: type=1326 audit(1751672468.266:22212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.176962][ T29] audit: type=1326 audit(1751672468.266:22213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.201356][ T29] audit: type=1326 audit(1751672468.266:22214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.225352][ T29] audit: type=1326 audit(1751672468.266:22215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.249758][ T29] audit: type=1326 audit(1751672468.266:22216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.273435][ T29] audit: type=1326 audit(1751672468.266:22217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.297685][ T29] audit: type=1326 audit(1751672468.266:22218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.322156][ T29] audit: type=1326 audit(1751672468.266:22219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25880 comm="syz.7.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68d44e929 code=0x7ffc0000 [ 571.369632][T25890] netlink: 268 bytes leftover after parsing attributes in process `syz.7.6102'. [ 571.381391][T25890] loop7: detected capacity change from 0 to 128 [ 571.498341][T25896] Invalid ELF header magic: != ELF [ 571.506812][T25883] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #12: comm syz.6.6099: corrupted in-inode xattr: bad e_name length [ 571.535228][T21615] EXT4-fs unmount: 42 callbacks suppressed [ 571.535311][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.742812][T25920] netlink: 268 bytes leftover after parsing attributes in process `syz.8.6113'. [ 571.756222][T25920] loop8: detected capacity change from 0 to 128 [ 571.787618][T25918] tipc: Enabling of bearer rejected, already enabled [ 571.809884][T25922] loop8: detected capacity change from 0 to 2048 [ 571.820171][T25922] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.135317][T25935] lo speed is unknown, defaulting to 1000 [ 572.303087][T25942] loop7: detected capacity change from 0 to 2048 [ 572.312384][T25942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.327217][T25942] EXT4-fs error (device loop7): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.7.6119: path /64/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 572.366951][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.428668][T25950] loop7: detected capacity change from 0 to 164 [ 572.438034][T25950] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 572.479912][T25958] netlink: 'syz.7.6125': attribute type 1 has an invalid length. [ 572.487750][T25958] netlink: 'syz.7.6125': attribute type 2 has an invalid length. [ 572.495742][T25958] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6125'. [ 572.603001][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.893675][T26014] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6149'. [ 573.038353][T26027] loop8: detected capacity change from 0 to 512 [ 573.046311][T26027] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 573.079935][T26027] EXT4-fs (loop8): 1 truncate cleaned up [ 573.087919][T26027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.127988][T26027] FAULT_INJECTION: forcing a failure. [ 573.127988][T26027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.142019][T26027] CPU: 0 UID: 0 PID: 26027 Comm: syz.8.6154 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 573.142057][T26027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.142074][T26027] Call Trace: [ 573.142082][T26027] [ 573.142090][T26027] __dump_stack+0x1d/0x30 [ 573.142137][T26027] dump_stack_lvl+0xe8/0x140 [ 573.142161][T26027] dump_stack+0x15/0x1b [ 573.142183][T26027] should_fail_ex+0x265/0x280 [ 573.142231][T26027] should_fail+0xb/0x20 [ 573.142321][T26027] should_fail_usercopy+0x1a/0x20 [ 573.142390][T26027] _copy_to_user+0x20/0xa0 [ 573.142418][T26027] simple_read_from_buffer+0xb5/0x130 [ 573.142522][T26027] proc_fail_nth_read+0x100/0x140 [ 573.142560][T26027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 573.142594][T26027] vfs_read+0x1a0/0x6f0 [ 573.142701][T26027] ? __rcu_read_unlock+0x4f/0x70 [ 573.142724][T26027] ? __fget_files+0x184/0x1c0 [ 573.142753][T26027] ksys_read+0xda/0x1a0 [ 573.142795][T26027] __x64_sys_read+0x40/0x50 [ 573.142892][T26027] x64_sys_call+0x2d77/0x2fb0 [ 573.142926][T26027] do_syscall_64+0xd2/0x200 [ 573.142971][T26027] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 573.143069][T26027] ? clear_bhb_loop+0x40/0x90 [ 573.143094][T26027] ? clear_bhb_loop+0x40/0x90 [ 573.143118][T26027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.143146][T26027] RIP: 0033:0x7f2cffdad33c [ 573.143181][T26027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 573.143211][T26027] RSP: 002b:00007f2cfe417030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.143276][T26027] RAX: ffffffffffffffda RBX: 00007f2cfffd5fa0 RCX: 00007f2cffdad33c [ 573.143294][T26027] RDX: 000000000000000f RSI: 00007f2cfe4170a0 RDI: 0000000000000005 [ 573.143358][T26027] RBP: 00007f2cfe417090 R08: 0000000000000000 R09: 0000000000000000 [ 573.143375][T26027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.143391][T26027] R13: 0000000000000000 R14: 00007f2cfffd5fa0 R15: 00007ffdd0e819c8 [ 573.143416][T26027] [ 573.381654][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.384545][T26040] loop7: detected capacity change from 0 to 2048 [ 573.420782][T26040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.477688][T26056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6164'. [ 573.490558][T26058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6164'. [ 573.573524][T26040] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #12: comm syz.7.6159: corrupted in-inode xattr: bad e_name length [ 573.581443][T26065] ALSA: seq fatal error: cannot create timer (-19) [ 573.597018][T26070] tipc: New replicast peer: 10.1.1.2 [ 573.602446][T26070] tipc: Enabled bearer , priority 10 [ 573.626278][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.675175][T26077] loop7: detected capacity change from 0 to 2048 [ 573.685773][T26077] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.711794][T26077] EXT4-fs error (device loop7): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.7.6170: path /78/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 573.732344][T26079] loop4: detected capacity change from 0 to 8192 [ 573.757820][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.800356][T26088] FAULT_INJECTION: forcing a failure. [ 573.800356][T26088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.813635][T26088] CPU: 1 UID: 0 PID: 26088 Comm: syz.7.6174 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 573.813673][T26088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.813690][T26088] Call Trace: [ 573.813720][T26088] [ 573.813728][T26088] __dump_stack+0x1d/0x30 [ 573.813779][T26088] dump_stack_lvl+0xe8/0x140 [ 573.813806][T26088] dump_stack+0x15/0x1b [ 573.813828][T26088] should_fail_ex+0x265/0x280 [ 573.813945][T26088] should_fail+0xb/0x20 [ 573.813983][T26088] should_fail_usercopy+0x1a/0x20 [ 573.814040][T26088] _copy_from_user+0x1c/0xb0 [ 573.814061][T26088] vmemdup_user+0x59/0xd0 [ 573.814152][T26088] path_setxattrat+0x1b6/0x310 [ 573.814199][T26088] __x64_sys_setxattr+0x6e/0x90 [ 573.814232][T26088] x64_sys_call+0x28a7/0x2fb0 [ 573.814254][T26088] do_syscall_64+0xd2/0x200 [ 573.814335][T26088] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 573.814363][T26088] ? clear_bhb_loop+0x40/0x90 [ 573.814384][T26088] ? clear_bhb_loop+0x40/0x90 [ 573.814413][T26088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.814500][T26088] RIP: 0033:0x7ff68d44e929 [ 573.814519][T26088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.814541][T26088] RSP: 002b:00007ff68bab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 573.814567][T26088] RAX: ffffffffffffffda RBX: 00007ff68d675fa0 RCX: 00007ff68d44e929 [ 573.814584][T26088] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 573.814601][T26088] RBP: 00007ff68bab7090 R08: 0000000000000001 R09: 0000000000000000 [ 573.814617][T26088] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 573.814681][T26088] R13: 0000000000000000 R14: 00007ff68d675fa0 R15: 00007ffcca9a91d8 [ 573.814701][T26088] [ 574.062411][T26090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6177'. [ 574.071925][T26097] loop6: detected capacity change from 0 to 2048 [ 574.100797][T26097] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.123455][T26097] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6180: path /317/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 574.144239][T26101] loop8: detected capacity change from 0 to 164 [ 574.154618][T26101] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 574.177128][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.207223][T26110] loop6: detected capacity change from 0 to 2048 [ 574.216307][T26110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.231431][T26110] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6185: path /318/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 574.255344][T26114] netlink: 256 bytes leftover after parsing attributes in process `syz.7.6184'. [ 574.277466][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.363317][T26124] loop8: detected capacity change from 0 to 1024 [ 574.363363][T26125] loop6: detected capacity change from 0 to 512 [ 574.377061][T26125] EXT4-fs: Ignoring removed i_version option [ 574.383271][T26125] EXT4-fs: Ignoring removed mblk_io_submit option [ 574.392052][T26124] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.414692][T26125] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 574.428302][T26125] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 574.632849][T26142] tipc: Started in network mode [ 574.637895][T26142] tipc: Node identity ac14140f, cluster identity 4711 [ 574.656718][T26142] tipc: New replicast peer: 10.1.1.2 [ 574.662252][T26142] tipc: Enabled bearer , priority 10 [ 574.674503][T26146] FAULT_INJECTION: forcing a failure. [ 574.674503][T26146] name failslab, interval 1, probability 0, space 0, times 0 [ 574.687506][T26146] CPU: 1 UID: 0 PID: 26146 Comm: syz.3.6197 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 574.687546][T26146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.687562][T26146] Call Trace: [ 574.687571][T26146] [ 574.687581][T26146] __dump_stack+0x1d/0x30 [ 574.687603][T26146] dump_stack_lvl+0xe8/0x140 [ 574.687624][T26146] dump_stack+0x15/0x1b [ 574.687665][T26146] should_fail_ex+0x265/0x280 [ 574.687776][T26146] should_failslab+0x8c/0xb0 [ 574.687809][T26146] kmem_cache_alloc_node_noprof+0x57/0x320 [ 574.687839][T26146] ? __alloc_skb+0x101/0x320 [ 574.687872][T26146] __alloc_skb+0x101/0x320 [ 574.687972][T26146] netlink_alloc_large_skb+0xba/0xf0 [ 574.688006][T26146] netlink_sendmsg+0x3cf/0x6b0 [ 574.688047][T26146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.688072][T26146] __sock_sendmsg+0x145/0x180 [ 574.688103][T26146] sock_write_iter+0x165/0x1b0 [ 574.688131][T26146] do_iter_readv_writev+0x421/0x4c0 [ 574.688199][T26146] vfs_writev+0x2df/0x8b0 [ 574.688239][T26146] do_writev+0xe7/0x210 [ 574.688294][T26146] __x64_sys_writev+0x45/0x50 [ 574.688318][T26146] x64_sys_call+0x2006/0x2fb0 [ 574.688349][T26146] do_syscall_64+0xd2/0x200 [ 574.688369][T26146] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 574.688397][T26146] ? clear_bhb_loop+0x40/0x90 [ 574.688458][T26146] ? clear_bhb_loop+0x40/0x90 [ 574.688571][T26146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.688595][T26146] RIP: 0033:0x7f19089ce929 [ 574.688611][T26146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.688632][T26146] RSP: 002b:00007f1907037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 574.688668][T26146] RAX: ffffffffffffffda RBX: 00007f1908bf5fa0 RCX: 00007f19089ce929 [ 574.688681][T26146] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003 [ 574.688694][T26146] RBP: 00007f1907037090 R08: 0000000000000000 R09: 0000000000000000 [ 574.688737][T26146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.688778][T26146] R13: 0000000000000000 R14: 00007f1908bf5fa0 R15: 00007ffd16482d78 [ 574.688804][T26146] [ 574.937299][T26145] loop6: detected capacity change from 0 to 164 [ 574.948384][T26145] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 575.012227][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.023221][T26150] loop3: detected capacity change from 0 to 2048 [ 575.034431][T26150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.062915][T26150] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.6199: path /130/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 575.118094][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.196100][T26166] __nla_validate_parse: 2 callbacks suppressed [ 575.196119][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6206'. [ 575.261884][T26173] loop4: detected capacity change from 0 to 1024 [ 575.308072][T26173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.322250][T26170] tipc: New replicast peer: 10.1.1.2 [ 575.328997][T26170] tipc: Enabled bearer , priority 10 [ 575.396435][T26190] loop3: detected capacity change from 0 to 1024 [ 575.415082][T26185] FAULT_INJECTION: forcing a failure. [ 575.415082][T26185] name failslab, interval 1, probability 0, space 0, times 0 [ 575.447450][T26185] CPU: 0 UID: 0 PID: 26185 Comm: syz.8.6214 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 575.447556][T26185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.447572][T26185] Call Trace: [ 575.447580][T26185] [ 575.447589][T26185] __dump_stack+0x1d/0x30 [ 575.447615][T26185] dump_stack_lvl+0xe8/0x140 [ 575.447706][T26185] dump_stack+0x15/0x1b [ 575.447729][T26185] should_fail_ex+0x265/0x280 [ 575.447769][T26185] should_failslab+0x8c/0xb0 [ 575.447867][T26185] kmem_cache_alloc_noprof+0x50/0x310 [ 575.447936][T26185] ? security_file_alloc+0x32/0x100 [ 575.447965][T26185] security_file_alloc+0x32/0x100 [ 575.447986][T26185] init_file+0x5c/0x1d0 [ 575.448011][T26185] alloc_empty_file+0x8b/0x200 [ 575.448062][T26185] alloc_file_pseudo+0xc6/0x160 [ 575.448098][T26185] anon_inode_getfd+0xc1/0x150 [ 575.448131][T26185] bpf_map_new_fd+0x52/0x70 [ 575.448162][T26185] map_create+0xb5a/0xb90 [ 575.448229][T26185] ? security_bpf+0x2b/0x90 [ 575.448255][T26185] __sys_bpf+0x5ab/0x790 [ 575.448301][T26185] __x64_sys_bpf+0x41/0x50 [ 575.448329][T26185] x64_sys_call+0x2478/0x2fb0 [ 575.448421][T26185] do_syscall_64+0xd2/0x200 [ 575.448444][T26185] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 575.448478][T26185] ? clear_bhb_loop+0x40/0x90 [ 575.448507][T26185] ? clear_bhb_loop+0x40/0x90 [ 575.448535][T26185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.448607][T26185] RIP: 0033:0x7f2cffdae929 [ 575.448624][T26185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.448648][T26185] RSP: 002b:00007f2cfe417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 575.448679][T26185] RAX: ffffffffffffffda RBX: 00007f2cfffd5fa0 RCX: 00007f2cffdae929 [ 575.448696][T26185] RDX: 0000000000000048 RSI: 0000200000000540 RDI: 0000000000000000 [ 575.448726][T26185] RBP: 00007f2cfe417090 R08: 0000000000000000 R09: 0000000000000000 [ 575.448739][T26185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.448754][T26185] R13: 0000000000000000 R14: 00007f2cfffd5fa0 R15: 00007ffdd0e819c8 [ 575.448779][T26185] [ 575.678722][ T3418] tipc: Node number set to 2886997007 [ 575.833899][T25036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.844620][T26190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.910961][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6221'. [ 575.926765][T26197] loop6: detected capacity change from 0 to 2048 [ 575.959514][T26197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.987770][T26197] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6219: path /330/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 576.018262][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6222'. [ 576.069520][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.140071][T26216] netlink: 'syz.4.6227': attribute type 1 has an invalid length. [ 576.164516][T26216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 576.176882][T26219] ALSA: seq fatal error: cannot create timer (-19) [ 576.209506][T26216] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 576.227296][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.250251][T26226] loop6: detected capacity change from 0 to 1024 [ 576.290776][T26226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.333928][T26216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26216 comm=syz.4.6227 [ 576.352122][T26216] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6227'. [ 576.361638][T26216] netlink: zone id is out of range [ 576.366867][T26216] netlink: zone id is out of range [ 576.374504][T26216] netlink: zone id is out of range [ 576.379752][T26216] netlink: zone id is out of range [ 576.385060][T26216] netlink: zone id is out of range [ 576.390272][T26216] netlink: zone id is out of range [ 576.395752][T26216] netlink: zone id is out of range [ 576.402190][T26216] netlink: zone id is out of range [ 576.408649][T26216] netlink: zone id is out of range [ 576.413996][T26216] netlink: del zone limit has 8 unknown bytes [ 576.421632][T26235] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6232'. [ 576.517052][T26242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6234'. [ 576.530627][T26245] netlink: 268 bytes leftover after parsing attributes in process `syz.3.6230'. [ 576.612298][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.623564][T26253] loop7: detected capacity change from 0 to 512 [ 576.643203][T26253] __quota_error: 181 callbacks suppressed [ 576.643220][T26253] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 576.659320][T26253] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 576.670022][T26253] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.6234: Failed to acquire dquot type 1 [ 576.747303][ T29] audit: type=1326 audit(1751672473.896:22401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 576.753888][T26258] ALSA: seq fatal error: cannot create timer (-22) [ 576.774687][ T29] audit: type=1326 audit(1751672473.896:22402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 576.801973][ T29] audit: type=1326 audit(1751672473.906:22403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 576.825646][ T29] audit: type=1326 audit(1751672473.906:22404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 576.849276][ T29] audit: type=1326 audit(1751672473.906:22405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 576.873106][ T29] audit: type=1326 audit(1751672473.906:22406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 576.896868][ T29] audit: type=1326 audit(1751672473.906:22407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 576.896946][T26253] EXT4-fs (loop7): 1 truncate cleaned up [ 576.897517][T26253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.920705][ T29] audit: type=1326 audit(1751672473.906:22408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398947e929 code=0x7ffc0000 [ 577.033371][T26253] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.075499][T26275] loop4: detected capacity change from 0 to 1024 [ 577.105668][T26275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.108251][T26273] ALSA: seq fatal error: cannot create timer (-19) [ 577.136286][T26279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6241'. [ 577.163067][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.232267][T26286] loop3: detected capacity change from 0 to 2048 [ 577.250260][T26290] loop7: detected capacity change from 0 to 2048 [ 577.261201][T26286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.276221][T26290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.295997][T26286] EXT4-fs error (device loop3): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.3.6247: path /136/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 577.367670][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.426750][T26301] netlink: 268 bytes leftover after parsing attributes in process `syz.8.6251'. [ 577.500918][T26310] loop3: detected capacity change from 0 to 512 [ 577.519122][T26310] EXT4-fs: Ignoring removed oldalloc option [ 577.530101][T26313] loop6: detected capacity change from 0 to 2048 [ 577.537357][T26310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 577.563646][T25036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.574676][T26313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.608016][T26313] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6255: path /341/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 577.655550][T26316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6257'. [ 577.687530][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.750018][T26320] netlink: 'syz.6.6258': attribute type 1 has an invalid length. [ 577.767132][T26324] FAULT_INJECTION: forcing a failure. [ 577.767132][T26324] name failslab, interval 1, probability 0, space 0, times 0 [ 577.780674][T26324] CPU: 0 UID: 0 PID: 26324 Comm: syz.4.6256 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 577.780755][T26324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.780769][T26324] Call Trace: [ 577.780777][T26324] [ 577.780784][T26324] __dump_stack+0x1d/0x30 [ 577.780812][T26324] dump_stack_lvl+0xe8/0x140 [ 577.780876][T26324] dump_stack+0x15/0x1b [ 577.780898][T26324] should_fail_ex+0x265/0x280 [ 577.780935][T26324] ? vga_arb_read+0x4f/0x3d0 [ 577.780967][T26324] should_failslab+0x8c/0xb0 [ 577.781114][T26324] __kmalloc_cache_noprof+0x4c/0x320 [ 577.781148][T26324] vga_arb_read+0x4f/0x3d0 [ 577.781248][T26324] ? __pfx_vga_arb_read+0x10/0x10 [ 577.781398][T26324] vfs_readv+0x3f8/0x690 [ 577.781443][T26324] do_readv+0xe7/0x210 [ 577.781549][T26324] __x64_sys_readv+0x45/0x50 [ 577.781569][T26324] x64_sys_call+0x29af/0x2fb0 [ 577.781592][T26324] do_syscall_64+0xd2/0x200 [ 577.781681][T26324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 577.781708][T26324] ? clear_bhb_loop+0x40/0x90 [ 577.781785][T26324] ? clear_bhb_loop+0x40/0x90 [ 577.781807][T26324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.781832][T26324] RIP: 0033:0x7f398947e929 [ 577.781852][T26324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.781906][T26324] RSP: 002b:00007f3987ae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 577.782039][T26324] RAX: ffffffffffffffda RBX: 00007f39896a5fa0 RCX: 00007f398947e929 [ 577.782052][T26324] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 577.782133][T26324] RBP: 00007f3987ae7090 R08: 0000000000000000 R09: 0000000000000000 [ 577.782145][T26324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.782219][T26324] R13: 0000000000000000 R14: 00007f39896a5fa0 R15: 00007fff20361a68 [ 577.782244][T26324] [ 577.788200][T26320] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.872449][T26327] loop8: detected capacity change from 0 to 2048 [ 577.946302][T26332] loop4: detected capacity change from 0 to 2048 [ 577.964103][T26327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.982096][T26332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.995159][T26327] EXT4-fs error (device loop8): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.8.6260: path /183/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 578.034584][T26320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26320 comm=syz.6.6258 [ 578.062096][T26332] EXT4-fs error (device loop4): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.4.6262: path /59/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 578.065833][T26328] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 578.094626][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.105501][T24817] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.150301][T25036] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.224850][T26351] loop6: detected capacity change from 0 to 2048 [ 578.237309][T26351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.253287][T26351] EXT4-fs error (device loop6): ext4_read_inline_dir:1502: inode #12: block 9: comm syz.6.6268: path /344/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 578.285077][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.340854][T26363] loop6: detected capacity change from 0 to 164 [ 578.351234][T26363] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 578.412771][T26370] loop6: detected capacity change from 0 to 2048 [ 578.451812][T26370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.466884][T26376] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26376 comm=syz.7.6277 [ 578.492078][T26362] lo speed is unknown, defaulting to 1000 [ 578.894586][T26394] lo speed is unknown, defaulting to 1000 [ 578.912603][T26398] loop3: detected capacity change from 0 to 164 [ 578.922210][T26398] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 579.116824][T26412] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26412 comm=syz.4.6289 [ 579.192171][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.293551][T26429] loop3: detected capacity change from 0 to 2048 [ 579.303147][T26431] program syz.4.6289 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.334709][T26429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.422082][T26436] loop6: detected capacity change from 0 to 164 [ 579.470533][T26436] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 579.539521][T26440] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #12: comm syz.3.6295: corrupted in-inode xattr: bad e_name length [ 579.567201][T26443] loop4: detected capacity change from 0 to 128 [ 579.641055][T26452] bio_check_eod: 102 callbacks suppressed [ 579.641070][T26452] syz.4.6299: attempt to access beyond end of device [ 579.641070][T26452] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 579.694986][T26451] loop8: detected capacity change from 0 to 1024 [ 579.712976][T26452] syz.4.6299: attempt to access beyond end of device [ 579.712976][T26452] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 579.729133][T26451] EXT4-fs: Ignoring removed orlov option [ 579.740591][T26456] loop6: detected capacity change from 0 to 2048 [ 579.748315][T26451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.780406][T26452] syz.4.6299: attempt to access beyond end of device [ 579.780406][T26452] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 579.818574][T23712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.850116][T26456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.865870][T26452] syz.4.6299: attempt to access beyond end of device [ 579.865870][T26452] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 579.879851][T26452] syz.4.6299: attempt to access beyond end of device [ 579.879851][T26452] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 579.893679][T26452] syz.4.6299: attempt to access beyond end of device [ 579.893679][T26452] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 579.907390][T26452] syz.4.6299: attempt to access beyond end of device [ 579.907390][T26452] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 579.921085][T26452] syz.4.6299: attempt to access beyond end of device [ 579.921085][T26452] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 579.934767][T26452] syz.4.6299: attempt to access beyond end of device [ 579.934767][T26452] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 579.948433][T26452] syz.4.6299: attempt to access beyond end of device [ 579.948433][T26452] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 579.963614][T13425] ================================================================== [ 579.971761][T13425] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 579.979111][T13425] [ 579.981467][T13425] read-write to 0xffff88811a4ba228 of 8 bytes by task 26452 on cpu 1: [ 579.989656][T13425] xas_clear_mark+0x91/0x180 [ 579.994321][T13425] __folio_start_writeback+0x2ce/0x440 [ 579.999838][T13425] mpage_writepages+0xd18/0x1250 [ 580.004818][T13425] fat_writepages+0x24/0x30 [ 580.009372][T13425] do_writepages+0x1c6/0x310 [ 580.014012][T13425] file_write_and_wait_range+0x156/0x2c0 [ 580.019697][T13425] __generic_file_fsync+0x46/0x140 [ 580.024861][T13425] fat_file_fsync+0x49/0x100 [ 580.029486][T13425] __x64_sys_fdatasync+0x80/0xe0 [ 580.034452][T13425] x64_sys_call+0x18f5/0x2fb0 [ 580.039243][T13425] do_syscall_64+0xd2/0x200 [ 580.043790][T13425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.049717][T13425] [ 580.052068][T13425] read to 0xffff88811a4ba228 of 8 bytes by task 13425 on cpu 0: [ 580.059725][T13425] xas_find_marked+0x218/0x620 [ 580.064514][T13425] find_get_entry+0x5d/0x380 [ 580.069181][T13425] filemap_get_folios_tag+0x13b/0x210 [ 580.074586][T13425] writeback_iter+0x4bb/0x820 [ 580.079287][T13425] mpage_writepages+0x718/0x1250 [ 580.084255][T13425] fat_writepages+0x24/0x30 [ 580.088815][T13425] do_writepages+0x1c6/0x310 [ 580.093430][T13425] __writeback_single_inode+0x80/0x7c0 [ 580.098920][T13425] writeback_sb_inodes+0x480/0xa20 [ 580.104058][T13425] __writeback_inodes_wb+0x94/0x1a0 [ 580.109284][T13425] wb_writeback+0x266/0x5c0 [ 580.113816][T13425] wb_workfn+0x4c9/0x910 [ 580.118078][T13425] process_scheduled_works+0x4cb/0x9d0 [ 580.123569][T13425] worker_thread+0x582/0x770 [ 580.128190][T13425] kthread+0x489/0x510 [ 580.132277][T13425] ret_from_fork+0xda/0x150 [ 580.136804][T13425] ret_from_fork_asm+0x1a/0x30 [ 580.141600][T13425] [ 580.143960][T13425] value changed: 0xfffffff000000000 -> 0xffffff8000000000 [ 580.151081][T13425] [ 580.153440][T13425] Reported by Kernel Concurrency Sanitizer on: [ 580.159603][T13425] CPU: 0 UID: 0 PID: 13425 Comm: kworker/u8:41 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 580.172388][T13425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.182472][T13425] Workqueue: writeback wb_workfn (flush-7:4) [ 580.188494][T13425] ================================================================== [ 580.238645][T26451] FAULT_INJECTION: forcing a failure. [ 580.238645][T26451] name failslab, interval 1, probability 0, space 0, times 0 [ 580.252484][T26451] CPU: 0 UID: 0 PID: 26451 Comm: syz.8.6303 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 580.252642][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 580.252682][T26451] Call Trace: [ 580.252692][T26451] [ 580.252703][T26451] __dump_stack+0x1d/0x30 [ 580.252732][T26451] dump_stack_lvl+0xe8/0x140 [ 580.252752][T26451] dump_stack+0x15/0x1b [ 580.252769][T26451] should_fail_ex+0x265/0x280 [ 580.252874][T26451] ? bdi_split_work_to_wbs+0x2db/0x640 [ 580.252900][T26451] should_failslab+0x8c/0xb0 [ 580.252928][T26451] __kmalloc_cache_noprof+0x4c/0x320 [ 580.252960][T26451] bdi_split_work_to_wbs+0x2db/0x640 [ 580.253060][T26451] sync_inodes_sb+0xff/0x440 [ 580.253165][T26451] ? down_read+0x77/0xe0 [ 580.253211][T26451] sync_inodes_one_sb+0x3d/0x50 [ 580.253247][T26451] __iterate_supers+0x110/0x1f0 [ 580.253362][T26451] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 580.253407][T26451] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 580.253451][T26451] iterate_supers+0x1f/0x30 [ 580.253495][T26451] ksys_sync+0x5c/0xe0 [ 580.253570][T26451] __ia32_sys_sync+0xe/0x20 [ 580.253679][T26451] x64_sys_call+0x2e53/0x2fb0 [ 580.253702][T26451] do_syscall_64+0xd2/0x200 [ 580.253720][T26451] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 580.253819][T26451] ? clear_bhb_loop+0x40/0x90 [ 580.253849][T26451] ? clear_bhb_loop+0x40/0x90 [ 580.253886][T26451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.253959][T26451] RIP: 0033:0x7f2cffdae929 [ 580.253978][T26451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.254002][T26451] RSP: 002b:00007f2cfe417038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 580.254022][T26451] RAX: ffffffffffffffda RBX: 00007f2cfffd5fa0 RCX: 00007f2cffdae929 [ 580.254034][T26451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.254046][T26451] RBP: 00007f2cfe417090 R08: 0000000000000000 R09: 0000000000000000 [ 580.254058][T26451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.254136][T26451] R13: 0000000000000000 R14: 00007f2cfffd5fa0 R15: 00007ffdd0e819c8 [ 580.254159][T26451] [ 580.482250][T26466] loop3: detected capacity change from 0 to 164 [ 580.547119][T21615] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.562194][T26465] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 580.615591][T24108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.