last executing test programs: 17m10.812005324s ago: executing program 3 (id=2815): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)={0x70, r3, 0xed5b4695bfed557f, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000080}, 0x24001000) 17m10.777674686s ago: executing program 3 (id=2816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18) mq_open(0x0, 0x40, 0xa, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000240), 0x0, 0x8d, 0x3) 17m9.852547516s ago: executing program 3 (id=2828): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17m9.824354837s ago: executing program 3 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) 17m9.793283339s ago: executing program 3 (id=2831): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='./file1\x00', 0x51f) (async) inotify_add_watch(r3, &(0x7f0000000200)='./file1\x00', 0x51f) ftruncate(r2, 0x6000000) (async) ftruncate(r2, 0x6000000) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) 17m9.608730777s ago: executing program 3 (id=2832): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000580)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000380)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/32, 0x20, 0x0, &(0x7f00000000c0)=""/182, 0xb6}}, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000400)="80006466d3805699", 0x8, 0x40d0, &(0x7f0000000080)={0xa, 0x6e26, 0x805, @mcast2, 0x200}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000001000)=""/193, 0xc1}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/60, 0x3c}], 0x6, &(0x7f0000000800)=""/73, 0x49}, 0x1}], 0x2, 0x40012020, 0x0) connect(r0, &(0x7f0000001100)=@isdn={0x22, 0xfc, 0x3, 0x4, 0xd}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRESHEX=r2, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x90, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) 16m54.456080587s ago: executing program 32 (id=2832): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x630a, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000580)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000380)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/32, 0x20, 0x0, &(0x7f00000000c0)=""/182, 0xb6}}, 0x10) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000400)="80006466d3805699", 0x8, 0x40d0, &(0x7f0000000080)={0xa, 0x6e26, 0x805, @mcast2, 0x200}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000001180)=""/209, 0xd1}, {&(0x7f0000000640)=""/182, 0xb6}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f0000001000)=""/193, 0xc1}, {&(0x7f0000000880)=""/242, 0xf2}], 0x9, &(0x7f0000000a40)=""/126, 0x7e}, 0xe4}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000001280)=""/160, 0xa0}, {&(0x7f0000000b80)=""/173, 0xad}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/236, 0xec}, {&(0x7f0000000e40)=""/60, 0x3c}], 0x6, &(0x7f0000000800)=""/73, 0x49}, 0x1}], 0x2, 0x40012020, 0x0) connect(r0, &(0x7f0000001100)=@isdn={0x22, 0xfc, 0x3, 0x4, 0xd}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRESHEX=r2, @ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x90, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) 5m2.426398369s ago: executing program 2 (id=12422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 5m2.40046199s ago: executing program 2 (id=12423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 5m2.374845211s ago: executing program 2 (id=12424): r0 = syz_io_uring_setup(0x5c6, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 5m2.325396373s ago: executing program 2 (id=12426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000005956b98c562a7629000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010002f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x50, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7ff5}, {0xffff, 0xffff}, {0x5, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4e8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x9a8c2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r5}, 0x18) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @multicast1}}, 0x24) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f00000000c0)="93f2", 0x2}], 0x1) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) mknod$loop(&(0x7f0000000080)='./file2\x00', 0x100000000000600d, 0x0) chown(&(0x7f0000000300)='./file0\x00', 0x0, r6) syz_io_uring_setup(0x35c8, 0x0, 0x0, &(0x7f0000000640)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='block_plug\x00', r8}, 0x18) r9 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r9, &(0x7f0000000000/0x4000)=nil, 0x6000) syz_clone3(&(0x7f00000007c0)={0x24001000, &(0x7f0000000380), 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@sysvgroups}, {@orlov}, {@nogrpid}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") 5m2.271868896s ago: executing program 2 (id=12429): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m1.922487041s ago: executing program 2 (id=12432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c0c0) 5m1.922344231s ago: executing program 33 (id=12432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x4c0c0) 2m45.93847202s ago: executing program 6 (id=14711): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) sendto$inet(r0, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2m45.853401554s ago: executing program 6 (id=14712): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f0000000b40)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@quota}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}, 0x1, 0x573, &(0x7f00000057c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x482, &(0x7f0000001040)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIFJR0EPFU0y2JXTbSBPF1mJTkXoRpKBn8Sj6F3gTQdST4FUvnqRQtJe2niIzO5OPbTa1zSYTk98PNvu+O+/uPM/O1zvvuwlgw+rL/iQR2yLit4joaVQXNuhrPF27cnb0+pWzo0nMzLz2V5K3u3rl7GjZtHzf1qLSn0akHyXFShaaPH3m+Ei9XjtV1AenTrw9OHn6zBPvnhg5VjtWOzl86NDBA0NPPzX8ZFvyzPK6uueDib27X3zj4sujRy6+9dM3WbzbiuXz82iXvizxv2dyzcsebffKKrZ9XjnprDAQbklHRGSbqys//nuiI+Y2Xk+88GGlwQErKrs2bWq9eHoGWMeSqDoCoBrlhT67/y0fq9T1WBMuP9u4AcryvlY8Gks6Iy3adDXd37ZTX0Qcmf7ni+wRKzQOAQAw3yejnx/ujoj3r3/9Utb36JldksY9+fMf+d8dxRxKb0TcGRE7I+KuiNgVEXdH5G3vjYj7lhnPjf2f9NIyP3JJWf/vmWJua2H/r+z9RW9HUdue59+VHB2v1/YX30l/dG3K6kNLrOO753/9tNWy+f2/7JGtv+wLFnFc6mwaoBsbmRrJO6VtcPl8xJ7OxfJPZmcCkojYHRF7bu2jd5SF8ce+2tuq0c3zX0Ib5plmvszSm87yn46m/EvJ/PnJ8RvmJwc3R722f7DcK2708y8XXm21/mXl3waXa43nedu/uUlvMvdl1E5N3vo6Lvz+cct7mtvc/9Pu5PV8nrm7eO29kampU0MR3cnhvL7g9eG595b1sn22//fvW/z431m8J0v+/ojIduIHIuLBiHioiP3hiHgkIvYtkf+Pz7VeVuYfaUXb/3zE2KLnv9n9P9v+c/P1t1HoOP7Dt63W/9+2/8G81F+8kp//bmKxcLLTRXOAy/nuAAAA4P8izX8Dn6QDs+U0HRho/IZ/V9yR1icmpx4/OvHOybHGb+V7oystR7p6ivHQ+ni9NpRMF5/YGB8dLsaKy/HSA8W48WcdW/L6wOhEfazi3GGj29ri+M/82VF1dMAK27Loq8Pdqx4IUIHmefR0YfXcK+FkAOuV/9eGjesmx3+6WnEAq+92r/9vtjkOYPUtdvyfa6qbC4D1yf0/bFyOf9ig0u+rjgCokOs/bEjL+b/+FSxsXhthVFNYqxslL0SUhXRNxKOwQoWqz0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8W8AAAD//4jb5iA=") chdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r2, 0x0, 0x0, 0x9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 2m45.722651619s ago: executing program 5 (id=14713): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x115}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2m45.587387895s ago: executing program 5 (id=14714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2m45.486805769s ago: executing program 5 (id=14718): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 2m45.273941039s ago: executing program 6 (id=14724): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="9454b83847a5c639dccc1cc3aa288229ee8a8a45ab78b6638fd2636c7547f7afcc1711878b54b4a8bc9eda3358a5cafd58dbb8a9f638354fbf2e6ab22b8558896f959a8579d9a05c6dde4a9dcc1779d407440e34d6e555f793ec7c2979d1f4b82e4122ce3f815e2e5322b7e74e3439af393c3adad4bab28934e91efd14ebc482d56ce8cedb094afc27d5c1e6cc050411de76f5731640796ba1e233fa6da1bb14cd30662898a0595bf34af8eebc3d12716e62ae66fbb6cf070bef47415d593769c361fc054ea962c9d09ed46aecba2af20e0a40204d4d795d019895bc0d52d8cc032ee13ae832fb1f989b70ab35596dfe28c239d45c99016cadd05b87af7bd13d37c5efae45046d0e5f9860e35c2f08ef9f67c80c47b870e353c089bab87b74c588183c64b20b7ccbdb068390e4c59a848d9695f46fc8bdbde97a4400f2e8b7379a62c57fd4ef8bd4f8e3a4bf141e87156efc1b86e15f34591489db7112fcae399f83f9e4ee56a923ea3123b3fbff37ccdf92284137a1500cad979bc0331524168b5f1a5da3e2d6643b6b0f28eb15869ba7f609c4fc9e4aecca1183de7b6427e7564714ffe154c2e4db0042ada0561c58a4003191033a4fdbf0d09c9c49e802e325da5bc2bcbe5b7a64c411a780ae8d0902118894f5f63fe989623f25a7e201e135e8f25b5365c3a615a4727144109cc4b88660728445ce841940d20e87069cb74f63fbfb5dd7992dc4ccde1484aeec05630a440ed9481d03267585eed156484d23b07280cc045ff023abd628d43f7d3b7bc5a9e8e6445f94271d508e5bb17b12216dba8a5f1a02aef9126389dcf725197440404b29b95e71d45b9dad8f3fdf1c6a2734632ca7991026304d869a94259cc32ac8a45da5ba38f54e9d98faf2af04e3f11ab495eb490daa88cbf465fe127cf144081196d8319692a51d3bae449ff531427c829d9cfab8cb15ae4ff6f4392e2c657beae5364b55d05729bc7f950e4b99c7ce71136168a3fda8b7ead182973c1f5fb52f7c6f488f6383c1259345306375ebe0639e40f367be4a480c2babf3e0572a5c089cccd06588489fdf12ff256af41faef912dea1c1cf122e8e4b99770b19fdc9f6b12cdfa51d0b0d3b6dbc18af665f0f92b83b12eda1fae071a9fb49575763d1bfce45616089b868e37bad0c806a5cff911ae163f82f98c885e7c9afa4d55a4117246086b07e55991205ad345dde63ef855097c7be09343ff9dd982e7e8332337c1b9c8aedd1afeb06010e59aeb5008f7bb0d971963f79df825d94773c9b79e6897c53a83388ef89bddd1d35addfb6c3dc0121ac2a7936643159365a0ef14dc95de2d1f60f41a687c04ba42ed9b225496a418e593587f40a25bbb761eeddc2080512646d163a9968ea00f599239b3abd581253d383fb72abad3b19e0d85a7eafdc02e92cbe784129c37152934a286c2a3d5c5eb1ac65caf63f352e58c96a26b0b13462b992926bae78774d7d9de575bf86b50da743692fb38ee9fbc51ac0eff40589f7259b50e1208753abdd7e404abe252592ec7605fb2aacf41771c506cbcf84d7e8657d38", 0xffffffffffffffb2}], 0x1, 0x0, 0x0, 0x10}, 0x4004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRES64=r2, @ANYRES64, @ANYRES8=r2, @ANYRESDEC=r2], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0xd, 0x7, 0x0, 0x0, 0xfd, 0x8, 0x0, 0xfd, 0x5}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x7}, &(0x7f0000000240)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@allocspi={0x108, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860a, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x3502, 0x2, 0x0, 0x1}, 0x3, 0x8}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd2d, 0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 2m44.628020097s ago: executing program 5 (id=14729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2m44.601235198s ago: executing program 5 (id=14731): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x67, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) close(r0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRESOCT=r2, @ANYRESOCT=r5], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r6, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r8, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8000, 0x8, 0x0, 0x3, 0x6, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x3e, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0x96, 0x0, 0x0, 0x0, 0x6}, r10, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m44.158263807s ago: executing program 5 (id=14732): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m42.528769237s ago: executing program 6 (id=14742): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setattr(0x0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000800000000000000000000000085006d28b5a4bba683bb0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) socket$inet_udp(0x2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_io_uring_setup(0x520c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.696125553s ago: executing program 6 (id=14748): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) unshare(0x62040200) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x67, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) close(r0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRESOCT=r2, @ANYRESOCT=r5], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r6, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r8, 0x8, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8000, 0x8, 0x0, 0x3, 0x6, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x3e, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0x96, 0x0, 0x0, 0x0, 0x6}, r10, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m41.317036849s ago: executing program 6 (id=14749): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m28.98179826s ago: executing program 34 (id=14732): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m26.271186678s ago: executing program 35 (id=14749): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7030000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_emit_ethernet(0x11dc0, &(0x7f0000000340)=ANY=[], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 1m40.97279881s ago: executing program 4 (id=15367): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x4e4e, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x0, 0x400c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x12, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m40.601834796s ago: executing program 4 (id=15371): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000300)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00761b67c87b9b1400000000001a2ddedb000700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1m40.49004379s ago: executing program 4 (id=15372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) set_mempolicy(0x3, 0x0, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9}, 0x18) openat$snapshot(0xffffff9c, &(0x7f0000000400), 0x8003, 0x0) 1m40.25393155s ago: executing program 4 (id=15375): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x14b142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fe", 0xb}], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32], 0x38}, 0x4044080) r1 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) (async) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="00008000000089692370c5c71b9410ebe067d669230000b70300001d0000008500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r4, @ANYBLOB="00008000000089692370c5c71b9410ebe067d669230000b70300001d0000008500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef8, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x88000cc, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2204000, &(0x7f0000000040), 0xfe, 0x56d, &(0x7f0000000240)="$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") setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f00000007c0)={0x1, {{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x88) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f00000007c0)={0x1, {{0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, 0x88) 1m40.185649403s ago: executing program 4 (id=15376): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f", 0x85}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001bc0)="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", 0x148}], 0x1}}], 0x2, 0x2090) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="e94363c3ae1204953c7880bd1710", 0xe}, {&(0x7f00000002c0)="a7a7b49d6e8b54ade0726236325bf05b7f02b79d07d65fdbc63299e1649ca2b672b6ab2fa02c8b917c5b21a1e137a50c3bf05fff07d6c3f40f5a9762e4179e571bd7a7b443f5d52596b33431f1cabcd6bc752a2ddfc9e0b69ccc74f0f5db5b00950cfe66df5be7fbbbcab5cd96a9cc", 0x6f}, {&(0x7f0000000800)="21f9bb9456bc1f220635e16d890bdd974cc59ef499c4ca45a2a60c44aef9a4d5b830683013fbe0f77b55eed6deacee63472a3f8d62f6e04be15271bd36268c4900440ffc9c573513801eabe32bc35a2de724be4333c3da6e90b2d8bb292198294721c3187d326648daa462e75956d1117d65084287459ef54814271c2dcac8f807b2fc16dab42ad7c402dcf68cf87badd6e9db008e67f4c386797becac430ee08afd3fe152053c9701b0a510c2a5bcb6e9db200742b3a792d2851e28c13e95b35833112ec58a77daa742de1a6d16b0599d4ba62e57a49b77cb322d1f78976dd8e79156", 0xe3}, {&(0x7f0000000400)="f0c2a14ef7", 0x5}, {&(0x7f00000004c0)="f97c79378ce6f86257355436c845ec75051d13e35d5d2f0407bc14a93be57cb56a22e546b9dee8babba8198a5bce5e213d68b98c2d82150bf100c67313ab380d6967951bae104d7b9863fdd49791b8996b77f4c39964cd922cf83b7ed9a5113ed53823b61662d1fee35628e925fa34b09b87226efbbb47a17c32d34c42a6011deaad79d9378bdf89267b390d8bd287892f79", 0x92}], 0x5, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x38}, 0x40000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m39.890247996s ago: executing program 4 (id=15379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000020c0019"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdfffffff9ffffff0000000000000000000000002cbd70000035100002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200005af50000000600000500000000100000", @ANYRES32, @ANYBLOB="00a2850000001d00000000673c56beefb1ac7769058a0e55c937c627b5446a38ed486c2488683dad809dc6f0094baa2f0000133e8998eced493d18b17fc389918477b9c0a34fb1366c835a8cc38db4fdc2d1cee2a17707de2054c1", @ANYRESOCT=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00'}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bf", 0x11}], 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m39.890014086s ago: executing program 36 (id=15379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000301010300000000000000000a0000020c0019"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200005af50000000600000500000000100000", @ANYRES32, @ANYBLOB="00a2850000001d00000000673c56beefb1ac7769058a0e55c937c627b5446a38ed486c2488683dad809dc6f0094baa2f0000133e8998eced493d18b17fc389918477b9c0a34fb1366c835a8cc38db4fdc2d1cee2a17707de2054c1", @ANYRESOCT=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f0000000280)='GPL\x00'}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES8=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r9, &(0x7f00000005c0)=[{&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bf", 0x11}], 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.169662174s ago: executing program 8 (id=16474): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="23c65d54f4c5b2babf5c69a185dbff810f38fd90ca899adb0f5f20000000000000005ccad8c230f11b3f1d4db7d6d15136901ae9b5630dde5ae4617eab63a73595bac8332292e02cbc98162455420f9435aa727b090260f7c68e06e1e54e2bcfe9e4210d9ba263e2000000f8a49f102874d2fe80fec28e0b84552470f43e45c508dae05d842d28101ce992cfb22754e81de7e2ba70efceb435946b644796b2ed7d909371b5094bfbce2c8861f0597561c7440814ee2ce467eb3193558b1c454e6c4ada2d4c4c0671485a7c6b5c13a498e261835b6f1ecd6f513d85eac1c619f77ea9c8b1c4f73a37c398569e780bb5b5d0856030e64da2575e2b5e072c4061c1631d5ee88067f249a3ec00343ff37914226422d33a143ec733c66ba2619c4fea5ee9ff07374ea98620e5cca892997b11bdd7c7e0ea553e207c38df29a5ae58d0ef611a1460bc5b03a63a728eff9b1ce98885a6497033d54486cc939bb92c5d292a37fe9ac2f5e7d3913612ca91dcf2d137f90aab571907673a4399680acec5cc8b5b87ecc14223c95a65c95dda1f227a9db02cca68a4a157c9da8e5dacdab0cd9d3df0f055b8a2c99f1eced693fa46525e21f651fee85f47c6f3fd6acb1e51e5542c1212508a72c7e79a7cb8eeae7aca7bba4b4d9d74c2b7c5cb111f0d716d57ae21b8abda1658abfd250e9be722c37e886d5fb073c39f", 0x2, 0x0, 0x7ffc}, 0x21) ioprio_set$pid(0x1, 0x0, 0x13215c981a990cbe) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@access_client}, {@noextend}], [], 0x6b}}) 5.906358835s ago: executing program 8 (id=16478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = inotify_init1(0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r3, r4, 0x0, 0x200) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="01050e00"], 0x8) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r0, 0x0, 0x0, 0x2400c094, 0x0, 0x0) inotify_rm_watch(r1, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.285884515s ago: executing program 8 (id=16494): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0), 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000540)=0x8, 0x4) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x45833af92e4b38ff, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delchain={0x94, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x88a8}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x80}}, @TCA_RATE={0x6, 0x5, {0xf7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfffffe91}, @TCA_RATE={0x6, 0x5, {0x60, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x3c220ea6}]}, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@map_fd={0x18, 0x9, 0x1, 0x0, r3}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r2, 0x25, 0x8, @val=@netfilter={0x0, 0x0, 0x8}}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) 4.195010469s ago: executing program 8 (id=16497): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x81e00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x3ba}, &(0x7f0000000000), &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 3.631557604s ago: executing program 7 (id=16502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x81e00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005400), 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 3.334580976s ago: executing program 8 (id=16506): r0 = socket(0xa, 0x80805, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010004b042cbd7000fcdbdf257a000000", @ANYRES32=0x0, @ANYBLOB="0010000020900000400012800800010067747000340002800800030005000000050005000000000008000300020000000800040001001200080007008d0000010800040000000000"], 0x60}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x448, &(0x7f0000000d00)="$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") set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x5, 0x2, 0x9, 0x7}, {0x7, 0x8, 0x71, 0x2}, {0x1f7a, 0x2, 0x1, 0x2}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0x0, 0x8}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x200000000000000, 0x0, 0x8008014}, 0x0) r6 = socket(0x1e, 0x805, 0x0) connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x2}}, 0x10) close(r6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000940)='xen_mmu_pte_clear\x00', 0xffffffffffffffff, 0x0, 0xefb5}, 0x18) 3.274435699s ago: executing program 0 (id=16508): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3.2507813s ago: executing program 0 (id=16509): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0xffffffffffffffb2}], 0x1, 0x0, 0x0, 0x10}, 0x4004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRES64=r2, @ANYRES64, @ANYRES8=r2, @ANYRESDEC=r2], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0xd, 0x7, 0x0, 0x0, 0xfd, 0x8, 0x0, 0xfd, 0x5}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x7}, &(0x7f0000000240)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@allocspi={0x108, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860a, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x3502, 0x2, 0x0, 0x1}, 0x3, 0x8}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd2d, 0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 3.166732004s ago: executing program 7 (id=16510): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80210, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000300)}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{0x0}], 0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00761b67c87b9b1400000000001a2ddedb000700", @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) 3.02219663s ago: executing program 7 (id=16513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.02186682s ago: executing program 7 (id=16514): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$qrtr(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff0d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.02075592s ago: executing program 9 (id=16515): syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.211051045s ago: executing program 8 (id=16519): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="9454b83847a5c639dccc1cc3aa288229ee8a8a45ab78b6638fd2636c7547f7afcc1711878b54b4a8bc9eda3358a5cafd58dbb8a9f638354fbf2e6ab22b8558896f959a8579d9a05c6dde4a9dcc1779d407440e34d6e555f793ec7c2979d1f4b82e4122ce3f815e2e5322b7e74e3439af393c3adad4bab28934e91efd14ebc482d56ce8cedb094afc27d5c1e6cc050411de76f5731640796ba1e233fa6da1bb14cd30662898a0595bf34af8eebc3d12716e62ae66fbb6cf070bef47415d593769c361fc054ea962c9d09ed46aecba2af20e0a40204d4d795d019895bc0d52d8cc032ee13ae832fb1f989b70ab35596dfe28c239d45c99016cadd05b87af7bd13d37c5efae45046d0e5f9860e35c2f08ef9f67c80c47b870e353c089bab87b74c588183c64b20b7ccbdb068390e4c59a848d9695f46fc8bdbde97a4400f2e8b7379a62c57fd4ef8bd4f8e3a4bf141e87156efc1b86e15f34591489db7112fcae399f83f9e4ee56a923ea3123b3fbff37ccdf92284137a1500cad979bc0331524168b5f1a5da3e2d6643b6b0f28eb15869ba7f609c4fc9e4aecca1183de7b6427e7564714ffe154c2e4db0042ada0561c58a4003191033a4fdbf0d09c9c49e802e325da5bc2bcbe5b7a64c411a780ae8d0902118894f5f63fe989623f25a7e201e135e8f25b5365c3a615a4727144109cc4b88660728445ce841940d20e87069cb74f63fbfb5dd7992dc4ccde1484aeec05630a440ed9481d03267585eed156484d23b07280cc045ff023abd628d43f7d3b7bc5a9e8e6445f94271d508e5bb17b12216dba8a5f1a02aef9126389dcf725197440404b29b95e71d45b9dad8f3fdf1c6a2734632ca7991026304d869a94259cc32ac8a45da5ba38f54e9d98faf2af04e3f11ab495eb490daa88cbf465fe127cf144081196d8319692a51d3bae449ff531427c829d9cfab8cb15ae4ff6f4392e2c657beae5364b55d05729bc7f950e4b99c7ce71136168a3fda8b7ead182973c1f5fb52f7c6f488f6383c1259345306375ebe0639e40f367be4a480c2babf3e0572a5c089cccd06588489fdf12ff256af41faef912dea1c1cf122e8e4b99770b19fdc9f6b12cdfa51d0b0d3b6dbc18af665f0f92b83b12eda1fae071a9fb49575763d1bfce45616089b868e37bad0c806a5cff911ae163f82f98c885e7c9afa4d55a4117246086b07e55991205ad345dde63ef855097c7be09343ff9dd982e7e8332337c1b9c8aedd1afeb06010e59aeb5008f7bb0d971963f79df825d94773c9b79e6897c53a83388ef89bddd1d35addfb6c3dc0121ac2a7936643159365a0ef14dc95de2d1f60f41a687c04ba42ed9b225496a418e593587f40a25bbb761eeddc2080512646d163a9968ea00f599239b3abd581253d383fb72abad3b19e0d85a7eafdc02e92cbe784129c37152934a286c2a3d5c5eb1ac65caf63f352e58c96a26b0b13462b992926bae78774d7d9de575bf86b50da743692fb38ee9fbc51ac0eff40589f7259b50e1208753abdd7e404abe252592ec7605fb2aacf41771c506cbcf84d7e8657d38", 0xffffffffffffffb2}], 0x1, 0x0, 0x0, 0x10}, 0x4004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRESOCT, @ANYRES64=r2, @ANYRES64, @ANYRES8=r2, @ANYRESDEC=r2], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x2, 0xd, 0x7, 0x0, 0x0, 0xfd, 0x8, 0x0, 0xfd, 0x5}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x7}, &(0x7f0000000240)=0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@allocspi={0x108, 0x16, 0x61bb1f11be440ab3, 0x70bd26, 0x25dfdbfe, {{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@empty, 0x4e23, 0x8, 0x4e20, 0x2, 0xa, 0xa0, 0x1a0, 0x76}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d5, 0x33}, @in=@local, {0x0, 0x6, 0xfffffffffffffff9, 0x3, 0x2, 0x35, 0x9, 0x4}, {0xfffffffffffffffb, 0x860a, 0x310, 0x4}, {0x7fffffff, 0x8, 0x2ed9}, 0x70bd2b, 0x3502, 0x2, 0x0, 0x1}, 0x3, 0x8}, [@replay_val={0x10, 0xa, {0x70bd25, 0x70bd2d, 0x5}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 2.127825659s ago: executing program 7 (id=16520): io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0x2397, 0x40, 0x3, 0x6}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x8aa1, 0x10100, 0xfffffffc, 0xdc}, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000a5f000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f00007f9000/0x1000)=nil) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) 2.038877792s ago: executing program 9 (id=16521): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) ioprio_set$pid(0x1, 0x0, 0x13215c981a990cbe) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cachetag}, {@access_client}, {@noextend}], [], 0x6b}}) 1.932575307s ago: executing program 1 (id=16525): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 1.931472077s ago: executing program 9 (id=16526): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r2, 0x0, 0x4c) 1.874791289s ago: executing program 9 (id=16527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 1.87411917s ago: executing program 9 (id=16528): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) unshare(0x22020600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) pread64(r5, 0x0, 0x0, 0x5) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000f0000000000000000000611250000000edff9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x3, 0x0, 0x7ffc0001}]}) r6 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() r9 = open(&(0x7f0000000540)='.\x00', 0x100, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/rcu_expedited', 0x400000, 0x14) sendmmsg$unix(r9, &(0x7f0000000680), 0x0, 0x4004005) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f00000003c0)={&(0x7f00000005c0)=""/159, 0x9f, 0x0, 0x7}) fsync(r9) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000100)={0x9, 0x8}) 1.610073251s ago: executing program 1 (id=16529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xffd, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f0000000200)='./file0\x00', 0x4) renameat2(r4, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) timerfd_gettime(r4, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 1.38612583s ago: executing program 1 (id=16530): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f0000010280)='./file0\x00', 0x182) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000006c0)={{r2}, "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"}) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x772, 0xfac3, 0x8, 0x4}, 0x2, 0x7}}, 0x400000) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGREP(r3, 0x80084503, 0x0) recvmmsg(r2, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x45833af92e4b38ff, 0x0) 1.305513834s ago: executing program 1 (id=16531): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r1, 0x0, 0x2144}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.256914426s ago: executing program 7 (id=16532): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xa}], 0x10}, 0xfc00) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="0bc3", 0x2}, {&(0x7f0000003300)="fcfe", 0x2}], 0x2) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xca, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b705000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r3, {0xee00}}, './file0\x00'}) syz_clone3(&(0x7f0000000ac0)={0x80400, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0), {0x3}, &(0x7f0000000940)=""/43, 0x2b, &(0x7f0000000a00)=""/103, &(0x7f0000000980)=[r0, r0, r0, r0, r0, r0], 0x6, {r9}}, 0x58) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r8}, 0x20) unshare(0x62040200) waitid(0x2, r0, &(0x7f0000000700), 0x80000000, &(0x7f0000000780)) 1.206559798s ago: executing program 1 (id=16533): syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.043313725s ago: executing program 1 (id=16534): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.015110506s ago: executing program 9 (id=16535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = inotify_init1(0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r3, r4, 0x0, 0x200) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="01050e00"], 0x8) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r0, 0x0, 0x0, 0x2400c094, 0x0, 0x0) inotify_rm_watch(r1, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 601.132204ms ago: executing program 0 (id=16536): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) socket$inet(0x2, 0x4000000000000001, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) 581.551865ms ago: executing program 0 (id=16537): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 562.442246ms ago: executing program 0 (id=16538): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x182) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000680)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x45833af92e4b38ff, 0x0) 0s ago: executing program 0 (id=16539): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@i_version}, {@auto_da_alloc}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000c40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240), 0x20100, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000005003efe0042a80400001700000000000085000000070000001811de8be8cc20560000aafd837f953c7133336cf3bd181bbf2efc292a0a644ca377e369a2999e82787d89ad378c4384b51faefcde945d1c8c93ac1e37a708e4726f91d8ecbc3ded97f2ad93727361fabbea3136f7427cc9243507f6ac85f09df8022e1554a2aff9736deafbf94b57567f61f01e7f6b2063cb3a474a4e1b96b22bebf6b9d868cfe18773b6c4d8d5b2fd305d2f987aeaa9c0cc0433cffe90e6bd26089298", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000740)=ANY=[], 0x9) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) kernel console output (not intermixed with test programs): : auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19952 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b887df749 code=0x7ffc0000 [ 1220.756045][ T29] audit: type=1326 audit(2000000455.310:431032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19952 comm="syz.7.16181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1b887df749 code=0x7ffc0000 [ 1220.791496][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.816768][T19959] loop0: detected capacity change from 0 to 512 [ 1220.843796][T19959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.856454][T19959] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1220.868527][T19959] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.16183: Failed to acquire dquot type 0 [ 1220.891326][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.908226][T19967] netlink: 'syz.7.16188': attribute type 1 has an invalid length. [ 1220.916792][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16188'. [ 1220.949187][T19971] loop7: detected capacity change from 0 to 512 [ 1220.963997][T19971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.999173][T19971] ext4 filesystem being mounted at /270/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.022521][T19971] FAULT_INJECTION: forcing a failure. [ 1221.022521][T19971] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.035411][T19971] CPU: 0 UID: 0 PID: 19971 Comm: syz.7.16189 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1221.035549][T19971] Tainted: [W]=WARN [ 1221.035556][T19971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1221.035569][T19971] Call Trace: [ 1221.035576][T19971] [ 1221.035584][T19971] __dump_stack+0x1d/0x30 [ 1221.035607][T19971] dump_stack_lvl+0xe8/0x140 [ 1221.035681][T19971] dump_stack+0x15/0x1b [ 1221.035700][T19971] should_fail_ex+0x265/0x280 [ 1221.035720][T19971] should_failslab+0x8c/0xb0 [ 1221.035748][T19971] kmem_cache_alloc_noprof+0x50/0x480 [ 1221.035776][T19971] ? getname_flags+0x80/0x3b0 [ 1221.035806][T19971] getname_flags+0x80/0x3b0 [ 1221.035835][T19971] path_setxattrat+0x223/0x310 [ 1221.035880][T19971] __x64_sys_setxattr+0x6e/0x90 [ 1221.035989][T19971] x64_sys_call+0xf1e/0x3000 [ 1221.036012][T19971] do_syscall_64+0xd8/0x2a0 [ 1221.036126][T19971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.036192][T19971] RIP: 0033:0x7f1b887df749 [ 1221.036282][T19971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1221.036326][T19971] RSP: 002b:00007f1b87247038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1221.036347][T19971] RAX: ffffffffffffffda RBX: 00007f1b88a35fa0 RCX: 00007f1b887df749 [ 1221.036360][T19971] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 1221.036373][T19971] RBP: 00007f1b87247090 R08: 0000000000000003 R09: 0000000000000000 [ 1221.036388][T19971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.036401][T19971] R13: 00007f1b88a36038 R14: 00007f1b88a35fa0 R15: 00007ffe9f1fe328 [ 1221.036420][T19971] [ 1221.211750][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.225215][T19981] netlink: 'syz.1.16193': attribute type 13 has an invalid length. [ 1221.233272][T19981] netlink: 'syz.1.16193': attribute type 17 has an invalid length. [ 1221.259244][T19988] loop0: detected capacity change from 0 to 2048 [ 1221.286489][T19981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1221.287197][T19988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1221.338619][T19990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1221.359830][T19996] pim6reg: entered allmulticast mode [ 1221.391327][T19983] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1221.452812][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.494746][T20003] loop0: detected capacity change from 0 to 256 [ 1221.634724][T20011] loop0: detected capacity change from 0 to 256 [ 1221.784131][T20001] loop8: detected capacity change from 0 to 4096 [ 1221.793287][T20017] FAULT_INJECTION: forcing a failure. [ 1221.793287][T20017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.806532][T20017] CPU: 1 UID: 0 PID: 20017 Comm: syz.0.16207 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1221.806602][T20017] Tainted: [W]=WARN [ 1221.806608][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1221.806621][T20017] Call Trace: [ 1221.806627][T20017] [ 1221.806634][T20017] __dump_stack+0x1d/0x30 [ 1221.806657][T20017] dump_stack_lvl+0xe8/0x140 [ 1221.806679][T20017] dump_stack+0x15/0x1b [ 1221.806760][T20017] should_fail_ex+0x265/0x280 [ 1221.806783][T20017] should_fail+0xb/0x20 [ 1221.806801][T20017] should_fail_usercopy+0x1a/0x20 [ 1221.806912][T20017] _copy_from_iter+0xcf/0xe70 [ 1221.807048][T20017] ? __build_skb_around+0x164/0x1c0 [ 1221.807083][T20017] ? __alloc_skb+0x223/0x320 [ 1221.807122][T20017] netlink_sendmsg+0x471/0x6b0 [ 1221.807152][T20017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.807235][T20017] __sock_sendmsg+0x145/0x180 [ 1221.807267][T20017] ____sys_sendmsg+0x31e/0x4a0 [ 1221.807296][T20017] ___sys_sendmsg+0x17b/0x1d0 [ 1221.807381][T20017] __x64_sys_sendmsg+0xd4/0x160 [ 1221.807407][T20017] x64_sys_call+0x17ba/0x3000 [ 1221.807468][T20017] do_syscall_64+0xd8/0x2a0 [ 1221.807507][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.807533][T20017] RIP: 0033:0x7f8b06d5f749 [ 1221.807618][T20017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1221.807639][T20017] RSP: 002b:00007f8b057c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.807662][T20017] RAX: ffffffffffffffda RBX: 00007f8b06fb5fa0 RCX: 00007f8b06d5f749 [ 1221.807675][T20017] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1221.807687][T20017] RBP: 00007f8b057c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1221.807699][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.807775][T20017] R13: 00007f8b06fb6038 R14: 00007f8b06fb5fa0 R15: 00007fffb25f7298 [ 1221.807872][T20017] [ 1222.060346][T20001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.123338][T18175] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1222.619215][T15819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.749256][T20036] random: crng reseeded on system resumption [ 1222.776176][ T8821] Bluetooth: hci0: Frame reassembly failed (-84) [ 1222.795607][T20044] loop7: detected capacity change from 0 to 256 [ 1222.814564][T20046] loop8: detected capacity change from 0 to 2048 [ 1222.825330][T20046] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1222.878764][T20051] loop9: detected capacity change from 0 to 2048 [ 1222.898862][T20051] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.930940][T20058] loop7: detected capacity change from 0 to 128 [ 1222.981435][T20051] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.015683][T20063] loop0: detected capacity change from 0 to 512 [ 1223.022877][T20063] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1223.032793][T20063] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 1223.045195][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16223'. [ 1223.063027][T20063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1223.075543][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16223'. [ 1223.093942][T20063] bond1 (unregistering): Released all slaves [ 1223.108702][T20051] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.172134][T20051] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.793294][T20069] syz.0.16224 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1223.807644][T20069] CPU: 1 UID: 0 PID: 20069 Comm: syz.0.16224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1223.807688][T20069] Tainted: [W]=WARN [ 1223.807698][T20069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1223.807716][T20069] Call Trace: [ 1223.807780][T20069] [ 1223.807788][T20069] __dump_stack+0x1d/0x30 [ 1223.807812][T20069] dump_stack_lvl+0xe8/0x140 [ 1223.807841][T20069] dump_stack+0x15/0x1b [ 1223.807865][T20069] dump_header+0x81/0x220 [ 1223.807967][T20069] oom_kill_process+0x342/0x400 [ 1223.808070][T20069] out_of_memory+0x979/0xb80 [ 1223.808113][T20069] try_charge_memcg+0x610/0xa10 [ 1223.808151][T20069] obj_cgroup_charge_pages+0xa6/0x150 [ 1223.808317][T20069] __memcg_kmem_charge_page+0x9f/0x170 [ 1223.808416][T20069] __alloc_frozen_pages_noprof+0x188/0x360 [ 1223.808475][T20069] alloc_pages_mpol+0xb3/0x260 [ 1223.808553][T20069] alloc_pages_noprof+0x90/0x130 [ 1223.808577][T20069] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1223.808627][T20069] ? __irq_work_queue_local+0x10f/0x2c0 [ 1223.808666][T20069] __kvmalloc_node_noprof+0x483/0x670 [ 1223.808757][T20069] ? ip_set_alloc+0x24/0x30 [ 1223.808782][T20069] ? ip_set_alloc+0x24/0x30 [ 1223.808804][T20069] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1223.808888][T20069] ip_set_alloc+0x24/0x30 [ 1223.808910][T20069] hash_netiface_create+0x282/0x740 [ 1223.808938][T20069] ? __pfx_hash_netiface_create+0x10/0x10 [ 1223.808966][T20069] ip_set_create+0x3cc/0x970 [ 1223.809015][T20069] ? __cond_resched+0x4e/0x90 [ 1223.809047][T20069] nfnetlink_rcv_msg+0x4c6/0x590 [ 1223.809221][T20069] netlink_rcv_skb+0x123/0x220 [ 1223.809280][T20069] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1223.809346][T20069] nfnetlink_rcv+0x167/0x16c0 [ 1223.809445][T20069] ? kmem_cache_free+0xe4/0x3d0 [ 1223.809486][T20069] ? __kfree_skb+0x109/0x150 [ 1223.809506][T20069] ? nlmon_xmit+0x4f/0x60 [ 1223.809533][T20069] ? consume_skb+0x49/0x150 [ 1223.809556][T20069] ? nlmon_xmit+0x4f/0x60 [ 1223.809626][T20069] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1223.809654][T20069] ? __dev_queue_xmit+0x11c6/0x1fd0 [ 1223.809683][T20069] ? __dev_queue_xmit+0x148/0x1fd0 [ 1223.809789][T20069] ? ref_tracker_free+0x37d/0x3e0 [ 1223.809815][T20069] ? __netlink_deliver_tap+0x4dc/0x500 [ 1223.809863][T20069] netlink_unicast+0x5c0/0x690 [ 1223.809935][T20069] netlink_sendmsg+0x58b/0x6b0 [ 1223.810032][T20069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1223.810119][T20069] __sock_sendmsg+0x145/0x180 [ 1223.810158][T20069] ____sys_sendmsg+0x31e/0x4a0 [ 1223.810192][T20069] ___sys_sendmsg+0x17b/0x1d0 [ 1223.810292][T20069] __x64_sys_sendmsg+0xd4/0x160 [ 1223.810319][T20069] x64_sys_call+0x17ba/0x3000 [ 1223.810346][T20069] do_syscall_64+0xd8/0x2a0 [ 1223.810479][T20069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.810501][T20069] RIP: 0033:0x7f8b06d5f749 [ 1223.810521][T20069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.810546][T20069] RSP: 002b:00007f8b057c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1223.810601][T20069] RAX: ffffffffffffffda RBX: 00007f8b06fb5fa0 RCX: 00007f8b06d5f749 [ 1223.810616][T20069] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1223.810634][T20069] RBP: 00007f8b06de3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1223.810702][T20069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.810716][T20069] R13: 00007f8b06fb6038 R14: 00007f8b06fb5fa0 R15: 00007fffb25f7298 [ 1223.810741][T20069] [ 1223.810767][T20069] memory: usage 307200kB, limit 307200kB, failcnt 5262 [ 1223.947981][T20076] random: crng reseeded on system resumption [ 1223.952388][T20069] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1223.952408][T20069] kmem: usage 307116kB, limit 9007199254740988kB, failcnt 0 [ 1223.952420][T20069] Memory cgroup stats for /syz0: [ 1224.184237][T20069] cache 0 [ 1224.192291][T20069] rss 0 [ 1224.195121][T20069] shmem 0 [ 1224.198074][T20069] mapped_file 0 [ 1224.201549][T20069] dirty 0 [ 1224.204546][T20069] writeback 4096 [ 1224.208187][T20069] workingset_refault_anon 11740 [ 1224.213168][T20069] workingset_refault_file 17138 [ 1224.218021][T20069] swap 196608 [ 1224.221306][T20069] swapcached 8192 [ 1224.224983][T20069] pgpgin 1413945 [ 1224.228563][T20069] pgpgout 1413925 [ 1224.232272][T20069] pgfault 1267869 [ 1224.235928][T20069] pgmajfault 2565 [ 1224.239549][T20069] inactive_anon 0 [ 1224.243312][T20069] active_anon 4096 [ 1224.247042][T20069] inactive_file 0 [ 1224.250720][T20069] active_file 73728 [ 1224.254561][T20069] unevictable 0 [ 1224.258025][T20069] hierarchical_memory_limit 314572800 [ 1224.263535][T20069] hierarchical_memsw_limit 9223372036854771712 [ 1224.269697][T20069] total_cache 0 [ 1224.273178][T20069] total_rss 0 [ 1224.276477][T20069] total_shmem 0 [ 1224.279955][T20069] total_mapped_file 0 [ 1224.283994][T20069] total_dirty 0 [ 1224.287504][T20069] total_writeback 4096 [ 1224.291581][T20069] total_workingset_refault_anon 11740 [ 1224.297040][T20069] total_workingset_refault_file 17138 [ 1224.302482][T20069] total_swap 196608 [ 1224.306280][T20069] total_swapcached 8192 [ 1224.310429][T20069] total_pgpgin 1414053 [ 1224.314554][T20069] total_pgpgout 1414033 [ 1224.318867][T20069] total_pgfault 1268052 [ 1224.323109][T20069] total_pgmajfault 2565 [ 1224.327268][T20069] total_inactive_anon 0 [ 1224.331413][T20069] total_active_anon 4096 [ 1224.335717][T20069] total_inactive_file 0 [ 1224.339925][T20069] total_active_file 73728 [ 1224.344283][T20069] total_unevictable 0 [ 1224.348348][T20069] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.16224,pid=20068,uid=0 [ 1224.363176][T20069] Memory cgroup out of memory: Killed process 20068 (syz.0.16224) total-vm:93968kB, anon-rss:1116kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1224.393990][ T8842] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.419253][ T8842] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.428923][ T8842] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.437724][ T8842] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.476584][T20083] loop8: detected capacity change from 0 to 2048 [ 1224.516730][T20083] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1224.532233][T20092] loop7: detected capacity change from 0 to 256 [ 1224.631937][T20094] loop8: detected capacity change from 0 to 512 [ 1224.646577][T20094] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1224.656655][T20094] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 1224.688567][T20094] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16234'. [ 1224.720240][T20097] loop0: detected capacity change from 0 to 256 [ 1224.730599][T20094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1224.734263][T20101] loop7: detected capacity change from 0 to 128 [ 1224.747840][T20094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16234'. [ 1224.774109][T20094] bond1 (unregistering): Released all slaves [ 1224.842042][ T7184] Bluetooth: hci0: command 0x1003 tx timeout [ 1224.848140][T18175] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1225.038872][T20111] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1225.501401][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 1225.501419][ T29] audit: type=1400 audit(2000000460.100:431375): avc: denied { create } for pid=20118 comm="syz.0.16242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1225.529471][ T29] audit: type=1400 audit(2000000460.130:431376): avc: denied { bind } for pid=20118 comm="syz.0.16242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1225.612269][T20124] loop0: detected capacity change from 0 to 2048 [ 1225.623622][T20131] loop7: detected capacity change from 0 to 128 [ 1225.630509][T20131] vfat: Unknown parameter '01777777777777777777777v u;y{.IDmhS\q486Sɂpb9W [ 1227.717887][T20207] __dump_stack+0x1d/0x30 [ 1227.717915][T20207] dump_stack_lvl+0xe8/0x140 [ 1227.717962][T20207] dump_stack+0x15/0x1b [ 1227.717985][T20207] should_fail_ex+0x265/0x280 [ 1227.718010][T20207] should_fail+0xb/0x20 [ 1227.718026][T20207] should_fail_usercopy+0x1a/0x20 [ 1227.718089][T20207] _copy_from_iter+0xcf/0xe70 [ 1227.718118][T20207] ? __build_skb_around+0x164/0x1c0 [ 1227.718155][T20207] ? __alloc_skb+0x223/0x320 [ 1227.718276][T20207] netlink_sendmsg+0x471/0x6b0 [ 1227.718311][T20207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1227.718411][T20207] __sock_sendmsg+0x145/0x180 [ 1227.718460][T20207] ____sys_sendmsg+0x31e/0x4a0 [ 1227.718494][T20207] ___sys_sendmsg+0x17b/0x1d0 [ 1227.718538][T20207] __x64_sys_sendmsg+0xd4/0x160 [ 1227.718582][T20207] x64_sys_call+0x17ba/0x3000 [ 1227.718607][T20207] do_syscall_64+0xd8/0x2a0 [ 1227.718676][T20207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.718718][T20207] RIP: 0033:0x7f515372f749 [ 1227.718739][T20207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1227.718764][T20207] RSP: 002b:00007f515218f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1227.718789][T20207] RAX: ffffffffffffffda RBX: 00007f5153985fa0 RCX: 00007f515372f749 [ 1227.718804][T20207] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 1227.718817][T20207] RBP: 00007f515218f090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.718850][T20207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.718862][T20207] R13: 00007f5153986038 R14: 00007f5153985fa0 R15: 00007ffc6ef1c318 [ 1227.718884][T20207] [ 1227.913441][T20204] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.16265: Failed to acquire dquot type 0 [ 1227.939309][T20204] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.16265: Freeing blocks not in datazone - block = 0, count = 4096 [ 1227.954448][T20204] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.16265: Invalid inode bitmap blk 0 in block_group 0 [ 1227.968593][T20204] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1227.978149][ T8827] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0 [ 1227.990762][T20204] EXT4-fs (loop8): 1 orphan inode deleted [ 1227.998244][T20198] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1228.008133][T20198] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.044258][T20209] loop9: detected capacity change from 0 to 2048 [ 1228.051911][T20214] random: crng reseeded on system resumption [ 1228.078988][T20209] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.121124][T20220] bridge_slave_0: left allmulticast mode [ 1228.127025][T20220] bridge_slave_0: left promiscuous mode [ 1228.132971][T20220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.144281][T20220] bridge_slave_1: left allmulticast mode [ 1228.150035][T20220] bridge_slave_1: left promiscuous mode [ 1228.155984][T20220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.178049][T20220] bond0: (slave bond_slave_0): Releasing backup interface [ 1228.200994][T20220] bond0: (slave bond_slave_1): Releasing backup interface [ 1228.227099][T20220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.234767][T20220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.257756][T20220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.265329][T20220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1228.295280][T20220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1228.322315][T20209] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.354511][ T8827] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.362788][ T8827] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.403025][ T8827] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.411328][ T8827] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.423894][T20209] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.448284][T20229] loop7: detected capacity change from 0 to 1024 [ 1228.456082][T20229] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1228.472364][ T8827] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.480589][ T8827] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.491506][T20229] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.16275: Invalid block bitmap block 0 in block_group 0 [ 1228.524937][T20229] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16275: Failed to acquire dquot type 0 [ 1228.540589][ T8827] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1228.549071][ T8827] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.569152][T20229] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.16275: Freeing blocks not in datazone - block = 0, count = 4096 [ 1228.590447][T20229] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.16275: Invalid inode bitmap blk 0 in block_group 0 [ 1228.603828][ T8835] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:36: Failed to release dquot type 0 [ 1228.617031][T20209] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.628251][T20229] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1228.638299][T20229] EXT4-fs (loop7): 1 orphan inode deleted [ 1228.641295][T20235] loop0: detected capacity change from 0 to 256 [ 1228.665466][ T8835] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:36: Failed to release dquot type 0 [ 1229.003312][T20239] loop0: detected capacity change from 0 to 256 [ 1229.039729][T20239] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1229.046342][T20239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1229.053965][T20239] vhci_hcd vhci_hcd.0: Device attached [ 1229.067536][T20239] 9pnet_fd: Insufficient options for proto=fd [ 1229.074764][T20240] vhci_hcd: connection closed [ 1229.075147][ T8842] vhci_hcd: stop threads [ 1229.084227][ T8842] vhci_hcd: release socket [ 1229.088650][ T8842] vhci_hcd: disconnect device [ 1229.125947][T20244] random: crng reseeded on system resumption [ 1229.132858][T20245] loop7: detected capacity change from 0 to 1024 [ 1229.140325][T20245] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1229.153349][T20245] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.16278: Invalid block bitmap block 0 in block_group 0 [ 1229.168331][T20245] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16278: Failed to acquire dquot type 0 [ 1229.175744][T20248] loop8: detected capacity change from 0 to 1024 [ 1229.180496][T20245] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.16278: Freeing blocks not in datazone - block = 0, count = 4096 [ 1229.187325][T20248] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1229.210700][T20245] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.16278: Invalid inode bitmap blk 0 in block_group 0 [ 1229.211817][T20248] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.16281: Invalid block bitmap block 0 in block_group 0 [ 1229.224661][ T8827] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0 [ 1229.237544][T20248] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.16281: Failed to acquire dquot type 0 [ 1229.249249][T20245] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1229.261937][T20248] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.16281: Freeing blocks not in datazone - block = 0, count = 4096 [ 1229.272318][T20245] EXT4-fs (loop7): 1 orphan inode deleted [ 1229.283264][T20248] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.16281: Invalid inode bitmap blk 0 in block_group 0 [ 1229.288129][ T8827] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:29: Failed to release dquot type 0 [ 1229.300961][T20248] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1229.320971][T20248] EXT4-fs (loop8): 1 orphan inode deleted [ 1229.379629][ T8842] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.391405][ T8842] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.401029][ T1301] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 1229.422682][ T8842] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.432050][ T8842] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.539852][T20266] loop9: detected capacity change from 0 to 128 [ 1229.605866][T20262] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1229.705326][ T1301] Bluetooth: hci0: Frame reassembly failed (-84) [ 1229.885198][T20282] loop8: detected capacity change from 0 to 1024 [ 1229.903742][T20282] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1229.934560][T20282] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.16293: Invalid block bitmap block 0 in block_group 0 [ 1229.960181][T20282] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.16293: Failed to acquire dquot type 0 [ 1229.982429][T20282] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.16293: Freeing blocks not in datazone - block = 0, count = 4096 [ 1230.006832][T20282] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.16293: Invalid inode bitmap blk 0 in block_group 0 [ 1230.020018][T20282] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1230.028743][ T8836] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 1230.040762][T20282] EXT4-fs (loop8): 1 orphan inode deleted [ 1230.263950][T20300] loop8: detected capacity change from 0 to 512 [ 1230.293998][T20300] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.319508][T20300] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.16301: Failed to acquire dquot type 0 [ 1230.341102][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16300'. [ 1230.391772][T20305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16300'. [ 1230.400897][T20303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1230.446075][T20305] bond1 (unregistering): Released all slaves [ 1230.502846][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 1230.502862][ T29] audit: type=1326 audit(2000000465.110:432441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.516465][T20309] loop7: detected capacity change from 0 to 512 [ 1230.540584][T20309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1230.548749][T20309] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1230.556752][T20309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1230.565064][T20309] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1230.566091][T20313] loop9: detected capacity change from 0 to 2048 [ 1230.574590][T20309] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1230.594015][ T29] audit: type=1326 audit(2000000465.110:432442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba12f749 code=0x7ffc0000 [ 1230.598705][T20309] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1230.617866][ T29] audit: type=1326 audit(2000000465.110:432443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba12f749 code=0x7ffc0000 [ 1230.648254][ T29] audit: type=1326 audit(2000000465.110:432444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.672118][ T29] audit: type=1326 audit(2000000465.110:432445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.695962][ T29] audit: type=1326 audit(2000000465.120:432446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.719822][ T29] audit: type=1326 audit(2000000465.120:432447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.743616][ T29] audit: type=1326 audit(2000000465.120:432448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.767479][ T29] audit: type=1326 audit(2000000465.120:432449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.791441][ T29] audit: type=1326 audit(2000000465.140:432450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20297 comm="syz.1.16300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7ba162005 code=0x7ffc0000 [ 1230.820478][T20313] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.820788][T20309] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1230.874269][T20313] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1230.886023][T20309] netlink: 'syz.7.16303': attribute type 13 has an invalid length. [ 1230.894056][T20309] netlink: 'syz.7.16303': attribute type 17 has an invalid length. [ 1230.906729][T20319] loop8: detected capacity change from 0 to 1024 [ 1230.915560][T20319] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1230.935290][T20319] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.16306: Invalid block bitmap block 0 in block_group 0 [ 1230.949427][T20319] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.16306: Failed to acquire dquot type 0 [ 1230.976404][T20319] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.16306: Freeing blocks not in datazone - block = 0, count = 4096 [ 1231.001164][T20319] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.16306: Invalid inode bitmap blk 0 in block_group 0 [ 1231.014500][ T8835] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:36: Failed to release dquot type 0 [ 1231.026832][T20309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1231.044119][T20313] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.070485][T20319] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1231.088898][T20319] EXT4-fs (loop8): 1 orphan inode deleted [ 1231.113888][T20313] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1231.145455][T20323] loop7: detected capacity change from 0 to 1024 [ 1231.153868][T20323] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1231.173622][T20323] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.16307: Invalid block bitmap block 0 in block_group 0 [ 1231.187572][T20323] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16307: Failed to acquire dquot type 0 [ 1231.199927][T20323] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.16307: Freeing blocks not in datazone - block = 0, count = 4096 [ 1231.214148][T20323] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.16307: Invalid inode bitmap blk 0 in block_group 0 [ 1231.228546][T20323] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1231.237584][T20323] EXT4-fs (loop7): 1 orphan inode deleted [ 1231.243770][ T8842] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 0 [ 1231.258530][T20331] program syz.8.16308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1231.289952][ T8842] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:43: Failed to release dquot type 0 [ 1231.337533][T20334] loop7: detected capacity change from 0 to 2048 [ 1231.369044][T20334] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1231.444065][T20344] loop7: detected capacity change from 0 to 128 [ 1231.462802][T20344] vfat: Unknown parameter '01777777777777777777777v u;y{.IDmhS\q486Sɂpb9W [ 1232.327913][T16847] __dump_stack+0x1d/0x30 [ 1232.327934][T16847] dump_stack_lvl+0xe8/0x140 [ 1232.327959][T16847] dump_stack+0x15/0x1b [ 1232.327975][T16847] dump_header+0x81/0x220 [ 1232.327991][T16847] oom_kill_process+0x342/0x400 [ 1232.328016][T16847] out_of_memory+0x979/0xb80 [ 1232.328102][T16847] try_charge_memcg+0x610/0xa10 [ 1232.328181][T16847] charge_memcg+0x51/0xc0 [ 1232.328199][T16847] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1232.328220][T16847] __read_swap_cache_async+0x17b/0x2d0 [ 1232.328309][T16847] swap_cluster_readahead+0x362/0x3c0 [ 1232.328423][T16847] swapin_readahead+0xde/0x800 [ 1232.328465][T16847] ? __rcu_read_unlock+0x4f/0x70 [ 1232.328493][T16847] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 1232.328591][T16847] ? __list_add_valid_or_report+0x38/0xe0 [ 1232.328615][T16847] ? __rcu_read_unlock+0x4f/0x70 [ 1232.328671][T16847] ? swap_cache_get_folio+0x277/0x280 [ 1232.328700][T16847] do_swap_page+0x2ae/0x2370 [ 1232.328717][T16847] ? _raw_spin_unlock+0x26/0x50 [ 1232.328737][T16847] ? finish_task_switch+0x7a/0x290 [ 1232.328766][T16847] ? __schedule+0x85f/0xcd0 [ 1232.328858][T16847] ? __pfx_default_wake_function+0x10/0x10 [ 1232.328888][T16847] handle_mm_fault+0x9a5/0x2be0 [ 1232.328916][T16847] do_user_addr_fault+0x630/0x1080 [ 1232.328969][T16847] exc_page_fault+0x62/0xa0 [ 1232.328997][T16847] asm_exc_page_fault+0x26/0x30 [ 1232.329070][T16847] RIP: 0033:0x7ff7ba161fc5 [ 1232.329085][T16847] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 1232.329100][T16847] RSP: 002b:00007ffe019d0cc8 EFLAGS: 00010246 [ 1232.329115][T16847] RAX: 0000000000000000 RBX: 000000000000024e RCX: 00007ff7ba161fc3 [ 1232.329126][T16847] RDX: 00007ffe019d0ce0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1232.329137][T16847] RBP: 00007ffe019d0d4c R08: 000000000808a19f R09: 0000000000000000 [ 1232.329189][T16847] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1232.329202][T16847] R13: 00000000000927c0 R14: 000000000012ca3a R15: 00007ffe019d0da0 [ 1232.329336][T16847] [ 1232.329343][T16847] memory: usage 307200kB, limit 307200kB, failcnt 5928 [ 1232.571828][T16847] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 1232.579772][T16847] kmem: usage 307036kB, limit 9007199254740988kB, failcnt 0 [ 1232.587083][T16847] Memory cgroup stats for /syz1: [ 1232.588020][T16847] cache 0 [ 1232.595997][T16847] rss 0 [ 1232.598800][T16847] shmem 0 [ 1232.601737][T16847] mapped_file 0 [ 1232.605266][T16847] dirty 0 [ 1232.608397][T16847] writeback 0 [ 1232.611886][T16847] workingset_refault_anon 9623 [ 1232.616710][T16847] workingset_refault_file 17231 [ 1232.621632][T16847] swap 200704 [ 1232.624986][T16847] swapcached 0 [ 1232.628383][T16847] pgpgin 1325403 [ 1232.631939][T16847] pgpgout 1325362 [ 1232.635623][T16847] pgfault 1343432 [ 1232.639260][T16847] pgmajfault 2216 [ 1232.642967][T16847] inactive_anon 0 [ 1232.646675][T16847] active_anon 0 [ 1232.650130][T16847] inactive_file 0 [ 1232.653789][T16847] active_file 167936 [ 1232.657751][T16847] unevictable 0 [ 1232.661266][T16847] hierarchical_memory_limit 314572800 [ 1232.666661][T16847] hierarchical_memsw_limit 9223372036854771712 [ 1232.672868][T16847] total_cache 0 [ 1232.676329][T16847] total_rss 0 [ 1232.679694][T16847] total_shmem 0 [ 1232.683204][T16847] total_mapped_file 0 [ 1232.687194][T16847] total_dirty 0 [ 1232.690655][T16847] total_writeback 0 [ 1232.694504][T16847] total_workingset_refault_anon 9623 [ 1232.699875][T16847] total_workingset_refault_file 17231 [ 1232.705276][T16847] total_swap 200704 [ 1232.709097][T16847] total_swapcached 0 [ 1232.713028][T16847] total_pgpgin 1325517 [ 1232.717104][T16847] total_pgpgout 1325476 [ 1232.721317][T16847] total_pgfault 1343733 [ 1232.725583][T16847] total_pgmajfault 2216 [ 1232.729761][T16847] total_inactive_anon 0 [ 1232.733946][T16847] total_active_anon 0 [ 1232.737948][T16847] total_inactive_file 0 [ 1232.742160][T16847] total_active_file 167936 [ 1232.746592][T16847] total_unevictable 0 [ 1232.750608][T16847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.16313,pid=20337,uid=0 [ 1232.765490][T16847] Memory cgroup out of memory: Killed process 20337 (syz.1.16313) total-vm:93968kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1232.812326][T20380] can0 (unregistered): slcan off ptm0. [ 1232.820760][T20388] bridge_slave_0: left allmulticast mode [ 1232.826515][T20388] bridge_slave_0: left promiscuous mode [ 1232.832283][T20388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.858211][T20388] bridge_slave_1: left allmulticast mode [ 1232.864024][T20388] bridge_slave_1: left promiscuous mode [ 1232.869705][T20388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.881563][T20388] bond0: (slave bond_slave_0): Releasing backup interface [ 1232.901559][T20388] bond0: (slave bond_slave_1): Releasing backup interface [ 1232.919379][T20388] team0: Port device team_slave_0 removed [ 1232.942792][T20388] team0: Port device team_slave_1 removed [ 1232.955555][T20388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.963175][T20388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.978711][T20388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.986645][T20388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.989709][T20395] loop7: detected capacity change from 0 to 1024 [ 1233.000500][T20390] loop8: detected capacity change from 0 to 8192 [ 1233.011219][T20388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1233.016160][T20395] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1233.042437][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.042437][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.044628][T20395] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.16332: Invalid block bitmap block 0 in block_group 0 [ 1233.056013][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.072161][T20395] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16332: Failed to acquire dquot type 0 [ 1233.094596][ T8827] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.109665][T20395] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.16332: Freeing blocks not in datazone - block = 0, count = 4096 [ 1233.131046][ T8827] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.142162][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.142162][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.155800][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.160067][ T8827] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.164277][T20395] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.16332: Invalid inode bitmap blk 0 in block_group 0 [ 1233.173766][ T8827] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.186197][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.186197][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.206946][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.218867][ T8835] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:36: Failed to release dquot type 0 [ 1233.229087][T20395] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1233.230921][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.230921][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.252614][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.261430][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.261430][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.275090][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.283925][T20395] EXT4-fs (loop7): 1 orphan inode deleted [ 1233.284054][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.284054][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.303233][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.317076][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.317076][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.330758][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.339246][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.339246][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.344429][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 1233.352959][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.368125][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.368125][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.381753][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.390829][T20390] syz.8.16330: attempt to access beyond end of device [ 1233.390829][T20390] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1233.404395][T20390] Buffer I/O error on dev loop8, logical block 57847, async page read [ 1233.418095][ T52] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 1233.429712][T20405] loop0: detected capacity change from 0 to 2048 [ 1233.463718][T20405] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1233.495129][T15737] EXT4-fs unmount: 53 callbacks suppressed [ 1233.495150][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.579308][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 1233.668514][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16341'. [ 1233.693864][T20424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1233.714779][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16341'. [ 1233.734156][T20424] bond2 (unregistering): Released all slaves [ 1234.501424][T20440] random: crng reseeded on system resumption [ 1234.514222][T20442] loop7: detected capacity change from 0 to 2048 [ 1234.525000][T20442] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.539010][T20442] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1234.561339][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.613220][T20447] loop7: detected capacity change from 0 to 256 [ 1234.637112][T20447] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1234.643725][T20447] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1234.651234][T20447] vhci_hcd vhci_hcd.0: Device attached [ 1234.661355][T20447] 9pnet_fd: Insufficient options for proto=fd [ 1234.668406][T20448] vhci_hcd: connection closed [ 1234.668713][ T52] vhci_hcd: stop threads [ 1234.677774][ T52] vhci_hcd: release socket [ 1234.682240][ T52] vhci_hcd: disconnect device [ 1235.380523][T20466] loop7: detected capacity change from 0 to 128 [ 1235.387143][T20466] vfat: Unknown parameter '01777777777777777777777v u;y{.IDmhS\q486Sɂpb9W [ 1239.715515][T20610] __dump_stack+0x1d/0x30 [ 1239.715602][T20610] dump_stack_lvl+0xe8/0x140 [ 1239.715621][T20610] dump_stack+0x15/0x1b [ 1239.715637][T20610] should_fail_ex+0x265/0x280 [ 1239.715661][T20610] should_failslab+0x8c/0xb0 [ 1239.715684][T20610] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1239.715796][T20610] ? __alloc_skb+0x101/0x320 [ 1239.715885][T20610] __alloc_skb+0x101/0x320 [ 1239.715914][T20610] netlink_alloc_large_skb+0xbf/0xf0 [ 1239.716020][T20610] netlink_sendmsg+0x3cf/0x6b0 [ 1239.716042][T20610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.716062][T20610] __sock_sendmsg+0x145/0x180 [ 1239.716105][T20610] ____sys_sendmsg+0x31e/0x4a0 [ 1239.716127][T20610] ___sys_sendmsg+0x17b/0x1d0 [ 1239.716275][T20610] __x64_sys_sendmsg+0xd4/0x160 [ 1239.716350][T20610] x64_sys_call+0x17ba/0x3000 [ 1239.716370][T20610] do_syscall_64+0xd8/0x2a0 [ 1239.716402][T20610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.716435][T20610] RIP: 0033:0x7f8b06d5f749 [ 1239.716449][T20610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.716522][T20610] RSP: 002b:00007f8b057c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1239.716539][T20610] RAX: ffffffffffffffda RBX: 00007f8b06fb5fa0 RCX: 00007f8b06d5f749 [ 1239.716550][T20610] RDX: 0000000020040084 RSI: 0000200000000300 RDI: 0000000000000006 [ 1239.716561][T20610] RBP: 00007f8b057c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.716572][T20610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.716582][T20610] R13: 00007f8b06fb6038 R14: 00007f8b06fb5fa0 R15: 00007fffb25f7298 [ 1239.716660][T20610] [ 1239.935021][T20613] FAULT_INJECTION: forcing a failure. [ 1239.935021][T20613] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.948014][T20613] CPU: 1 UID: 0 PID: 20613 Comm: syz.0.16409 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1239.948043][T20613] Tainted: [W]=WARN [ 1239.948049][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1239.948061][T20613] Call Trace: [ 1239.948066][T20613] [ 1239.948106][T20613] __dump_stack+0x1d/0x30 [ 1239.948135][T20613] dump_stack_lvl+0xe8/0x140 [ 1239.948159][T20613] dump_stack+0x15/0x1b [ 1239.948198][T20613] should_fail_ex+0x265/0x280 [ 1239.948220][T20613] should_failslab+0x8c/0xb0 [ 1239.948262][T20613] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 1239.948320][T20613] ? kstrdup_const+0x3e/0x50 [ 1239.948342][T20613] kstrdup+0x3e/0xd0 [ 1239.948371][T20613] kstrdup_const+0x3e/0x50 [ 1239.948404][T20613] __kernfs_new_node+0x3f/0x350 [ 1239.948440][T20613] ? __rcu_read_unlock+0x4f/0x70 [ 1239.948470][T20613] ? bpf_trace_run2+0x124/0x1c0 [ 1239.948567][T20613] ? kobject_uevent_env+0x28d/0x570 [ 1239.948613][T20613] kernfs_new_node+0xd0/0x140 [ 1239.948660][T20613] kernfs_create_link+0x70/0x130 [ 1239.948700][T20613] sysfs_do_create_link_sd+0x6a/0x100 [ 1239.948758][T20613] sysfs_create_link+0x51/0x70 [ 1239.948792][T20613] driver_sysfs_add+0x54/0x160 [ 1239.948820][T20613] device_bind_driver+0x17/0x60 [ 1239.948849][T20613] usb_driver_claim_interface+0x1af/0x280 [ 1239.948956][T20613] proc_disconnect_claim+0x2e2/0x370 [ 1239.949088][T20613] usbdev_ioctl+0xe24/0x1700 [ 1239.949117][T20613] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1239.949141][T20613] __se_sys_ioctl+0xce/0x140 [ 1239.949159][T20613] __x64_sys_ioctl+0x43/0x50 [ 1239.949213][T20613] x64_sys_call+0x14b0/0x3000 [ 1239.949232][T20613] do_syscall_64+0xd8/0x2a0 [ 1239.949274][T20613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.949345][T20613] RIP: 0033:0x7f8b06d5f749 [ 1239.949365][T20613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1239.949387][T20613] RSP: 002b:00007f8b057c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1239.949408][T20613] RAX: ffffffffffffffda RBX: 00007f8b06fb5fa0 RCX: 00007f8b06d5f749 [ 1239.949419][T20613] RDX: 0000200000002600 RSI: 000000008108551b RDI: 0000000000000009 [ 1239.949455][T20613] RBP: 00007f8b057c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.949466][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.949490][T20613] R13: 00007f8b06fb6038 R14: 00007f8b06fb5fa0 R15: 00007fffb25f7298 [ 1239.949507][T20613] [ 1239.949920][T20613] usb usb7: usbfs: process 20613 (syz.0.16409) did not claim interface 0 before use [ 1240.037303][T20615] loop7: detected capacity change from 0 to 512 [ 1240.211005][T20615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1240.232128][T20615] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1240.240113][T20615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1240.248797][T20615] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1240.258371][T20615] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1240.268251][T20615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1240.282957][T20615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1240.290155][T20615] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1240.342406][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.380635][T20628] loop9: detected capacity change from 0 to 256 [ 1240.597527][T20628] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1240.604235][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1240.611898][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1240.699679][T20635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1240.816788][T20631] vhci_hcd: connection closed [ 1240.816934][ T8822] vhci_hcd: stop threads [ 1240.826056][ T8822] vhci_hcd: release socket [ 1240.830591][ T8822] vhci_hcd: disconnect device [ 1240.852035][ T4657] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 1240.862743][ T4657] usb 19-1: enqueue for inactive port 0 [ 1240.868384][ T4657] usb 19-1: enqueue for inactive port 0 [ 1240.877470][T20642] loop7: detected capacity change from 0 to 256 [ 1240.889673][ T4657] usb 19-1: enqueue for inactive port 0 [ 1240.911322][T20644] loop8: detected capacity change from 0 to 128 [ 1240.927975][T20644] vfat: Unknown parameter '01777777777777777777777v u;y{.IDmhS\q486Sɂpb9W [ 1241.484876][T20668] __dump_stack+0x1d/0x30 [ 1241.484909][T20668] dump_stack_lvl+0xe8/0x140 [ 1241.484929][T20668] dump_stack+0x15/0x1b [ 1241.484999][T20668] should_fail_ex+0x265/0x280 [ 1241.485018][T20668] ? percpu_ref_init+0x9c/0x250 [ 1241.485108][T20668] should_failslab+0x8c/0xb0 [ 1241.485133][T20668] ? __pfx_free_ioctx_users+0x10/0x10 [ 1241.485251][T20668] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1241.485280][T20668] ? __pfx_free_ioctx_users+0x10/0x10 [ 1241.485333][T20668] percpu_ref_init+0x9c/0x250 [ 1241.485359][T20668] ioctx_alloc+0x1a2/0x4c0 [ 1241.485467][T20668] __se_sys_io_setup+0x6b/0x1b0 [ 1241.485502][T20668] __x64_sys_io_setup+0x31/0x40 [ 1241.485605][T20668] x64_sys_call+0x2a8e/0x3000 [ 1241.485635][T20668] do_syscall_64+0xd8/0x2a0 [ 1241.485719][T20668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.485747][T20668] RIP: 0033:0x7f1b887df749 [ 1241.485767][T20668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1241.485788][T20668] RSP: 002b:00007f1b87247038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1241.485890][T20668] RAX: ffffffffffffffda RBX: 00007f1b88a35fa0 RCX: 00007f1b887df749 [ 1241.485962][T20668] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0 [ 1241.485977][T20668] RBP: 00007f1b87247090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.485994][T20668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.486009][T20668] R13: 00007f1b88a36038 R14: 00007f1b88a35fa0 R15: 00007ffe9f1fe328 [ 1241.486029][T20668] [ 1241.729754][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16430'. [ 1241.740436][T20672] loop7: detected capacity change from 0 to 2048 [ 1241.753402][T20676] loop9: detected capacity change from 0 to 256 [ 1241.763542][T20672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1241.781781][T20672] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1241.812726][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.987241][T20695] FAULT_INJECTION: forcing a failure. [ 1241.987241][T20695] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.000018][T20695] CPU: 1 UID: 0 PID: 20695 Comm: syz.0.16437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1242.000055][T20695] Tainted: [W]=WARN [ 1242.000064][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1242.000105][T20695] Call Trace: [ 1242.000112][T20695] [ 1242.000119][T20695] __dump_stack+0x1d/0x30 [ 1242.000151][T20695] dump_stack_lvl+0xe8/0x140 [ 1242.000179][T20695] dump_stack+0x15/0x1b [ 1242.000204][T20695] should_fail_ex+0x265/0x280 [ 1242.000286][T20695] ? assoc_array_insert+0x75/0x1990 [ 1242.000320][T20695] should_failslab+0x8c/0xb0 [ 1242.000348][T20695] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1242.000443][T20695] assoc_array_insert+0x75/0x1990 [ 1242.000477][T20695] ? bcmp+0x5e/0x90 [ 1242.000497][T20695] ? keyring_compare_object+0xda/0x100 [ 1242.000587][T20695] ? assoc_array_delete+0x6e2/0x950 [ 1242.000628][T20695] __key_link_begin+0x8a/0x140 [ 1242.000667][T20695] key_move+0x160/0x550 [ 1242.000762][T20695] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1242.000788][T20695] ? __pfx_keyring_search_iterator+0x10/0x10 [ 1242.000867][T20695] keyctl_keyring_move+0xd6/0x110 [ 1242.000913][T20695] __se_sys_keyctl+0x5f7/0xb80 [ 1242.000963][T20695] ? __rcu_read_unlock+0x4f/0x70 [ 1242.001005][T20695] ? __fget_files+0x184/0x1c0 [ 1242.001096][T20695] ? mutex_unlock+0x4f/0x90 [ 1242.001122][T20695] ? fput+0x8f/0xc0 [ 1242.001216][T20695] __x64_sys_keyctl+0x67/0x80 [ 1242.001252][T20695] x64_sys_call+0x27b8/0x3000 [ 1242.001281][T20695] do_syscall_64+0xd8/0x2a0 [ 1242.001316][T20695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.001338][T20695] RIP: 0033:0x7f8b06d5f749 [ 1242.001410][T20695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1242.001448][T20695] RSP: 002b:00007f8b057c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1242.001474][T20695] RAX: ffffffffffffffda RBX: 00007f8b06fb5fa0 RCX: 00007f8b06d5f749 [ 1242.001490][T20695] RDX: ffffffffffffffff RSI: 000000001b4c0171 RDI: 000000000000001e [ 1242.001504][T20695] RBP: 00007f8b057c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.001567][T20695] R10: 0000000012dc95ff R11: 0000000000000246 R12: 0000000000000001 [ 1242.001583][T20695] R13: 00007f8b06fb6038 R14: 00007f8b06fb5fa0 R15: 00007fffb25f7298 [ 1242.001629][T20695] [ 1242.314478][T20693] loop8: detected capacity change from 0 to 2048 [ 1242.334955][T20693] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.510140][T20693] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1242.619710][T20703] loop9: detected capacity change from 0 to 512 [ 1242.628648][T20701] loop0: detected capacity change from 0 to 2048 [ 1242.640994][T20703] EXT4-fs: Ignoring removed i_version option [ 1242.647065][T20703] EXT4-fs: Ignoring removed bh option [ 1242.702362][T20701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1242.727246][T15819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.746951][T20703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1242.762044][T20701] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1242.774422][T20707] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1242.780975][T20707] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1242.788562][T20707] vhci_hcd vhci_hcd.0: Device attached [ 1242.793535][T20709] loop7: detected capacity change from 0 to 512 [ 1242.795088][T20703] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.817558][T20709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1242.828547][T20709] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1242.836534][T20709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1242.844790][T20709] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1242.845485][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.854385][T20709] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1242.872643][T20709] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1242.887562][T20709] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1242.894416][T20709] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1242.905253][T20709] netlink: 'syz.7.16443': attribute type 13 has an invalid length. [ 1242.913236][T20709] netlink: 'syz.7.16443': attribute type 17 has an invalid length. [ 1242.926726][T20712] vhci_hcd: connection closed [ 1242.926927][ T8836] vhci_hcd: stop threads [ 1242.931660][ T8836] vhci_hcd: release socket [ 1242.940402][ T8836] vhci_hcd: disconnect device [ 1242.945982][T20709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1242.974569][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16444'. [ 1242.999457][ T7596] vhci_hcd: vhci_device speed not set [ 1243.005398][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.026052][T20724] loop8: detected capacity change from 0 to 128 [ 1243.039717][T20726] random: crng reseeded on system resumption [ 1243.196049][T17552] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.222658][T20736] loop9: detected capacity change from 0 to 256 [ 1243.393040][T20743] loop9: detected capacity change from 0 to 2048 [ 1243.409858][T20743] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.431499][T20743] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1243.457389][T17552] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.673556][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16456'. [ 1244.002571][T20767] loop8: detected capacity change from 0 to 512 [ 1244.022699][T20769] loop0: detected capacity change from 0 to 1024 [ 1244.031309][T20767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.032136][T20769] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1244.056478][T20769] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.16463: Invalid block bitmap block 0 in block_group 0 [ 1244.056546][T20767] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1244.081323][T20769] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.16463: Failed to acquire dquot type 0 [ 1244.096591][T20769] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.16463: Freeing blocks not in datazone - block = 0, count = 4096 [ 1244.113466][T20767] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.16462: Failed to acquire dquot type 0 [ 1244.125524][T20769] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.16463: Invalid inode bitmap blk 0 in block_group 0 [ 1244.143608][ T8836] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 1244.165576][T20769] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 1244.190330][T15819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.199807][T20769] EXT4-fs (loop0): 1 orphan inode deleted [ 1244.207007][T20769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.222073][T20775] loop7: detected capacity change from 0 to 2048 [ 1244.231868][T20777] FAULT_INJECTION: forcing a failure. [ 1244.231868][T20777] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.244655][T20777] CPU: 0 UID: 0 PID: 20777 Comm: syz.8.16464 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1244.244738][T20777] Tainted: [W]=WARN [ 1244.244746][T20777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1244.244827][T20777] Call Trace: [ 1244.244835][T20777] [ 1244.244845][T20777] __dump_stack+0x1d/0x30 [ 1244.244870][T20777] dump_stack_lvl+0xe8/0x140 [ 1244.244960][T20777] dump_stack+0x15/0x1b [ 1244.244980][T20777] should_fail_ex+0x265/0x280 [ 1244.245004][T20777] ? do_proc_control+0x1d6/0x8b0 [ 1244.245026][T20777] should_failslab+0x8c/0xb0 [ 1244.245072][T20777] __kmalloc_cache_noprof+0x4c/0x4a0 [ 1244.245108][T20777] do_proc_control+0x1d6/0x8b0 [ 1244.245131][T20777] ? should_fail_ex+0xdb/0x280 [ 1244.245162][T20777] proc_control+0x71/0xa0 [ 1244.245284][T20777] usbdev_ioctl+0x93c/0x1700 [ 1244.245320][T20777] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1244.245353][T20777] __se_sys_ioctl+0xce/0x140 [ 1244.245373][T20777] __x64_sys_ioctl+0x43/0x50 [ 1244.245391][T20777] x64_sys_call+0x14b0/0x3000 [ 1244.245424][T20777] do_syscall_64+0xd8/0x2a0 [ 1244.245475][T20777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.245497][T20777] RIP: 0033:0x7f78094af749 [ 1244.245512][T20777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.245580][T20777] RSP: 002b:00007f7807f0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.245602][T20777] RAX: ffffffffffffffda RBX: 00007f7809705fa0 RCX: 00007f78094af749 [ 1244.245617][T20777] RDX: 0000200000000440 RSI: 00000000c0185500 RDI: 0000000000000004 [ 1244.245631][T20777] RBP: 00007f7807f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.245645][T20777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.245658][T20777] R13: 00007f7809706038 R14: 00007f7809705fa0 R15: 00007ffee90ce098 [ 1244.245681][T20777] [ 1244.271724][T20751] syz.9.16456 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1244.316031][T20780] loop8: detected capacity change from 0 to 128 [ 1244.316740][T20751] CPU: 1 UID: 0 PID: 20751 Comm: syz.9.16456 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1244.316787][T20751] Tainted: [W]=WARN [ 1244.316798][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1244.316817][T20751] Call Trace: [ 1244.316829][T20751] [ 1244.316886][T20751] __dump_stack+0x1d/0x30 [ 1244.316927][T20751] dump_stack_lvl+0xe8/0x140 [ 1244.317025][T20751] dump_stack+0x15/0x1b [ 1244.317051][T20751] dump_header+0x81/0x220 [ 1244.317079][T20751] oom_kill_process+0x342/0x400 [ 1244.317122][T20751] out_of_memory+0x979/0xb80 [ 1244.317285][T20751] try_charge_memcg+0x610/0xa10 [ 1244.317333][T20751] obj_cgroup_charge_pages+0xa6/0x150 [ 1244.317458][T20751] __memcg_kmem_charge_page+0x9f/0x170 [ 1244.317508][T20751] __alloc_frozen_pages_noprof+0x188/0x360 [ 1244.317558][T20751] alloc_pages_mpol+0xb3/0x260 [ 1244.317654][T20751] ? alloc_pages_noprof+0xf4/0x130 [ 1244.317682][T20751] alloc_pages_noprof+0x90/0x130 [ 1244.317710][T20751] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1244.317824][T20751] __kvmalloc_node_noprof+0x483/0x670 [ 1244.318079][T20751] ? ip_set_alloc+0x24/0x30 [ 1244.318153][T20751] ? ip_set_alloc+0x24/0x30 [ 1244.318180][T20751] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1244.318294][T20751] ip_set_alloc+0x24/0x30 [ 1244.318320][T20751] hash_netiface_create+0x282/0x740 [ 1244.318365][T20751] ? __pfx_hash_netiface_create+0x10/0x10 [ 1244.318395][T20751] ip_set_create+0x3cc/0x970 [ 1244.318482][T20751] ? __nla_parse+0x40/0x60 [ 1244.318515][T20751] nfnetlink_rcv_msg+0x4c6/0x590 [ 1244.318588][T20751] netlink_rcv_skb+0x123/0x220 [ 1244.318658][T20751] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1244.318710][T20751] nfnetlink_rcv+0x167/0x16c0 [ 1244.318764][T20751] ? kmem_cache_free+0xe4/0x3d0 [ 1244.318823][T20751] ? __kfree_skb+0x109/0x150 [ 1244.318849][T20751] ? nlmon_xmit+0x4f/0x60 [ 1244.318885][T20751] ? consume_skb+0x49/0x150 [ 1244.318917][T20751] ? nlmon_xmit+0x4f/0x60 [ 1244.318953][T20751] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1244.318997][T20751] ? __dev_queue_xmit+0x11c6/0x1fd0 [ 1244.319026][T20751] ? __dev_queue_xmit+0x148/0x1fd0 [ 1244.319059][T20751] ? ref_tracker_free+0x37d/0x3e0 [ 1244.319092][T20751] ? __netlink_deliver_tap+0x4dc/0x500 [ 1244.319194][T20751] netlink_unicast+0x5c0/0x690 [ 1244.319223][T20751] netlink_sendmsg+0x58b/0x6b0 [ 1244.319257][T20751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.319337][T20751] __sock_sendmsg+0x145/0x180 [ 1244.319453][T20751] ____sys_sendmsg+0x31e/0x4a0 [ 1244.319488][T20751] ___sys_sendmsg+0x17b/0x1d0 [ 1244.319536][T20751] __x64_sys_sendmsg+0xd4/0x160 [ 1244.319690][T20751] x64_sys_call+0x17ba/0x3000 [ 1244.319723][T20751] do_syscall_64+0xd8/0x2a0 [ 1244.319839][T20751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.319868][T20751] RIP: 0033:0x7f515372f749 [ 1244.319889][T20751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.319964][T20751] RSP: 002b:00007f515218f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.319992][T20751] RAX: ffffffffffffffda RBX: 00007f5153985fa0 RCX: 00007f515372f749 [ 1244.320010][T20751] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 1244.320028][T20751] RBP: 00007f51537b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1244.320045][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.320126][T20751] R13: 00007f5153986038 R14: 00007f5153985fa0 R15: 00007ffc6ef1c318 [ 1244.320151][T20751] [ 1244.320166][T20751] memory: usage 307012kB, limit 307200kB, failcnt 335 [ 1244.375617][T20775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1244.388980][T20751] memory+swap: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 1244.510599][T20750] delete_channel: no stack [ 1244.515150][T20751] kmem: usage 306940kB, limit 9007199254740988kB, failcnt 0 [ 1244.515171][T20751] Memory cgroup stats for /syz9: [ 1244.844539][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.859000][T20751] cache 0 [ 1244.861959][T20751] rss 122880 [ 1244.865235][T20751] shmem 0 [ 1244.868179][T20751] mapped_file 0 [ 1244.871697][T20751] dirty 0 [ 1244.874673][T20751] writeback 0 [ 1244.877973][T20751] workingset_refault_anon 100 [ 1244.882715][T20751] workingset_refault_file 0 [ 1244.887300][T20751] swap 65536 [ 1244.890632][T20751] swapcached 151552 [ 1244.894490][T20751] pgpgin 75712 [ 1244.897886][T20751] pgpgout 75674 [ 1244.901372][T20751] pgfault 61032 [ 1244.904898][T20751] pgmajfault 52 [ 1244.907573][ T8836] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 1244.908365][T20751] inactive_anon 12288 [ 1244.908378][T20751] active_anon 143360 [ 1244.908389][T20751] inactive_file 0 [ 1244.922410][T20775] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1244.923880][T20751] active_file 0 [ 1244.943199][T20751] unevictable 0 [ 1244.946736][T20751] hierarchical_memory_limit 314572800 [ 1244.952155][T20751] hierarchical_memsw_limit 9223372036854771712 [ 1244.958331][T20751] total_cache 0 [ 1244.961860][T20751] total_rss 122880 [ 1244.965634][T20751] total_shmem 0 [ 1244.969165][T20751] total_mapped_file 0 [ 1244.973265][T20751] total_dirty 0 [ 1244.976717][T20751] total_writeback 0 [ 1244.980524][T20751] total_workingset_refault_anon 100 [ 1244.985826][T20751] total_workingset_refault_file 0 [ 1244.990862][T20751] total_swap 65536 [ 1244.994651][T20751] total_swapcached 151552 [ 1244.999015][T20751] total_pgpgin 75712 [ 1245.003037][T20751] total_pgpgout 75674 [ 1245.007103][T20751] total_pgfault 61032 [ 1245.011145][T20751] total_pgmajfault 52 [ 1245.015277][T20751] total_inactive_anon 12288 [ 1245.019799][T20751] total_active_anon 143360 [ 1245.024273][T20751] total_inactive_file 0 [ 1245.028463][T20751] total_active_file 0 [ 1245.032500][T20751] total_unevictable 0 [ 1245.036523][T20751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.16456,pid=20750,uid=0 [ 1245.051437][T20751] Memory cgroup out of memory: Killed process 20751 (syz.9.16456) total-vm:96148kB, anon-rss:1244kB, file-rss:22616kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1245.065921][T20789] loop0: detected capacity change from 0 to 256 [ 1245.075396][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.114583][T20791] random: crng reseeded on system resumption [ 1245.187639][T20795] loop7: detected capacity change from 0 to 2048 [ 1245.213967][T20801] loop8: detected capacity change from 0 to 256 [ 1245.223354][T20795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.278273][T20795] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.288207][T20795] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.383511][T20795] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.393457][T20795] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.460745][T20795] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.470616][T20795] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.496567][T20810] vhci_hcd: default hub control req: 0006 v0efe i0004 l0 [ 1245.544241][T20795] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1245.554240][T20795] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.644926][ T8836] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.653482][ T8836] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.681040][ T8836] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.689568][ T8836] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.716363][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.725632][ T8836] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.733942][ T8836] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.742567][ T8836] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1245.750843][ T8836] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.828870][T20822] loop7: detected capacity change from 0 to 512 [ 1245.836246][T20822] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1245.853393][T20822] EXT4-fs (loop7): 1 truncate cleaned up [ 1245.860085][T20822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.884069][T20822] netlink: 176 bytes leftover after parsing attributes in process `syz.7.16482'. [ 1245.896607][T20822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16482'. [ 1245.940815][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.988340][T20825] random: crng reseeded on system resumption [ 1246.118933][T20834] loop7: detected capacity change from 0 to 512 [ 1246.127733][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 1246.127792][ T29] audit: type=1326 audit(2000000480.730:438811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20828 comm="syz.1.16485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba12f749 code=0x7ffc0000 [ 1246.157941][ T29] audit: type=1326 audit(2000000480.730:438812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20828 comm="syz.1.16485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ba12f749 code=0x7ffc0000 [ 1246.191657][T20812] syz.8.16478 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1246.206126][T20812] CPU: 1 UID: 0 PID: 20812 Comm: syz.8.16478 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1246.206159][T20812] Tainted: [W]=WARN [ 1246.206166][T20812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1246.206217][T20812] Call Trace: [ 1246.206227][T20812] [ 1246.206237][T20812] __dump_stack+0x1d/0x30 [ 1246.206261][T20812] dump_stack_lvl+0xe8/0x140 [ 1246.206287][T20812] dump_stack+0x15/0x1b [ 1246.206311][T20812] dump_header+0x81/0x220 [ 1246.206334][T20812] oom_kill_process+0x342/0x400 [ 1246.206363][T20812] out_of_memory+0x979/0xb80 [ 1246.206441][T20812] try_charge_memcg+0x610/0xa10 [ 1246.206472][T20812] obj_cgroup_charge_pages+0xa6/0x150 [ 1246.206529][T20812] __memcg_kmem_charge_page+0x9f/0x170 [ 1246.206682][T20812] __alloc_frozen_pages_noprof+0x188/0x360 [ 1246.206789][T20812] alloc_pages_mpol+0xb3/0x260 [ 1246.206934][T20812] ? alloc_pages_noprof+0xf4/0x130 [ 1246.206960][T20812] alloc_pages_noprof+0x90/0x130 [ 1246.206986][T20812] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1246.207041][T20812] __kvmalloc_node_noprof+0x483/0x670 [ 1246.207115][T20812] ? ip_set_alloc+0x24/0x30 [ 1246.207142][T20812] ? ip_set_alloc+0x24/0x30 [ 1246.207162][T20812] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1246.207230][T20812] ip_set_alloc+0x24/0x30 [ 1246.207254][T20812] hash_netiface_create+0x282/0x740 [ 1246.207289][T20812] ? __pfx_hash_netiface_create+0x10/0x10 [ 1246.207372][T20812] ip_set_create+0x3cc/0x970 [ 1246.207422][T20812] ? __nla_parse+0x40/0x60 [ 1246.207455][T20812] nfnetlink_rcv_msg+0x4c6/0x590 [ 1246.207514][T20812] netlink_rcv_skb+0x123/0x220 [ 1246.207559][T20812] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1246.207603][T20812] nfnetlink_rcv+0x167/0x16c0 [ 1246.207643][T20812] ? kmem_cache_free+0xe4/0x3d0 [ 1246.207681][T20812] ? __kfree_skb+0x109/0x150 [ 1246.207706][T20812] ? nlmon_xmit+0x4f/0x60 [ 1246.207734][T20812] ? consume_skb+0x49/0x150 [ 1246.207805][T20812] ? nlmon_xmit+0x4f/0x60 [ 1246.207835][T20812] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1246.207860][T20812] ? __dev_queue_xmit+0x11c6/0x1fd0 [ 1246.208005][T20812] ? __dev_queue_xmit+0x148/0x1fd0 [ 1246.208044][T20812] ? ref_tracker_free+0x37d/0x3e0 [ 1246.208116][T20812] ? __netlink_deliver_tap+0x4dc/0x500 [ 1246.208144][T20812] netlink_unicast+0x5c0/0x690 [ 1246.208171][T20812] netlink_sendmsg+0x58b/0x6b0 [ 1246.208199][T20812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1246.208265][T20812] __sock_sendmsg+0x145/0x180 [ 1246.208295][T20812] ____sys_sendmsg+0x31e/0x4a0 [ 1246.208361][T20812] ___sys_sendmsg+0x17b/0x1d0 [ 1246.208403][T20812] __x64_sys_sendmsg+0xd4/0x160 [ 1246.208437][T20812] x64_sys_call+0x17ba/0x3000 [ 1246.208466][T20812] do_syscall_64+0xd8/0x2a0 [ 1246.208509][T20812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.208530][T20812] RIP: 0033:0x7f78094af749 [ 1246.208545][T20812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.208565][T20812] RSP: 002b:00007f7807f0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1246.208586][T20812] RAX: ffffffffffffffda RBX: 00007f7809705fa0 RCX: 00007f78094af749 [ 1246.208603][T20812] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1246.208622][T20812] RBP: 00007f7809533f91 R08: 0000000000000000 R09: 0000000000000000 [ 1246.208639][T20812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1246.208655][T20812] R13: 00007f7809706038 R14: 00007f7809705fa0 R15: 00007ffee90ce098 [ 1246.208725][T20812] [ 1246.208731][T20812] memory: usage 307200kB, limit 307200kB, failcnt 2392 [ 1246.243898][T20834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.245065][T20812] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1246.251890][T20834] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1246.253797][T20812] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1246.253816][T20812] Memory cgroup stats for /syz8 [ 1246.416946][T20834] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1246.417339][T20812] : [ 1246.422651][T20834] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 1246.430377][ T29] audit: type=1400 audit(2000000481.030:438813): avc: denied { mounton } for pid=20835 comm="syz.0.16488" path="/syzcgroup/net/syz0/cgroup.procs" dev="cgroup" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1246.432308][T20834] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.16487: Failed to acquire dquot type 0 [ 1246.437632][T20838] cgroup2: Unknown parameter 'mcouÅnting' [ 1246.659849][T20812] cache 0 [ 1246.665583][T20812] rss 4096 [ 1246.668743][T20812] shmem 0 [ 1246.671737][T20812] mapped_file 0 [ 1246.675234][T20812] dirty 0 [ 1246.678201][T20812] writeback 0 [ 1246.681650][T20812] workingset_refault_anon 566 [ 1246.686450][T20812] workingset_refault_file 0 [ 1246.691019][T20812] swap 196608 [ 1246.694327][T20812] swapcached 4096 [ 1246.698038][T20812] pgpgin 94807 [ 1246.701417][T20812] pgpgout 94806 [ 1246.704896][T20812] pgfault 118806 [ 1246.708460][T20812] pgmajfault 295 [ 1246.712110][T20812] inactive_anon 0 [ 1246.715747][T20812] active_anon 4096 [ 1246.719529][T20812] inactive_file 0 [ 1246.723179][T20812] active_file 0 [ 1246.726661][T20812] unevictable 0 [ 1246.730146][T20812] hierarchical_memory_limit 314572800 [ 1246.735559][T20812] hierarchical_memsw_limit 9223372036854771712 [ 1246.741813][T20812] total_cache 0 [ 1246.745306][T20812] total_rss 4096 [ 1246.748864][T20812] total_shmem 0 [ 1246.752486][T20812] total_mapped_file 0 [ 1246.756490][T20812] total_dirty 0 [ 1246.756707][T20838] loop0: detected capacity change from 0 to 512 [ 1246.759949][T20812] total_writeback 0 [ 1246.759959][T20812] total_workingset_refault_anon 566 [ 1246.759970][T20812] total_workingset_refault_file 0 [ 1246.759980][T20812] total_swap 196608 [ 1246.759989][T20812] total_swapcached 4096 [ 1246.767838][T20838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1246.770093][T20812] total_pgpgin 94807 [ 1246.802063][T20812] total_pgpgout 94806 [ 1246.806057][T20812] total_pgfault 118806 [ 1246.810136][T20812] total_pgmajfault 295 [ 1246.814231][T20812] total_inactive_anon 0 [ 1246.818447][T20812] total_active_anon 4096 [ 1246.822760][T20812] total_inactive_file 0 [ 1246.826950][T20812] total_active_file 0 [ 1246.830947][T20812] total_unevictable 0 [ 1246.835051][T20812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.16478,pid=20811,uid=0 [ 1246.849922][T20812] Memory cgroup out of memory: Killed process 20811 (syz.8.16478) total-vm:96016kB, anon-rss:1264kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1246.868604][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.878969][T20838] EXT4-fs (loop0): 1 truncate cleaned up [ 1246.901150][T20838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.934781][T20849] loop9: detected capacity change from 0 to 128 [ 1246.969695][T20847] loop7: detected capacity change from 0 to 2048 [ 1246.988303][T20849] vfat: Unknown parameter '01777777777777777777777v u;y{.IDmhS\q486Sɂpb9W [ 1247.244769][T20863] __dump_stack+0x1d/0x30 [ 1247.244796][T20863] dump_stack_lvl+0xe8/0x140 [ 1247.244823][T20863] dump_stack+0x15/0x1b [ 1247.244846][T20863] should_fail_ex+0x265/0x280 [ 1247.244872][T20863] should_failslab+0x8c/0xb0 [ 1247.244910][T20863] __kvmalloc_node_noprof+0x12e/0x670 [ 1247.245001][T20863] ? xt_alloc_table_info+0x40/0x80 [ 1247.245027][T20863] xt_alloc_table_info+0x40/0x80 [ 1247.245051][T20863] do_ipt_set_ctl+0x59c/0x820 [ 1247.245088][T20863] ? _raw_spin_unlock_bh+0x36/0x40 [ 1247.245152][T20863] ? tcp_release_cb+0xf1/0x370 [ 1247.245189][T20863] nf_setsockopt+0x199/0x1b0 [ 1247.245227][T20863] ip_setsockopt+0x102/0x110 [ 1247.245252][T20863] tcp_setsockopt+0x98/0xb0 [ 1247.245325][T20863] sock_common_setsockopt+0x69/0x80 [ 1247.245363][T20863] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1247.245402][T20863] __sys_setsockopt+0x184/0x200 [ 1247.245430][T20863] __x64_sys_setsockopt+0x64/0x80 [ 1247.245500][T20863] x64_sys_call+0x21d5/0x3000 [ 1247.245526][T20863] do_syscall_64+0xd8/0x2a0 [ 1247.245802][T20863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.245851][T20863] RIP: 0033:0x7f8b06d5f749 [ 1247.245871][T20863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.245889][T20863] RSP: 002b:00007f8b057c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1247.245909][T20863] RAX: ffffffffffffffda RBX: 00007f8b06fb5fa0 RCX: 00007f8b06d5f749 [ 1247.245991][T20863] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1247.246009][T20863] RBP: 00007f8b057c7090 R08: 0000000000000238 R09: 0000000000000000 [ 1247.246026][T20863] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 1247.246042][T20863] R13: 00007f8b06fb6038 R14: 00007f8b06fb5fa0 R15: 00007fffb25f7298 [ 1247.246066][T20863] [ 1247.307680][T20864] loop8: detected capacity change from 0 to 512 [ 1247.468021][T20864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1247.474733][ T29] audit: type=1326 audit(2000000482.070:438814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20846 comm="syz.9.16492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515372f749 code=0x7ffc0000 [ 1247.498591][ T29] audit: type=1326 audit(2000000482.070:438815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20846 comm="syz.9.16492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f515372f749 code=0x7ffc0000 [ 1247.522458][ T29] audit: type=1326 audit(2000000482.070:438816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20846 comm="syz.9.16492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515372f749 code=0x7ffc0000 [ 1247.546256][ T29] audit: type=1326 audit(2000000482.070:438817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20846 comm="syz.9.16492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f515372f749 code=0x7ffc0000 [ 1247.571090][ T29] audit: type=1326 audit(2000000482.120:438818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20846 comm="syz.9.16492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f515372f749 code=0x7ffc0000 [ 1247.596212][T20864] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1247.604312][T20864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1247.605032][T20872] loop0: detected capacity change from 0 to 512 [ 1247.613452][T20864] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 1247.628096][T20864] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1247.637540][T20864] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1247.655248][T20864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1247.663413][T20844] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.674284][T20849] can0 (unregistered): slcan off ptm0. [ 1247.680341][T20864] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80) [ 1247.711072][T20872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.724425][T20864] netlink: 'syz.8.16497': attribute type 13 has an invalid length. [ 1247.732435][T20864] netlink: 'syz.8.16497': attribute type 17 has an invalid length. [ 1247.741958][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.16501'. [ 1247.753400][T20872] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1247.773413][T20872] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.16500: Failed to acquire dquot type 0 [ 1247.800173][T20879] loop7: detected capacity change from 0 to 512 [ 1247.809857][T20879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1247.820650][T20879] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1247.828653][T20879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 1247.837344][T20879] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1247.846895][T20879] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 1247.860148][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.869780][T20879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1247.872589][T17552] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.884232][T20879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1247.897526][T20864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1247.919619][T20879] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 1247.930555][T20879] netlink: 'syz.7.16502': attribute type 13 has an invalid length. [ 1247.938550][T20879] netlink: 'syz.7.16502': attribute type 17 has an invalid length. [ 1247.938635][T20883] netlink: 'syz.0.16503': attribute type 1 has an invalid length. [ 1247.959299][ T8836] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.973092][T20886] FAULT_INJECTION: forcing a failure. [ 1247.973092][T20886] name failslab, interval 1, probability 0, space 0, times 0 [ 1247.985795][T20886] CPU: 1 UID: 0 PID: 20886 Comm: syz.9.16504 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1247.985901][T20886] Tainted: [W]=WARN [ 1247.985908][T20886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1247.985921][T20886] Call Trace: [ 1247.985928][T20886] [ 1247.985965][T20886] __dump_stack+0x1d/0x30 [ 1247.985992][T20886] dump_stack_lvl+0xe8/0x140 [ 1247.986017][T20886] dump_stack+0x15/0x1b [ 1247.986039][T20886] should_fail_ex+0x265/0x280 [ 1247.986065][T20886] should_failslab+0x8c/0xb0 [ 1247.986147][T20886] __kmalloc_noprof+0xa5/0x570 [ 1247.986179][T20886] ? security_bpf_prog_load+0x60/0x140 [ 1247.986216][T20886] ? strncpy_from_user+0x13a/0x260 [ 1247.986282][T20886] security_bpf_prog_load+0x60/0x140 [ 1247.986320][T20886] bpf_prog_load+0xef8/0x1100 [ 1247.986388][T20886] ? security_bpf+0x2b/0x90 [ 1247.986422][T20886] __sys_bpf+0x469/0x7c0 [ 1247.986467][T20886] __x64_sys_bpf+0x41/0x50 [ 1247.986581][T20886] x64_sys_call+0x28e1/0x3000 [ 1247.986606][T20886] do_syscall_64+0xd8/0x2a0 [ 1247.986650][T20886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.986773][T20886] RIP: 0033:0x7f515372f749 [ 1247.986800][T20886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.986823][T20886] RSP: 002b:00007f515218f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1247.986912][T20886] RAX: ffffffffffffffda RBX: 00007f5153985fa0 RCX: 00007f515372f749 [ 1247.986928][T20886] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1247.986943][T20886] RBP: 00007f515218f090 R08: 0000000000000000 R09: 0000000000000000 [ 1247.986956][T20886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1247.987071][T20886] R13: 00007f5153986038 R14: 00007f5153985fa0 R15: 00007ffc6ef1c318 [ 1247.987158][T20886] [ 1248.121262][T20896] loop9: detected capacity change from 0 to 2048 [ 1248.144552][T15819] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.192181][T20879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1248.207994][ T8836] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.223298][T20896] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.235776][ T1301] Bluetooth: hci0: Frame reassembly failed (-84) [ 1248.250095][T15763] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.260381][ T1301] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.273095][ T8824] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.281594][T20896] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1248.300071][T20902] loop8: detected capacity change from 0 to 512 [ 1248.307314][T17552] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.334179][T20902] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1248.344098][T20902] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 1248.462402][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16506'. [ 1248.488599][T20914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1248.508127][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16506'. [ 1248.527305][T20914] bond1 (unregistering): Released all slaves [ 1249.299220][T20935] random: crng reseeded on system resumption [ 1249.360079][T20937] loop9: detected capacity change from 0 to 256 [ 1249.554648][T20953] loop9: detected capacity change from 0 to 128 [ 1249.562772][T20951] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1249.880800][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16529'. [ 1250.282195][ T7184] Bluetooth: hci0: command 0x1003 tx timeout [ 1250.282733][T17124] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1250.476930][T20976] pim6reg: entered allmulticast mode [ 1250.976755][T20974] syz.9.16535 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1250.991053][T20974] CPU: 1 UID: 0 PID: 20974 Comm: syz.9.16535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1250.991093][T20974] Tainted: [W]=WARN [ 1250.991100][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1250.991115][T20974] Call Trace: [ 1250.991134][T20974] [ 1250.991166][T20974] __dump_stack+0x1d/0x30 [ 1250.991192][T20974] dump_stack_lvl+0xe8/0x140 [ 1250.991229][T20974] dump_stack+0x15/0x1b [ 1250.991252][T20974] dump_header+0x81/0x220 [ 1250.991278][T20974] oom_kill_process+0x342/0x400 [ 1250.991317][T20974] out_of_memory+0x979/0xb80 [ 1250.991369][T20974] try_charge_memcg+0x610/0xa10 [ 1250.991403][T20974] obj_cgroup_charge_pages+0xa6/0x150 [ 1250.991437][T20974] __memcg_kmem_charge_page+0x9f/0x170 [ 1250.991621][T20974] __alloc_frozen_pages_noprof+0x188/0x360 [ 1250.991669][T20974] alloc_pages_mpol+0xb3/0x260 [ 1250.991714][T20974] alloc_pages_noprof+0x90/0x130 [ 1250.991800][T20974] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1250.991844][T20974] __kvmalloc_node_noprof+0x483/0x670 [ 1250.991912][T20974] ? ip_set_alloc+0x24/0x30 [ 1250.991938][T20974] ? ip_set_alloc+0x24/0x30 [ 1250.991963][T20974] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1250.992014][T20974] ip_set_alloc+0x24/0x30 [ 1250.992037][T20974] hash_netiface_create+0x282/0x740 [ 1250.992067][T20974] ? __pfx_hash_netiface_create+0x10/0x10 [ 1250.992150][T20974] ip_set_create+0x3cc/0x970 [ 1250.992187][T20974] ? __nla_parse+0x40/0x60 [ 1250.992215][T20974] nfnetlink_rcv_msg+0x4c6/0x590 [ 1250.992288][T20974] netlink_rcv_skb+0x123/0x220 [ 1250.992315][T20974] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1250.992414][T20974] nfnetlink_rcv+0x167/0x16c0 [ 1250.992453][T20974] ? kmem_cache_free+0xe4/0x3d0 [ 1250.992490][T20974] ? __kfree_skb+0x109/0x150 [ 1250.992518][T20974] ? nlmon_xmit+0x4f/0x60 [ 1250.992551][T20974] ? consume_skb+0x49/0x150 [ 1250.992574][T20974] ? nlmon_xmit+0x4f/0x60 [ 1250.992602][T20974] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 1250.992634][T20974] ? __dev_queue_xmit+0x11c6/0x1fd0 [ 1250.992695][T20974] ? __dev_queue_xmit+0x148/0x1fd0 [ 1250.992726][T20974] ? ref_tracker_free+0x37d/0x3e0 [ 1250.992823][T20974] ? __netlink_deliver_tap+0x4dc/0x500 [ 1250.992876][T20974] netlink_unicast+0x5c0/0x690 [ 1250.992905][T20974] netlink_sendmsg+0x58b/0x6b0 [ 1250.992933][T20974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.993013][T20974] __sock_sendmsg+0x145/0x180 [ 1250.993048][T20974] ____sys_sendmsg+0x31e/0x4a0 [ 1250.993080][T20974] ___sys_sendmsg+0x17b/0x1d0 [ 1250.993187][T20974] __x64_sys_sendmsg+0xd4/0x160 [ 1250.993228][T20974] x64_sys_call+0x17ba/0x3000 [ 1250.993258][T20974] do_syscall_64+0xd8/0x2a0 [ 1250.993304][T20974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.993357][T20974] RIP: 0033:0x7f515372f749 [ 1250.993377][T20974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.993400][T20974] RSP: 002b:00007f515218f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.993494][T20974] RAX: ffffffffffffffda RBX: 00007f5153985fa0 RCX: 00007f515372f749 [ 1250.993512][T20974] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 1250.993528][T20974] RBP: 00007f51537b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 1250.993545][T20974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.993632][T20974] R13: 00007f5153986038 R14: 00007f5153985fa0 R15: 00007ffc6ef1c318 [ 1250.993653][T20974] [ 1251.325889][T17124] Bluetooth: hci1: command 0x1003 tx timeout [ 1251.325951][T20974] memory: usage 307200kB, limit 307200kB, failcnt 474 [ 1251.338840][T20974] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 1251.346794][T20974] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1251.353099][T18175] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1251.354141][T20974] Memory cgroup stats for /syz9: [ 1251.363768][T20974] cache 0 [ 1251.371683][T20974] rss 4096 [ 1251.374855][T20974] shmem 0 [ 1251.377795][T20974] mapped_file 0 [ 1251.381266][T20974] dirty 0 [ 1251.384321][T20974] writeback 0 [ 1251.387706][T20974] workingset_refault_anon 135 [ 1251.392486][T20974] workingset_refault_file 0 [ 1251.397104][T20974] swap 196608 [ 1251.400401][T20974] swapcached 8192 [ 1251.402454][T20986] loop0: detected capacity change from 0 to 512 [ 1251.404494][T20974] pgpgin 76771 [ 1251.410779][T20986] EXT4-fs: Ignoring removed i_version option [ 1251.414158][T20974] pgpgout 76769 [ 1251.420157][T20986] EXT4-fs: Ignoring removed bh option [ 1251.429364][T20974] pgfault 62918 [ 1251.432945][T20974] pgmajfault 64 [ 1251.436403][T20974] inactive_anon 8192 [ 1251.440288][T20974] active_anon 0 [ 1251.443892][T20974] inactive_file 0 [ 1251.445002][T20986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.447527][T20974] active_file 0 [ 1251.447539][T20974] unevictable 0 [ 1251.460543][T20986] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.463770][T20974] hierarchical_memory_limit 314572800 [ 1251.483017][T20974] hierarchical_memsw_limit 9223372036854771712 [ 1251.489303][T20974] total_cache 0 [ 1251.492868][T20974] total_rss 4096 [ 1251.492952][ T2999] ================================================================== [ 1251.496463][T20974] total_shmem 0 [ 1251.504549][ T2999] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1251.504592][ T2999] [ 1251.504599][ T2999] write to 0xffffffff86870698 of 8 bytes by task 20974 on cpu 0: [ 1251.504619][ T2999] data_alloc+0x2f7/0x380 [ 1251.504650][ T2999] prb_reserve+0x964/0xb60 [ 1251.508132][T20974] total_mapped_file 0 [ 1251.515082][ T2999] vprintk_store+0x56d/0x860 [ 1251.515119][ T2999] vprintk_emit+0x10d/0x580 [ 1251.515172][ T2999] vprintk_default+0x26/0x30 [ 1251.515208][ T2999] vprintk+0x1d/0x30 [ 1251.515229][ T2999] _printk+0x79/0xa0 [ 1251.517564][T20974] total_dirty 0 [ 1251.517576][T20974] total_writeback 0 [ 1251.525317][ T2999] seq_buf_do_printk+0x113/0x1a0 [ 1251.525358][ T2999] mem_cgroup_print_oom_meminfo+0x169/0x250 [ 1251.525387][ T2999] dump_header+0xa0/0x220 [ 1251.525405][ T2999] oom_kill_process+0x342/0x400 [ 1251.525438][ T2999] out_of_memory+0x979/0xb80 [ 1251.529762][T20974] total_workingset_refault_anon 135 [ 1251.534178][ T2999] try_charge_memcg+0x610/0xa10 [ 1251.534206][ T2999] obj_cgroup_charge_pages+0xa6/0x150 [ 1251.534247][ T2999] __memcg_kmem_charge_page+0x9f/0x170 [ 1251.534284][ T2999] __alloc_frozen_pages_noprof+0x188/0x360 [ 1251.538337][T20974] total_workingset_refault_file 0 [ 1251.542911][ T2999] alloc_pages_mpol+0xb3/0x260 [ 1251.542952][ T2999] alloc_pages_noprof+0x90/0x130 [ 1251.542971][ T2999] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1251.543004][ T2999] __kvmalloc_node_noprof+0x483/0x670 [ 1251.543040][ T2999] ip_set_alloc+0x24/0x30 [ 1251.547524][T20974] total_swap 196608 [ 1251.552123][ T2999] hash_netiface_create+0x282/0x740 [ 1251.552146][ T2999] ip_set_create+0x3cc/0x970 [ 1251.556088][T20974] total_swapcached 8192 [ 1251.559976][ T2999] nfnetlink_rcv_msg+0x4c6/0x590 [ 1251.563446][T20974] total_pgpgin 76771 [ 1251.567229][ T2999] netlink_rcv_skb+0x123/0x220 [ 1251.572168][T20974] total_pgpgout 76769 [ 1251.578044][ T2999] nfnetlink_rcv+0x167/0x16c0 [ 1251.582379][T20974] total_pgfault 62918 [ 1251.587202][ T2999] netlink_unicast+0x5c0/0x690 [ 1251.591783][T20974] total_pgmajfault 64 [ 1251.596966][ T2999] netlink_sendmsg+0x58b/0x6b0 [ 1251.596994][ T2999] __sock_sendmsg+0x145/0x180 [ 1251.597024][ T2999] ____sys_sendmsg+0x31e/0x4a0 [ 1251.597046][ T2999] ___sys_sendmsg+0x17b/0x1d0 [ 1251.601913][T20974] total_inactive_anon 8192 [ 1251.607255][ T2999] __x64_sys_sendmsg+0xd4/0x160 [ 1251.607281][ T2999] x64_sys_call+0x17ba/0x3000 [ 1251.607303][ T2999] do_syscall_64+0xd8/0x2a0 [ 1251.607332][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.612798][T20974] total_active_anon 0 [ 1251.618667][ T2999] [ 1251.618677][ T2999] read to 0xffffffff86870698 of 16 bytes by task 2999 on cpu 1: [ 1251.623694][T20974] total_inactive_file 0 [ 1251.628432][ T2999] _prb_read_valid+0x1bc/0x920 [ 1251.633463][T20974] total_active_file 0 [ 1251.639244][ T2999] prb_read_valid+0x3c/0x60 [ 1251.644669][T20974] total_unevictable 0 [ 1251.648964][ T2999] syslog_print+0x23a/0x540 [ 1251.652779][T20974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 1251.657952][ T2999] do_syslog+0x52b/0x7e0 [ 1251.657986][ T2999] __x64_sys_syslog+0x41/0x50 [ 1251.658012][ T2999] x64_sys_call+0x27ce/0x3000 [ 1251.658034][ T2999] do_syscall_64+0xd8/0x2a0 [ 1251.662649][T20974] ,cpuset= [ 1251.666771][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.671703][T20974] /,mems_allowed=0 [ 1251.675591][ T2999] [ 1251.675599][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 1251.675619][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1251.680371][T20974] ,oom_memcg=/syz9 [ 1251.684385][ T2999] Tainted: [W]=WARN [ 1251.689159][T20974] ,task_memcg= [ 1251.693148][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1251.693168][ T2999] ================================================================== [ 1251.870938][T20974] /syz9,task=syz.9.16535,pid=20973,uid=0 [ 1251.876677][T20974] Memory cgroup out of memory: Killed process 20973 (syz.9.16535) total-vm:96016kB, anon-rss:1136kB, file-rss:22712kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1251.961778][T15737] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.