last executing test programs: 3m8.639606073s ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9, 0x0, 0x20000}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x17c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0x5, 0xe7, 0x6, 0x0, 0x1000, 0x1f3c3d5a, 0x2}}, {0x8, 0x2, [0x262, 0x10]}}, {{0x1c, 0x1, {0x0, 0x3, 0x73bd, 0x2, 0x1, 0x3, 0xfffffffb, 0x1}}, {0x6, 0x2, [0x7]}}, {{0xfcfb, 0x1, {0x4, 0x96, 0xaf40, 0x4, 0x2, 0x76b, 0x7, 0x5}}, {0xe, 0x2, [0x0, 0xfffa, 0x0, 0x4, 0x7]}}, {{0x1c, 0x1, {0xfd, 0x5, 0x7, 0x2, 0x9dd0f1586c629942, 0x9, 0x1, 0x25}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0xff, 0xe, 0x7, 0x4, 0x2, 0x3, 0x5, 0x8}}, {0x14, 0x2, [0x1, 0x9, 0x1, 0x0, 0x4, 0x2, 0x3, 0x5]}}, {{0x1c, 0x1, {0x3, 0x96, 0x8, 0x0, 0x0, 0x9, 0x80, 0x6}}, {0x10, 0x2, [0x8, 0x4, 0xffff, 0x8ce, 0x0, 0x55]}}, {{0x1c, 0x1, {0xfa, 0x7, 0x8, 0x0, 0x1, 0x4, 0x7, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x20, 0xc, 0x0, 0x4, 0x2, 0x3, 0x8, 0x5}}, {0xe, 0x2, [0x1000, 0xfff8, 0x2, 0x9, 0x9]}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) 3m8.517799454s ago: executing program 0 (id=10): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb0}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) timerfd_create(0x8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r4, @ANYBLOB="03000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000900)=ANY=[@ANYRES16, @ANYRESHEX=r3, @ANYRES64=r5, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) mq_open(&(0x7f0000000100)='\'\x00', 0x2, 0x1, &(0x7f00000007c0)={0x4, 0x1c000, 0x8000000000000000, 0x7f}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = accept$inet6(r7, 0x0, &(0x7f0000000800)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000840)) socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 3m5.789412276s ago: executing program 32 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x12, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, r4, 0xb}}, 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10], 0x50) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) 3m5.44057876s ago: executing program 0 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=@bridge_dellink={0xd4, 0x11, 0x100, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x80000, 0x6c2}, [@IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}, @IFLA_AF_SPEC={0xa0, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x48, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xbc}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xe}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x71}]}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0x9}, {0x8, 0x12, 0x0, 0x0, 0x8}, {0x8, 0x15, 0x0, 0x0, 0x1}]}}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x3ff}, {0x8, 0x7, 0x0, 0x0, 0xb}, {0x8, 0x4, 0x0, 0x0, 0x7}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x4804) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f5f756d7461696c3d302c696f636861727365743d6370313235665ce77d81541a352c757466383d312c73686f72742c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6d697865642c696f636861727365743d61736369692c73686f72746e616d653d77696efce624d8a95c2e5798c6976e742c756e695f786c6174653d302c756e695f786c6174653d302c6965743d69736f383835392d362c756e695f786c6174653d312c7368261d5d782251ff450000000000", @ANYRESHEX=0x0, @ANYBLOB=',nnonumtail=1,iocharset=cp864,rodir,\x00'], 0x0, 0x2b6, &(0x7f0000000540)="$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") mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000400)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) chdir(&(0x7f0000000340)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$loop(&(0x7f00000002c0), 0x9, 0x48000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x181800, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xce, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000070000000800000000000000", @ANYRES32, @ANYBLOB="400000000000000000850bdc1e8000000000000030f1a114dbbfea7d6b0623e82c2e80695e96d2aa97b1c755beaf7b90a10851b5adaac5a43bfd38cf1d1e898ce018d83aa49cb0ad3003968ee9400c6679edaa907c5c50d0ca389dca1604432bdc112014a888d340d5fa1b14e3c4c96a6bc3aceb5a2b4300bcda50a3462f2f5e4bcf95ea594b658bc0dae39873649f0a4394e9a4fe4d24121ddadc44306677292f1a1d1120e250ac23a80ede588c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r10, 0x4, 0x0, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000380)={'\x00', 0x7, 0x0, 0xffff, 0xffffffffffffffff, 0x101, r10}) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000840)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r4, 0x60b, 0x2000000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x10}]}, 0x34}}, 0x4008000) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) 3m5.246007721s ago: executing program 0 (id=50): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0xdd, 0xbd, ""/189}, &(0x7f00000004c0)=0xdd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000001740)=""/206, 0xce}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x400000c, 0x1010, r0, 0xd51b6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x6c, 0x7f, 0x7ffc0002}]}) lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) lsm_set_self_attr(0x69, 0x0, 0x1020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000500)='\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000b04fcff", 0x58}], 0x1) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @dev}, &(0x7f00000000c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x101, 0x4e23, 0x7ff, 0xa, 0x20, 0x20, 0x1d, r7, r8}, {0x4, 0x583, 0x7, 0x2, 0x3, 0x800002, 0xbc, 0x3}, {0xbe, 0x0, 0x2, 0x9}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0x5e}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x2, 0x0, 0x6, 0x92a1, 0x8001, 0x9}}, 0xe8) 3m3.320905297s ago: executing program 1 (id=60): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0xffffffff}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f00000000c0)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x90, 0x0, 0x148, 0x148, 0x148, 0x148, 0x240, 0x240, 0x1e0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x8, 0x4, 0x7fffffff, 0x6}}, @common=@unspec=@statistic={{0x38}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x148}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ffad000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085444466f5", @ANYRESOCT, @ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x2}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) 3m2.810055931s ago: executing program 1 (id=63): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m2.729767762s ago: executing program 1 (id=64): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f8ffffff0000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000b73c5baa252a92370000000000000000000000020000000000c02e9764eee450584986015aad5134c4236a83619aadad9c1555f26f186d"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r9, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = dup(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r12 = getpid() perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7, 0x2, 0x5, 0x0, 0x0, 0x2, 0xa0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0x4}, 0x8800, 0x5, 0x0, 0x2, 0x1, 0x81, 0x7fff, 0x0, 0xbd6d, 0x0, 0x3}, r12, 0xb, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_IOC_EXPIRE(r11, 0x810c9365, &(0x7f00000004c0)={{0x101, 0x3}, 0x100, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) process_vm_readv(r12, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3m2.012532118s ago: executing program 1 (id=65): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0x80, 0x10100, 0xfffffffe, 0x309}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) unshare(0x22020600) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000400)={[{@oldalloc}, {@nobh}, {@resgid}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0xfe, 0x470, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu87Md2fHnp2JE0DHGkr/SSL2R8SvEdFfy64+Yaj2382l+dJfS/OlJCqV1/5MqufdWJovZT9i+XX7ajsqlSy/p0G5i29GTJTLU5ez/OjcxXdGZ69cfWr64sT5qfNTl8bPnDl54mjP6fFTLYkzjevG4PszRw6/+Ma1l0tnr73149dpffdnx/M4WmmodnUberTVhbXZgRXppNjGirAhabulzdVd7f/90RV9y8f644WP2lo5YFtVKpVKo8/nzEIF+A9Lot01ANoj/6BPn3/zbYeGHrvCH8/WHoDSuG9mW+1IMQrZOd11z7ettD8izi78/UW6xTbNQwAArPRtOv55stH4rxD3rDjvf9kaysGI+H9EHIqIuyJiICLujqiee29E3LfB8utXSG4f/xSubyqwdUrHf89ka1urx3/56C8OdmW5A9X4u5Nz0+Wp49k1GY7uPWl+bNVLVvvu+V8+q9/3aTbNPrRi/Jduafn5WDCrx/Vi3QTd5MTcREuCT+P/MGKw2Cj+JPJlnCQiDkfE4CbLmH78qyPNjv17/GtowTpT5cuIx2rtvxB18eeSpuuTY0+fHj812hvlqeOj+V1xu59+Xny1Wflbir8F0vbf2/D+r8WfPiMmvRGzV65eqK7Xzm68jMXfPi4lTY4NbPL+70ler6Z7sn3vTczNXR6L6EleSrN9q/aP33ptns/PT+MfPta4/x+K6M2vxP0Rkd7ERyPigYh4MGu7hyLi4Yg4tkb8Pzz3yNvNjjVv/zVm5VsojX9yjfZP3/LS1K3233ii68L33zQrv7Ku9j9ZTQ1ne9bz/rfeCm7l2gEAAMCdolBdg04KI8vpQmFkpPY7/AOxt1CemZ174tzMu5cma2vVB6O7kM909a+YDx3L5obz/Hhd/kQ2b/x5V181P1KaKU+2O3jocPua9P/U713trh2w7XxfCzqX/g+dS/+HzqX/Q+fS/6FD9TTe/cFO1wNoi41//vduSz2AnWf8D51L/4fOpf9DR2r63fjClr7yf6cmirujGg0TfbujGnkiCruiGq1LvPJJrUvslvrkieK6/5jFJhN7Gh5q9zsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wTAAD///1w5no=") mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x24000895) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_process_fork\x00', r5}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 3m1.587034601s ago: executing program 1 (id=66): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000d00)=[{&(0x7f0000000700)=""/222, 0xde}, {0x0}], 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000080)="0000501ef663", 0x0, 0x2800004, 0x10030, 0x0, 0x0}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$caif_stream(0x25, 0x1, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5e}, {@in6=@loopback, 0x4d3, 0x32}, @in=@remote, {0xfffffffffffffffd, 0x400000000000000}, {0x0, 0x200000000, 0x0, 0x100000}, {}, 0x1, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000440)=""/31, 0x1f}, 0x5}, {{&(0x7f0000000640)=@pptp, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000800)=""/195, 0xc3}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/30, 0x1e}, {&(0x7f0000000900)=""/240, 0xf0}], 0x4}, 0xf17e267}], 0x2, 0x40, &(0x7f00000006c0)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = getpid() ptrace$setregs(0xf, r5, 0x6, &(0x7f0000000380)="4a14bf922491aa85f64cba34ac8177414d12ee026f4cf46f94efaad74433ba6bc22d61100f53dbc2b49c9be86b2d561a03c10bdcc5bf17f4a5644a9606238fdeb4fddecc8559adc0c6bd9a622b65") creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) truncate(&(0x7f0000000240)='./file0\x00', 0xfe) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3m1.337186643s ago: executing program 1 (id=69): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6b8, &(0x7f00000001c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/201, 0xc9) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f00000002c0), &(0x7f0000000200)=r1}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x13, &(0x7f0000000040), 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r7, 0x1}}, 0x18) close(r2) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x74, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3m1.318189073s ago: executing program 33 (id=69): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6b8, &(0x7f00000001c0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/201, 0xc9) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f00000002c0), &(0x7f0000000200)=r1}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x13, &(0x7f0000000040), 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r7, 0x1}}, 0x18) close(r2) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)={0x74, r9, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xc}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2m59.137005831s ago: executing program 2 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0xfffffff9, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 2m58.716421905s ago: executing program 2 (id=84): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007b243ce4b3daa7804f2ec253d83dd48dd52870098398ae2a090c94803126afcc330a0b7d88eec75e17d2150f3d1fe8b4012c60"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 2m57.506938955s ago: executing program 2 (id=91): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t ro'], 0x27) 2m57.403701395s ago: executing program 2 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) unshare(0x22020600) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000400)={[{@oldalloc}, {@nobh}, {@resgid}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0xfe, 0x470, &(0x7f0000000940)="$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") mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x24000895) poll(&(0x7f0000000000), 0x20000000000000ea, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_process_fork\x00', r3}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 2m57.018097869s ago: executing program 2 (id=100): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m56.765945041s ago: executing program 2 (id=103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x2c}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f66) 2m56.76568693s ago: executing program 34 (id=103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x2c}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f66) 2m54.043916943s ago: executing program 3 (id=116): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) 2m53.983386024s ago: executing program 3 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0xfffffff9, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0) 2m53.858389544s ago: executing program 3 (id=118): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 2m53.829844065s ago: executing program 3 (id=120): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0x80, 0x10100, 0xfffffffe, 0x309}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) unshare(0x22020600) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m53.509191127s ago: executing program 3 (id=121): socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffbfffffffffa, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x82, 0x0, 0x9, 0x1, 0x0, 0x7ffffffd}, 0x0, 0x0) 2m53.24154525s ago: executing program 3 (id=122): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r6 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x230, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x198, 0x230, 0x230, 0x198, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x6e, 0x0, 0x24}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @rand_addr, 0x0, 0xffffffff, 'vxcan1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x589b, 0x6, 0x0, 'syz1\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 2m53.22569518s ago: executing program 35 (id=122): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r6 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe501, 0x3, 0x230, 0x0, 0xa, 0x1000000, 0x0, 0x0, 0x198, 0x230, 0x230, 0x198, 0x223, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0xffffffff, 'ip6_vti0\x00', 'veth1_to_hsr\x00', {0xff}, {}, 0x6e, 0x0, 0x24}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@multicast2, @rand_addr, 0x0, 0xffffffff, 'vxcan1\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x1d}, 0x0, 0x98, 0x100, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x5, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x589b, 0x6, 0x0, 'syz1\x00', 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 2m50.199225285s ago: executing program 36 (id=50): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000005c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0xdd, 0xbd, ""/189}, &(0x7f00000004c0)=0xdd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000001740)=""/206, 0xce}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x400000c, 0x1010, r0, 0xd51b6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x6c, 0x7f, 0x7ffc0002}]}) lsm_get_self_attr(0x69, 0x0, 0x0, 0x1) lsm_set_self_attr(0x69, 0x0, 0x1020, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rmdir(&(0x7f0000000500)='\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) writev(r5, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000b04fcff", 0x58}], 0x1) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @dev}, &(0x7f00000000c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x101, 0x4e23, 0x7ff, 0xa, 0x20, 0x20, 0x1d, r7, r8}, {0x4, 0x583, 0x7, 0x2, 0x3, 0x800002, 0xbc, 0x3}, {0xbe, 0x0, 0x2, 0x9}, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0x5e}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x2, 0x0, 0x6, 0x92a1, 0x8001, 0x9}}, 0xe8) 2m49.829552278s ago: executing program 7 (id=146): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) 2m48.822429426s ago: executing program 7 (id=149): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ifreq(r0, 0x73, &(0x7f00000002c0)={'pim6reg\x00', @ifru_settings={0x4, 0x3ff402d2, @te1=&(0x7f0000000200)={0x2, 0x3ff, 0x796, 0xd529}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 2m48.786473226s ago: executing program 7 (id=150): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x19a, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x8, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0xffffffffffffffff], 0x0, 0x10, 0x715, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x38, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f0791710007"}}}}}}}, 0x0) r2 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000b40)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="37feffff0000000000000000000000000800000065221a7ba850df42a73765a33179d68594c5d5004c3c633d6bce7347721522ee9728cf1b38e001058028665b0d805995b3ed8b2d6f", @ANYRES32=r4, @ANYBLOB="e5fe0000", @ANYRES32, @ANYBLOB="04002b80"], 0x24}], 0x1}, 0x880) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f0, 0x20a, 0x278, 0x2f0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00', {}, {}, 0x0, 0x8}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1, 0x1, 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff], [], 'veth1_to_hsr\x00', 'wg0\x00', {}, {}, 0x1d, 0x0, 0x0, 0x1a}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r9, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r8, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m48.629492577s ago: executing program 7 (id=152): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x819, &(0x7f0000000240)={0x0, 0x80, 0x10100, 0xfffffffe, 0x309}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_UNLINKAT={0x24, 0x1b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m48.497625688s ago: executing program 7 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2808e8dbe108588948224ad54afac11d875397bdb20000b42003003c4209005f819e01177d3d458d00000000000000000000000000ffffffffffffffff00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000d00b708b100feffffff938af8ff00000000bfa200000000000007020000f8ffff9359446ae1b742ba0323498515ffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) close(0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r6}, 0x10) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200804a, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 2m48.057798652s ago: executing program 7 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x12, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, r4, 0xb}}, 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9], 0x50) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) 2m47.968435683s ago: executing program 37 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x12, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, r4, 0xb}}, 0x48) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9], 0x50) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) 4.171153455s ago: executing program 8 (id=3622): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xa}, 0x1c) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 3.318544732s ago: executing program 8 (id=3634): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000480)="8ab884426c7fcf5c1ecae5f2c372c05c8693eb47c95ba7751a8b27ddebe9c2f103af157e59a8b90e468cbed3e56c0af7cd7bf81a20d5ce1dc375d08a18ff208f1eabeecc4183e3f31b30a1baf7a78005e60b6098b7ba489c382a52c29c7cc208436a120b51e468931978734a1507e10008ed", 0x72) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xf4}]}}}], 0x18}}], 0x1, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000001e00), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfff2, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 2.671606638s ago: executing program 5 (id=3640): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) socket$inet6(0xa, 0x80002, 0x0) 2.3992785s ago: executing program 8 (id=3644): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xa}, 0x1c) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 1.868974064s ago: executing program 6 (id=3652): unshare(0x24040000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/10, 0xa}}], 0x1, 0x12026, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r8, 0x0, 0x8bd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 1.821183285s ago: executing program 4 (id=3653): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000480)="8ab884426c7fcf5c1ecae5f2c372c05c8693eb47c95ba7751a8b27ddebe9c2f103af157e59a8b90e468cbed3e56c0af7cd7bf81a20d5ce1dc375d08a18ff208f1eabeecc4183e3f31b30a1baf7a78005e60b6098b7ba489c382a52c29c7cc208436a120b51e468931978734a1507e10008eded390c3eef7adc72b6f4cd2460ba2966891bd198d99242dbfd42bfbd4cb90d8d9029547af72c8a5f0e270f76a7ee31b5c6ba8a985cdf1b88a8", 0xab) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004c80)=[{{&(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0xf4}]}}}], 0x18}}], 0x1, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000001e00), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) close(0xffffffffffffffff) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r9, {0xfff2, 0x4}, {0x0, 0xfff1}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 1.775262915s ago: executing program 5 (id=3654): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xff, 0x5, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x2}, 0x1a, 0x7, 0x800, 0x4, 0x8, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x7}, 0x18) 1.617609736s ago: executing program 4 (id=3655): unshare(0x24040000) r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/10, 0xa}}], 0x1, 0x12026, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r6, 0x0, 0x8bd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 1.471140907s ago: executing program 8 (id=3656): kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.369436728s ago: executing program 8 (id=3657): unshare(0x24040000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/10, 0xa}}], 0x1, 0x12026, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r8, 0x0, 0x8bd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 1.367834838s ago: executing program 5 (id=3658): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x6, 0x1e, &(0x7f0000001cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x152}, @map_fd={0x18, 0x5}, @alu={0x7, 0x1, 0x5, 0x6, 0x0, 0x10, 0x4}, @exit, @alu={0x3, 0x1, 0x2, 0x2, 0x2, 0x4, 0xfffffffffffffff0}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0xc2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) ioctl$KDDISABIO(r1, 0x4b37) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000800008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setlease(r4, 0x400, 0x1) rt_sigpending(&(0x7f0000000580), 0x8) fcntl$getflags(r4, 0x401) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef36"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sync() fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:hald_var_lib_t:s0\x00', 0x24, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0x0, 0x0, 0x0) sync() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x47b, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x3, 0xa, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000480)) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') fcntl$getflags(r7, 0xb) 1.366590188s ago: executing program 6 (id=3659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x328, 0x30, 0x300, 0x70bd2d, 0x25dfdbff, {}, [{0x314, 0x1, [@m_skbedit={0x248, 0x19, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xa}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x1, 0xffffffffeffffffb, 0x7, 0x101}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xfff7}}]}, {0x1d4, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xc8, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1174, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1c0e, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x150c, 0x6}}]}, {0x75, 0x6, "b78f55c15bbb4ca5b06f37194e35ff39a822fd00c084c8addcd3597b7208e2a0e41e3136dc1046001a012b786d3c7ef4225ae17d5832d337ac7337620e5dc3adc4bc7b84d225eea7316826497ed530a20987a8e58e3984f22f6fc7ae36c8ce90f0211034843c33a2de1aa4b5d1228b059e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x328}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.253140949s ago: executing program 6 (id=3660): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 1.140437s ago: executing program 6 (id=3661): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000007fffffff6600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9, 0x0}, 0x8) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xb, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "5800140002005000", "6b6aab0001004400000000000008009b", "00000200", "84070000805214b8"}, 0x28) r7 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_DESTROY(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1.12549334s ago: executing program 4 (id=3662): io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) 1.063302811s ago: executing program 4 (id=3663): readv(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380e3718010992ed68fdb8d2326540ee616dadce"], 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES8], 0x1, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) 1.06267111s ago: executing program 6 (id=3664): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0x0, 0x0, 0x97, 0x0, &(0x7f0000000280)="012143a912e259c0e82079f860ecedd3c54d9bf23b8bf9a0515a14505e73f3211f3c04cfde181a2240a4a73aefb16e2c0626fd931c41cad3eb649ceee16481d12fa45a5b7933f973360ba54223882319f94c6febb4a168947a17151e14dd41027aad67fcef8e0efa02db0825d3531f4fccde8d8aefbc2480fd72803893aaf2dac85af594e69c89cb1b3a6a7cae652c03b14e373e632d3f"}) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000500), &(0x7f0000000600)={'L-', 0x100000001}, 0x16, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000004c0)={0x9, &(0x7f00000003c0)=[{0xffff, 0x0, 0x3, 0x13}, {0xc76, 0x10, 0x7, 0xffffffff}, {0x80, 0x75, 0xa, 0x5}, {0x4, 0x4, 0x6, 0x4}, {0x0, 0xe, 0x7d, 0x4d09}, {0x8857, 0x1, 0x3, 0x481}, {0x6, 0x9f, 0x6, 0xff}, {0x5, 0x2, 0x3, 0x80000000}, {0x40, 0xa1, 0x3, 0x8}]}) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 837.181152ms ago: executing program 8 (id=3665): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) socket$inet6(0xa, 0x80002, 0x0) 774.642483ms ago: executing program 5 (id=3666): perf_event_open(0x0, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x7}, 0x18) 530.072465ms ago: executing program 9 (id=3667): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000007fffffff6600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x9}, 0x8) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "5800140002005000", "6b6aab0001004400000000000008009b", "00000200", "84070000805214b8"}, 0x28) r5 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_DESTROY(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r7, 0x0, 0x178}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 513.750105ms ago: executing program 4 (id=3668): kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 477.716125ms ago: executing program 6 (id=3669): unshare(0x24040000) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/10, 0xa}}], 0x1, 0x12026, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r8, 0x0, 0x8bd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") 424.388366ms ago: executing program 9 (id=3670): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x800000000000005, 0xc201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61e, 0xa}, 0x100000, 0x1, 0x0, 0x6, 0x40, 0x40000000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', 0x0}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 357.652347ms ago: executing program 5 (id=3671): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1, 0x0, 0x4}, 0x18) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) 299.489867ms ago: executing program 9 (id=3672): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0xff, 0x5, 0x8, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x2}, 0x1a, 0x7, 0x800, 0x4, 0x8, 0x4002}, 0x0, 0x4000000001, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x7}, 0x18) 291.117637ms ago: executing program 4 (id=3673): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="6b549b5041ce22b8b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000e2b6040000000000008d0000ae8200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x2004c080, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1000000, @loopback}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0xa}, 0x1c) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 290.713177ms ago: executing program 5 (id=3674): readv(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380e3718010992ed68fdb8d2326540ee616dadce"], 0x48) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES8], 0x1, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) execve(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) dup(0xffffffffffffffff) 261.109557ms ago: executing program 9 (id=3675): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) 99.647298ms ago: executing program 9 (id=3676): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000540)='./file2\x00', 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000000)=0x5, 0x0, 0x4) 0s ago: executing program 9 (id=3677): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}]}}) kernel console output (not intermixed with test programs): 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.212877][T13525] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.216847][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.232394][T13525] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.236675][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.254666][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 195.266228][ T25] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 195.285334][T13493] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.340878][T13493] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.342464][ T4213] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.475258][T13493] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.487642][T13493] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.500422][T13493] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.513688][T13493] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.539458][T13553] __nla_validate_parse: 15 callbacks suppressed [ 195.539479][T13553] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3250'. [ 195.545962][T13549] loop4: detected capacity change from 0 to 512 [ 195.563176][T13549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.575258][T12329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.596774][T13549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.613669][T13549] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.625089][T13549] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.686971][T13557] loop5: detected capacity change from 0 to 512 [ 195.696704][T13563] loop6: detected capacity change from 0 to 512 [ 195.707871][T13557] EXT4-fs: Ignoring removed nobh option [ 195.714077][T13563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.735576][T13557] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #16: comm syz.5.3251: corrupted inode contents [ 195.749039][T13563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.764710][T13563] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.775218][T13557] EXT4-fs (loop5): Remounting filesystem read-only [ 195.800774][T13557] EXT4-fs (loop5): 1 truncate cleaned up [ 195.809502][T13557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.822211][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 195.832825][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 195.846482][T13563] validate_nla: 3 callbacks suppressed [ 195.846499][T13563] netlink: 'syz.6.3254': attribute type 10 has an invalid length. [ 195.859844][T13563] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3254'. [ 195.871400][T13557] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 195.883411][T13557] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.893864][ T51] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 195.920446][T13563] team0: Port device geneve1 added [ 195.972888][T13118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.313711][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3267'. [ 196.404081][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.411582][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.419061][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.428527][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.436805][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.444489][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.452018][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.459425][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.466938][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.474453][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.481990][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.489483][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.496922][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.504433][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.512550][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.520053][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.527523][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.535061][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.542536][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.549978][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.557420][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.564861][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.572290][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.579688][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.587142][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.594662][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.602147][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.609604][ T25] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 196.652660][T13594] loop9: detected capacity change from 0 to 512 [ 196.743379][T13594] EXT4-fs (loop9): orphan cleanup on readonly fs [ 196.767764][ T25] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 196.813007][T13594] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3262: bg 0: block 248: padding at end of block bitmap is not set [ 196.838166][T13594] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.3262: Failed to acquire dquot type 1 [ 196.876983][T13594] EXT4-fs (loop9): 1 truncate cleaned up [ 196.894159][ T10] kernel write not supported for file /224/attr/exec (pid: 10 comm: kworker/0:1) [ 196.923677][T13594] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.938695][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3272'. [ 196.948970][T13624] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 196.957605][T13624] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.042251][ T36] kernel write not supported for file /56/attr/exec (pid: 36 comm: kworker/1:1) [ 197.055869][T13643] loop4: detected capacity change from 0 to 128 [ 197.066598][T13642] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 197.075473][T13642] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.083666][T13643] syz.4.3275: attempt to access beyond end of device [ 197.083666][T13643] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 197.137605][T13636] syz.4.3275: attempt to access beyond end of device [ 197.137605][T13636] loop4: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 197.258166][T13647] loop5: detected capacity change from 0 to 512 [ 197.266628][T13647] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 197.296977][T13647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.312127][T13647] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.323656][T13647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.360804][T13661] loop4: detected capacity change from 0 to 8192 [ 197.499839][T13668] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3286'. [ 197.546460][ T36] kernel write not supported for file /1338/attr/exec (pid: 36 comm: kworker/1:1) [ 197.561403][T13686] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 197.586209][T13686] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.663243][ T30] kauditd_printk_skb: 346 callbacks suppressed [ 197.663312][ T30] audit: type=1326 audit(1742262670.141:22436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.693267][ T30] audit: type=1326 audit(1742262670.141:22437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.716966][ T30] audit: type=1326 audit(1742262670.141:22438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.740809][ T30] audit: type=1326 audit(1742262670.141:22439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.764528][ T30] audit: type=1326 audit(1742262670.141:22440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.766857][T13696] loop8: detected capacity change from 0 to 512 [ 197.788112][ T30] audit: type=1326 audit(1742262670.141:22441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.788151][ T30] audit: type=1326 audit(1742262670.141:22442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.788185][ T30] audit: type=1326 audit(1742262670.141:22443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.865133][ T30] audit: type=1326 audit(1742262670.141:22444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.888859][ T30] audit: type=1326 audit(1742262670.141:22445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13693 comm="syz.8.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 197.913473][T13696] EXT4-fs: Ignoring removed nobh option [ 197.925364][T13696] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3295: corrupted inode contents [ 197.938901][T13696] EXT4-fs (loop8): Remounting filesystem read-only [ 197.946020][T13696] EXT4-fs (loop8): 1 truncate cleaned up [ 197.955172][T13696] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.968975][T13696] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 197.976867][ T1089] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 197.987627][ T1089] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.001224][ T1089] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.013222][T13696] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.266202][T13720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3302'. [ 198.483985][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.491580][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.498982][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.514261][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.521786][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.529445][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.537010][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.544458][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.552108][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.559526][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.566959][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.574419][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.581959][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.589371][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.598060][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.605563][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.613014][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.620491][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.627920][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.635452][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.643004][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.650593][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.658070][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.665548][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.673026][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.680578][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.688020][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.695554][ T4378] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 198.705404][ T4378] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 198.775251][T13735] loop4: detected capacity change from 0 to 512 [ 198.782995][T13735] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.804797][T13735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.820296][T13735] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.831713][T13735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.961770][T13711] syz.8.3299 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 198.972946][T13711] CPU: 0 UID: 0 PID: 13711 Comm: syz.8.3299 Not tainted 6.14.0-rc7-syzkaller #0 [ 198.972974][T13711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.972990][T13711] Call Trace: [ 198.972998][T13711] [ 198.973040][T13711] dump_stack_lvl+0xf2/0x150 [ 198.973077][T13711] dump_stack+0x15/0x1a [ 198.973099][T13711] dump_header+0x83/0x2d0 [ 198.973136][T13711] oom_kill_process+0x341/0x4c0 [ 198.973188][T13711] out_of_memory+0x9af/0xbe0 [ 198.973265][T13711] ? css_next_descendant_pre+0x11c/0x140 [ 198.973294][T13711] mem_cgroup_out_of_memory+0x13e/0x190 [ 198.973405][T13711] try_charge_memcg+0x508/0x7f0 [ 198.973437][T13711] charge_memcg+0x50/0xc0 [ 198.973466][T13711] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 198.973554][T13711] __read_swap_cache_async+0x236/0x480 [ 198.973584][T13711] swap_cluster_readahead+0x279/0x3f0 [ 198.973618][T13711] swapin_readahead+0xe4/0x6f0 [ 198.973686][T13711] ? __rcu_read_unlock+0x34/0x70 [ 198.973782][T13711] ? swap_cache_get_folio+0x77/0x210 [ 198.973813][T13711] do_swap_page+0x31b/0x2550 [ 198.973875][T13711] ? __rcu_read_lock+0x36/0x50 [ 198.973899][T13711] ? __pfx_default_wake_function+0x10/0x10 [ 198.973933][T13711] handle_mm_fault+0x8e4/0x2ac0 [ 198.973966][T13711] exc_page_fault+0x3b9/0x650 [ 198.974079][T13711] asm_exc_page_fault+0x26/0x30 [ 198.974119][T13711] RIP: 0033:0x7f9990ba3bfe [ 198.974151][T13711] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 00 e8 18 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 b6 3f 34 00 85 c0 0f 8e a3 fd ff ff 8d a6 fe ff 49 39 c4 73 a0 48 8d 1d 91 23 34 00 83 3d 96 3f 34 [ 198.974170][T13711] RSP: 002b:00007ffc6a47a280 EFLAGS: 00010202 [ 198.974213][T13711] RAX: 0000000000000001 RBX: 00007f9990ee7ba0 RCX: 0000000000000000 [ 198.974228][T13711] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555564639808 [ 198.974247][T13711] RBP: 00007f9990ee7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 198.974269][T13711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000030950 [ 198.974281][T13711] R13: 00007f9990ee6160 R14: ffffffffffffffff R15: 00007ffc6a47a390 [ 198.974300][T13711] [ 198.974307][T13711] memory: usage 307200kB, limit 307200kB, failcnt 4549 [ 199.061061][T13747] loop4: detected capacity change from 0 to 8192 [ 199.064407][T13711] memory+swap: usage 310572kB, limit 9007199254740988kB, failcnt 0 [ 199.198973][T13711] kmem: usage 134216kB, limit 9007199254740988kB, failcnt 0 [ 199.206342][T13711] Memory cgroup stats for /syz8: [ 199.208920][T13711] cache 0 [ 199.216893][T13711] rss 0 [ 199.219666][T13711] shmem 0 [ 199.222637][T13711] mapped_file 0 [ 199.226107][T13711] dirty 0 [ 199.229055][T13711] writeback 0 [ 199.232466][T13711] workingset_refault_anon 907 [ 199.237161][T13711] workingset_refault_file 972 [ 199.241891][T13711] swap 17104896 [ 199.245614][T13711] swapcached 0 [ 199.249377][T13711] pgpgin 221743 [ 199.252942][T13711] pgpgout 221743 [ 199.256502][T13711] pgfault 243782 [ 199.260077][T13711] pgmajfault 121 [ 199.263746][T13711] inactive_anon 0 [ 199.267388][T13711] active_anon 0 [ 199.270887][T13711] inactive_file 0 [ 199.274550][T13711] active_file 0 [ 199.278076][T13711] unevictable 0 [ 199.281556][T13711] hierarchical_memory_limit 314572800 [ 199.286937][T13711] hierarchical_memsw_limit 9223372036854771712 [ 199.293150][T13711] total_cache 0 [ 199.296611][T13711] total_rss 0 [ 199.299896][T13711] total_shmem 0 [ 199.303390][T13711] total_mapped_file 0 [ 199.307421][T13711] total_dirty 0 [ 199.311039][T13711] total_writeback 0 [ 199.314860][T13711] total_workingset_refault_anon 907 [ 199.320059][T13711] total_workingset_refault_file 972 [ 199.325299][T13711] total_swap 17104896 [ 199.329373][T13711] total_swapcached 0 [ 199.333329][T13711] total_pgpgin 221743 [ 199.337343][T13711] total_pgpgout 221743 [ 199.341490][T13711] total_pgfault 243782 [ 199.345571][T13711] total_pgmajfault 121 [ 199.349726][T13711] total_inactive_anon 0 [ 199.353963][T13711] total_active_anon 0 [ 199.357945][T13711] total_inactive_file 0 [ 199.362149][T13711] total_active_file 0 [ 199.366221][T13711] total_unevictable 0 [ 199.370207][T13711] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3299,pid=13711,uid=0 [ 199.385358][T13711] Memory cgroup out of memory: Killed process 13711 (syz.8.3299) total-vm:93844kB, anon-rss:1048kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 199.403188][T12600] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.438908][T13751] loop9: detected capacity change from 0 to 128 [ 199.470255][T13751] syz.9.3312: attempt to access beyond end of device [ 199.470255][T13751] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 199.495393][T13751] syz.9.3312: attempt to access beyond end of device [ 199.495393][T13751] loop9: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 199.631100][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.638545][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.645991][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.680213][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.687832][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.695363][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.702892][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.710296][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.717963][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.725409][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.732921][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.740401][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.747914][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.755348][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.767809][T13773] netlink: 'syz.5.3322': attribute type 1 has an invalid length. [ 199.776391][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.784037][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.791526][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.799032][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.806500][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.813920][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.821369][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.829449][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.836888][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.844329][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.851864][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.859396][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.866898][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.874334][ T25] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 199.882770][ T25] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 200.125014][T13793] loop8: detected capacity change from 0 to 512 [ 200.131869][T13793] EXT4-fs: Ignoring removed nobh option [ 200.188547][T13793] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3328: corrupted inode contents [ 200.213006][T13793] EXT4-fs (loop8): Remounting filesystem read-only [ 200.219977][T13793] EXT4-fs (loop8): 1 truncate cleaned up [ 200.231142][ T1087] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 200.241787][ T1087] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 200.248062][T13793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.265975][T13775] loop6: detected capacity change from 0 to 512 [ 200.269764][ T1087] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 200.280673][T13793] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 200.292151][T13793] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.300226][T13775] EXT4-fs (loop6): orphan cleanup on readonly fs [ 200.317253][T13775] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3321: bg 0: block 248: padding at end of block bitmap is not set [ 200.336071][T13775] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.3321: Failed to acquire dquot type 1 [ 200.355637][T13775] EXT4-fs (loop6): 1 truncate cleaned up [ 200.373478][T13775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.713680][T13778] syz.9.3324 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 200.724745][T13778] CPU: 1 UID: 0 PID: 13778 Comm: syz.9.3324 Not tainted 6.14.0-rc7-syzkaller #0 [ 200.724773][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.724850][T13778] Call Trace: [ 200.724859][T13778] [ 200.724868][T13778] dump_stack_lvl+0xf2/0x150 [ 200.724903][T13778] dump_stack+0x15/0x1a [ 200.724924][T13778] dump_header+0x83/0x2d0 [ 200.724990][T13778] oom_kill_process+0x341/0x4c0 [ 200.725032][T13778] out_of_memory+0x9af/0xbe0 [ 200.725073][T13778] ? css_next_descendant_pre+0x11c/0x140 [ 200.725127][T13778] mem_cgroup_out_of_memory+0x13e/0x190 [ 200.725176][T13778] try_charge_memcg+0x508/0x7f0 [ 200.725202][T13778] charge_memcg+0x50/0xc0 [ 200.725226][T13778] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 200.725313][T13778] __read_swap_cache_async+0x236/0x480 [ 200.725342][T13778] swap_cluster_readahead+0x279/0x3f0 [ 200.725401][T13778] swapin_readahead+0xe4/0x6f0 [ 200.725428][T13778] ? __lruvec_stat_mod_folio+0xdb/0x120 [ 200.725466][T13778] ? swap_cache_get_folio+0x77/0x210 [ 200.725565][T13778] do_swap_page+0x31b/0x2550 [ 200.725672][T13778] ? __rcu_read_lock+0x36/0x50 [ 200.725698][T13778] ? __pfx_default_wake_function+0x10/0x10 [ 200.725733][T13778] handle_mm_fault+0x8e4/0x2ac0 [ 200.725762][T13778] exc_page_fault+0x3b9/0x650 [ 200.725839][T13778] asm_exc_page_fault+0x26/0x30 [ 200.725866][T13778] RIP: 0033:0x7efff1623bcc [ 200.725959][T13778] Code: 66 0f 1f 44 00 00 69 3d e6 1a e7 00 e8 03 00 00 48 8d 1d e7 23 34 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 200.725977][T13778] RSP: 002b:00007fff38ae7a30 EFLAGS: 00010206 [ 200.725994][T13778] RAX: 0000000000000000 RBX: 00007efff1965fa0 RCX: 0000000000000000 [ 200.726009][T13778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557b0af808 [ 200.726023][T13778] RBP: 00007efff1967ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 200.726035][T13778] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000031029 [ 200.726048][T13778] R13: 00007fff38ae7b20 R14: ffffffffffffffff R15: 00007fff38ae7b40 [ 200.726071][T13778] [ 200.726078][T13778] memory: usage 307200kB, limit 307200kB, failcnt 4578 [ 200.937136][T13778] memory+swap: usage 103648kB, limit 9007199254740988kB, failcnt 0 [ 200.945094][T13778] kmem: usage 87072kB, limit 9007199254740988kB, failcnt 0 [ 200.952336][T13778] Memory cgroup stats for /syz9: [ 200.952652][T13778] cache 0 [ 200.960737][T13778] rss 4096 [ 200.961531][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 200.963794][T13778] shmem 0 [ 200.963803][T13778] mapped_file 0 [ 200.963840][T13778] dirty 0 [ 200.971233][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 200.974123][T13778] writeback 8192 [ 200.977760][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 200.980497][T13778] workingset_refault_anon 1645 [ 200.980509][T13778] workingset_refault_file 2858 [ 200.980519][T13778] swap 16941056 [ 200.980526][T13778] swapcached 32768 [ 200.980534][T13778] pgpgin 200304 [ 200.980542][T13778] pgpgout 200296 [ 200.980550][T13778] pgfault 237335 [ 200.980558][T13778] pgmajfault 203 [ 200.980566][T13778] inactive_anon 32768 [ 200.980574][T13778] active_anon 0 [ 200.980582][T13778] inactive_file 0 [ 200.980591][T13778] active_file 0 [ 200.980638][T13778] unevictable 0 [ 201.008511][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.008683][T13778] hierarchical_memory_limit 314572800 [ 201.012176][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.015863][T13778] hierarchical_memsw_limit 9223372036854771712 [ 201.015877][T13778] total_cache 0 [ 201.015886][T13778] total_rss 4096 [ 201.019368][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.022921][T13778] total_shmem 0 [ 201.026549][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.030151][T13778] total_mapped_file 0 [ 201.034240][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.037581][T13778] total_dirty 0 [ 201.041233][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.044666][T13778] total_writeback 8192 [ 201.044677][T13778] total_workingset_refault_anon 1645 [ 201.044688][T13778] total_workingset_refault_file 2858 [ 201.048150][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.055548][T13778] total_swap 16941056 [ 201.060883][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.068286][T13778] total_swapcached 32768 [ 201.074513][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.077987][T13778] total_pgpgin 200304 [ 201.081572][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.089020][T13778] total_pgpgout 200296 [ 201.092530][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.099867][T13778] total_pgfault 237335 [ 201.107763][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.111236][T13778] total_pgmajfault 203 [ 201.114739][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.122135][T13778] total_inactive_anon 32768 [ 201.122147][T13778] total_active_anon 0 [ 201.122157][T13778] total_inactive_file 0 [ 201.126289][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.131486][T13778] total_active_file 0 [ 201.136790][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.144260][T13778] total_unevictable 0 [ 201.148241][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.155606][T13778] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/ [ 201.159944][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.167285][T13778] ,mems_allowed=0 [ 201.171308][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.171335][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.178674][T13778] ,oom_memcg=/syz9 [ 201.182759][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.182849][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.190177][T13778] ,task_memcg= [ 201.194219][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.194245][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.194288][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.194342][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 201.201712][T13778] /syz9,task=syz.9.3324,pid=13778,uid=0 [ 201.347849][T13778] Memory cgroup out of memory: Killed process 13778 (syz.9.3324) total-vm:93844kB, anon-rss:1044kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 201.376567][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 201.506159][T13826] loop9: detected capacity change from 0 to 512 [ 201.513692][T13826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.543166][T13826] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.555913][T13826] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.567677][T13826] netlink: 'syz.9.3337': attribute type 10 has an invalid length. [ 201.575591][T13826] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3337'. [ 201.603953][T12600] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.647330][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.654994][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.662455][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.671711][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.679228][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.686742][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.694626][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.702052][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.709472][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.717049][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.724553][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.732029][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.739584][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.747085][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.754594][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.762158][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.769543][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.776957][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.784400][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.787747][T13845] loop5: detected capacity change from 0 to 512 [ 201.791810][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.791840][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.791861][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.791882][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.808193][T13845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.812989][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.813019][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.813046][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.833502][T13845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.836240][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.844962][T13845] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.851008][ T3374] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 201.859323][T13845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.871401][ T3374] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 201.937021][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.944550][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.952349][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.959985][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.967494][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.975026][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.982525][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.989935][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 201.997483][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.004924][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.012354][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.019853][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.027315][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.034753][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.042278][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.049718][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.057162][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.064739][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.072158][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.079553][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.087083][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.094530][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.101953][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.109488][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.117053][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.124508][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.131930][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.139321][ T3374] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 202.147292][ T3374] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 202.282800][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 202.291806][T13877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3357'. [ 202.337792][T13883] netlink: 'syz.4.3360': attribute type 1 has an invalid length. [ 202.350772][T13887] netlink: 'syz.8.3362': attribute type 21 has an invalid length. [ 202.367132][T13887] netlink: 152 bytes leftover after parsing attributes in process `syz.8.3362'. [ 202.416172][T13885] loop5: detected capacity change from 0 to 512 [ 202.424517][T13885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.454429][T13885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.467390][T13885] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.479618][T13885] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.555120][T13895] loop8: detected capacity change from 0 to 512 [ 202.563633][T13895] EXT4-fs: Ignoring removed nobh option [ 202.573342][T13895] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3365: corrupted inode contents [ 202.586747][T13895] EXT4-fs (loop8): Remounting filesystem read-only [ 202.595965][T13895] EXT4-fs (loop8): 1 truncate cleaned up [ 202.598001][T13903] loop4: detected capacity change from 0 to 512 [ 202.604899][T13895] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.609874][T13903] EXT4-fs: Ignoring removed nobh option [ 202.620689][T13895] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 202.626299][ T4231] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.634348][T13895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.643264][ T4231] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.662912][ T4231] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 202.673067][ T4231] __quota_error: 225 callbacks suppressed [ 202.673082][ T4231] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 202.687643][ T4231] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 202.696169][T13903] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3369: corrupted inode contents [ 202.710090][T13903] EXT4-fs (loop4): Remounting filesystem read-only [ 202.711867][ T30] audit: type=1326 audit(1742262675.201:22653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.8.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9990ccbad0 code=0x7ffc0000 [ 202.716919][T13903] EXT4-fs (loop4): 1 truncate cleaned up [ 202.741007][ T4231] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.746558][T13903] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 202.756595][ T4231] Quota error (device loop4): write_blk: dquota write failed [ 202.764357][ T30] audit: type=1326 audit(1742262675.251:22654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.8.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9990cccd6b code=0x7ffc0000 [ 202.770379][ T4231] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 202.793878][ T30] audit: type=1326 audit(1742262675.251:22655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.8.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9990ccbdca code=0x7ffc0000 [ 202.803877][ T4231] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 202.827256][ T30] audit: type=1326 audit(1742262675.251:22656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.8.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 202.837816][ T4231] Quota error (device loop4): write_blk: dquota write failed [ 202.861434][ T30] audit: type=1326 audit(1742262675.251:22657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13894 comm="syz.8.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9990ccd169 code=0x7ffc0000 [ 202.868788][ T4231] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 202.938612][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 202.947613][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 202.984746][T13918] loop8: detected capacity change from 0 to 128 [ 203.010812][T13918] syz.8.3374: attempt to access beyond end of device [ 203.010812][T13918] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 203.033507][T13918] syz.8.3374: attempt to access beyond end of device [ 203.033507][T13918] loop8: rw=524288, sector=145, nr_sectors = 520 limit=128 [ 203.049518][T13918] syz.8.3374: attempt to access beyond end of device [ 203.049518][T13918] loop8: rw=524288, sector=889, nr_sectors = 152 limit=128 [ 203.215201][T13940] loop9: detected capacity change from 0 to 512 [ 203.225100][T13940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.272114][T13940] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.403139][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3385'. [ 203.412124][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3385'. [ 203.468195][T13948] loop9: detected capacity change from 0 to 8192 [ 203.486563][T13950] loop5: detected capacity change from 0 to 512 [ 203.496953][T13950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 203.521547][T13950] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.542381][T13950] netlink: 'syz.5.3384': attribute type 10 has an invalid length. [ 203.550230][T13950] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3384'. [ 203.629217][T13958] loop8: detected capacity change from 0 to 128 [ 203.667667][T13958] syz.8.3389: attempt to access beyond end of device [ 203.667667][T13958] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 203.738301][T13958] syz.8.3389: attempt to access beyond end of device [ 203.738301][T13958] loop8: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 203.786444][ T9] kernel write not supported for file /159/attr/exec (pid: 9 comm: kworker/0:0) [ 203.820181][T13942] loop4: detected capacity change from 0 to 512 [ 203.843838][T13970] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 203.852496][T13970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 203.904436][T13942] EXT4-fs (loop4): orphan cleanup on readonly fs [ 203.957001][T13975] loop8: detected capacity change from 0 to 512 [ 203.967254][T13942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3381: bg 0: block 248: padding at end of block bitmap is not set [ 203.982605][T13975] EXT4-fs: Ignoring removed nobh option [ 204.024520][T13942] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.3381: Failed to acquire dquot type 1 [ 204.047523][T13942] EXT4-fs (loop4): 1 truncate cleaned up [ 204.055694][T13975] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3394: corrupted inode contents [ 204.067976][T13983] loop6: detected capacity change from 0 to 512 [ 204.074928][T13983] EXT4-fs: Ignoring removed nobh option [ 204.088028][T13975] EXT4-fs (loop8): Remounting filesystem read-only [ 204.099688][T13975] EXT4-fs (loop8): 1 truncate cleaned up [ 204.109386][T13983] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #16: comm syz.6.3397: corrupted inode contents [ 204.121688][T13975] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 204.128662][ T4231] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 204.139220][ T4231] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 204.152335][T13983] EXT4-fs (loop6): Remounting filesystem read-only [ 204.153422][ T4231] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 204.160130][T13983] EXT4-fs (loop6): 1 truncate cleaned up [ 204.174860][ T1087] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 204.177798][T13983] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 204.185550][ T1087] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 204.204039][ T1087] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 204.255958][T13996] netlink: 'syz.5.3401': attribute type 1 has an invalid length. [ 204.294039][T14002] netlink: 'syz.6.3404': attribute type 21 has an invalid length. [ 204.307251][T14004] netem: change failed [ 204.471887][T14020] loop5: detected capacity change from 0 to 512 [ 204.478513][T14020] EXT4-fs: Ignoring removed nobh option [ 204.495242][T14020] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #16: comm syz.5.3411: corrupted inode contents [ 204.515621][T14020] EXT4-fs (loop5): Remounting filesystem read-only [ 204.522550][T14020] EXT4-fs (loop5): 1 truncate cleaned up [ 204.528689][T14020] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 204.536923][ T4231] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 204.547647][ T4231] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 204.558424][ T4231] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 204.578303][T14026] loop6: detected capacity change from 0 to 512 [ 204.586353][T14026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.615320][T14026] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.627636][T14026] netlink: 'syz.6.3413': attribute type 10 has an invalid length. [ 204.776924][T14043] loop9: detected capacity change from 0 to 512 [ 204.784595][T14043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.814522][T14043] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.087553][ T10] kernel write not supported for file /181/attr/exec (pid: 10 comm: kworker/0:1) [ 205.104367][T14054] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.176299][T14056] loop9: detected capacity change from 0 to 512 [ 205.190223][T14056] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.212771][T14056] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.251005][T14058] loop8: detected capacity change from 0 to 512 [ 205.259048][T14058] EXT4-fs: Ignoring removed nobh option [ 205.285461][T14058] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3425: corrupted inode contents [ 205.297865][T14058] EXT4-fs (loop8): Remounting filesystem read-only [ 205.304739][T14058] EXT4-fs (loop8): 1 truncate cleaned up [ 205.310968][T14058] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 205.318036][ T1087] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.328639][ T1087] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.339602][ T1087] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 205.405577][T14071] loop9: detected capacity change from 0 to 512 [ 205.414212][T14071] EXT4-fs: Ignoring removed nobh option [ 205.430506][ T25] kernel write not supported for file /343/attr/exec (pid: 25 comm: kworker/1:0) [ 205.441563][T14071] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3428: corrupted inode contents [ 205.455450][T14071] EXT4-fs (loop9): Remounting filesystem read-only [ 205.462188][T14071] EXT4-fs (loop9): 1 truncate cleaned up [ 205.463399][T14085] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 205.468321][T14071] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 205.486658][ T37] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.497405][ T37] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.508847][ T37] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 205.741177][T14101] chnl_net:caif_netlink_parms(): no params data found [ 205.808561][T14101] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.815698][T14101] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.823308][T14101] bridge_slave_0: entered allmulticast mode [ 205.829778][T14101] bridge_slave_0: entered promiscuous mode [ 205.836933][T14101] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.844094][T14101] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.851436][T14101] bridge_slave_1: entered allmulticast mode [ 205.858628][T14122] loop6: detected capacity change from 0 to 512 [ 205.863175][T14101] bridge_slave_1: entered promiscuous mode [ 205.865276][T14122] EXT4-fs: Ignoring removed nobh option [ 205.885019][ T37] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.902893][T14101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.913811][T14122] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #16: comm syz.6.3441: corrupted inode contents [ 205.927578][T14101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.939491][ T37] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.957280][T14122] EXT4-fs (loop6): Remounting filesystem read-only [ 205.970574][T14122] EXT4-fs (loop6): 1 truncate cleaned up [ 205.981137][ T1087] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 205.991936][ T1087] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 206.005241][ T37] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.022843][T14122] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 206.031527][T14101] team0: Port device team_slave_0 added [ 206.038325][T14101] team0: Port device team_slave_1 added [ 206.050971][ T1087] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 206.075062][ T37] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.107214][T14101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.114237][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.140410][T14101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.158592][T14101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.165610][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.191630][T14101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.231900][T14101] hsr_slave_0: entered promiscuous mode [ 206.238072][T14101] hsr_slave_1: entered promiscuous mode [ 206.260050][T14101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.268087][T14101] Cannot create hsr debugfs directory [ 206.284549][ T3374] kernel write not supported for file /103/attr/exec (pid: 3374 comm: kworker/1:3) [ 206.305659][ T37] bridge_slave_1: left allmulticast mode [ 206.311412][ T37] bridge_slave_1: left promiscuous mode [ 206.317297][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.325427][ T37] bridge_slave_0: left allmulticast mode [ 206.331204][ T37] bridge_slave_0: left promiscuous mode [ 206.336962][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.424372][ T37] team0: Port device geneve1 removed [ 206.464573][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.474669][ T37] bond0 (unregistering): Released all slaves [ 206.484684][T14133] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.503023][T14140] netem: change failed [ 206.535232][ T37] tipc: Left network mode [ 206.572218][ T37] hsr_slave_0: left promiscuous mode [ 206.584811][ T37] hsr_slave_1: left promiscuous mode [ 206.603006][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.610872][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.623936][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.631498][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.651179][ T37] veth1_macvtap: left promiscuous mode [ 206.656871][ T37] veth0_macvtap: left promiscuous mode [ 206.671288][ T37] veth1_vlan: left promiscuous mode [ 206.676670][ T37] veth0_vlan: left promiscuous mode [ 206.714926][T14147] loop4: detected capacity change from 0 to 8192 [ 206.911274][ T37] team0 (unregistering): Port device team_slave_1 removed [ 206.932066][ T37] team0 (unregistering): Port device team_slave_0 removed [ 206.973283][T14155] loop5: detected capacity change from 0 to 8192 [ 206.996381][T14159] loop4: detected capacity change from 0 to 512 [ 207.007766][T14161] __nla_validate_parse: 5 callbacks suppressed [ 207.007812][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3456'. [ 207.009260][T14159] EXT4-fs: Ignoring removed nobh option [ 207.014137][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3456'. [ 207.066923][T14159] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3455: corrupted inode contents [ 207.102608][T14159] EXT4-fs (loop4): Remounting filesystem read-only [ 207.123098][T14159] EXT4-fs (loop4): 1 truncate cleaned up [ 207.131418][T14159] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 207.140959][T14165] netlink: 'syz.6.3457': attribute type 21 has an invalid length. [ 207.148825][T14165] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3457'. [ 207.158280][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 207.168936][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 207.181973][ T51] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 207.210521][T14169] netem: change failed [ 207.285603][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.293178][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.300652][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.316785][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.324285][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.331064][T14101] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 207.331770][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.345898][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.345911][T14167] loop9: detected capacity change from 0 to 512 [ 207.353490][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.367223][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.367520][T14167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.374744][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.390718][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.398245][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.403093][T14167] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.405688][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.423709][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.431205][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.436088][T14101] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 207.438786][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.452919][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.460357][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.467928][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.475341][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.483279][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.490692][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.498108][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.505586][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.513043][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.520449][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.527853][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.535278][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 207.543375][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 207.547136][T14101] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 207.576128][T14101] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 207.646985][T14101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.666254][T14101] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.674721][T14195] netlink: 'syz.9.3469': attribute type 21 has an invalid length. [ 207.675728][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3468'. [ 207.691050][T14195] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3469'. [ 207.691523][T14198] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3468'. [ 207.739018][ T4231] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.746140][ T4231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.756011][T14200] loop4: detected capacity change from 0 to 8192 [ 207.792249][T14203] netem: change failed [ 207.797302][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.804478][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.849049][ T30] kauditd_printk_skb: 422 callbacks suppressed [ 207.849163][ T30] audit: type=1326 audit(1742262680.331:23033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 207.879539][ T30] audit: type=1326 audit(1742262680.331:23034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 207.906730][T14101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.949564][ T30] audit: type=1326 audit(1742262680.391:23035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 207.973353][ T30] audit: type=1326 audit(1742262680.391:23036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 207.997056][ T30] audit: type=1326 audit(1742262680.391:23037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 208.020840][ T30] audit: type=1326 audit(1742262680.401:23038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 208.044562][ T30] audit: type=1326 audit(1742262680.401:23039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 208.068353][ T30] audit: type=1326 audit(1742262680.401:23040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 208.092000][ T30] audit: type=1326 audit(1742262680.401:23041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 208.115648][ T30] audit: type=1326 audit(1742262680.401:23042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.5.3472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 208.161855][T14210] loop5: detected capacity change from 0 to 512 [ 208.168440][T14210] EXT4-fs: Ignoring removed nobh option [ 208.238038][T14219] loop9: detected capacity change from 0 to 512 [ 208.245112][T14219] EXT4-fs: Ignoring removed nobh option [ 208.256899][T14210] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #16: comm syz.5.3472: corrupted inode contents [ 208.286345][T14219] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3475: corrupted inode contents [ 208.308186][T14210] EXT4-fs (loop5): Remounting filesystem read-only [ 208.323007][T14219] EXT4-fs (loop9): Remounting filesystem read-only [ 208.339075][T14101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.355186][T14210] EXT4-fs (loop5): 1 truncate cleaned up [ 208.361362][T14210] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 208.368041][T14219] EXT4-fs (loop9): 1 truncate cleaned up [ 208.379864][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 208.381769][T14219] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 208.390744][ T37] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 208.450869][ T37] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 208.472534][T14237] 9pnet_fd: Insufficient options for proto=fd [ 208.479553][ T37] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 208.490243][ T37] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 208.536873][T14101] veth0_vlan: entered promiscuous mode [ 208.547964][T14101] veth1_vlan: entered promiscuous mode [ 208.557351][ T37] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 208.567593][T14101] veth0_macvtap: entered promiscuous mode [ 208.589061][T14101] veth1_macvtap: entered promiscuous mode [ 208.606749][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.617312][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.627232][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.637766][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.647662][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.658119][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.667974][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.678488][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.688435][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.698937][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.712091][T14101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.732554][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.743160][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.753122][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.763595][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.773515][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.784086][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.794004][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.794025][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.794042][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.794058][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.795533][T14101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.796830][T14101] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.852318][T14101] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.852719][T14251] FAULT_INJECTION: forcing a failure. [ 208.852719][T14251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.861042][T14101] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.861156][T14101] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.874881][T14251] CPU: 1 UID: 0 PID: 14251 Comm: syz.9.3483 Not tainted 6.14.0-rc7-syzkaller #0 [ 208.874907][T14251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.874919][T14251] Call Trace: [ 208.874926][T14251] [ 208.874934][T14251] dump_stack_lvl+0xf2/0x150 [ 208.875052][T14251] dump_stack+0x15/0x1a [ 208.875080][T14251] should_fail_ex+0x24a/0x260 [ 208.875121][T14251] should_fail+0xb/0x10 [ 208.875156][T14251] should_fail_usercopy+0x1a/0x20 [ 208.875228][T14251] _copy_from_iter+0xd5/0xd00 [ 208.875268][T14251] ? kmalloc_reserve+0x16e/0x190 [ 208.875304][T14251] ? __build_skb_around+0x196/0x1f0 [ 208.875346][T14251] ? __alloc_skb+0x21f/0x310 [ 208.875372][T14251] ? __virt_addr_valid+0x1ed/0x250 [ 208.875404][T14251] ? __check_object_size+0x364/0x520 [ 208.875436][T14251] netlink_sendmsg+0x460/0x6e0 [ 208.875485][T14251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.875586][T14251] __sock_sendmsg+0x140/0x180 [ 208.875685][T14251] ____sys_sendmsg+0x326/0x4b0 [ 208.875791][T14251] __sys_sendmsg+0x19d/0x230 [ 208.875841][T14251] __x64_sys_sendmsg+0x46/0x50 [ 208.875875][T14251] x64_sys_call+0x2734/0x2dc0 [ 208.875905][T14251] do_syscall_64+0xc9/0x1c0 [ 208.876010][T14251] ? clear_bhb_loop+0x55/0xb0 [ 208.876045][T14251] ? clear_bhb_loop+0x55/0xb0 [ 208.876146][T14251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.876181][T14251] RIP: 0033:0x7efff174d169 [ 208.876200][T14251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.876224][T14251] RSP: 002b:00007effefdb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.876313][T14251] RAX: ffffffffffffffda RBX: 00007efff1965fa0 RCX: 00007efff174d169 [ 208.876329][T14251] RDX: 0000000020000000 RSI: 0000400000000200 RDI: 0000000000000008 [ 208.876345][T14251] RBP: 00007effefdb1090 R08: 0000000000000000 R09: 0000000000000000 [ 208.876361][T14251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.876376][T14251] R13: 0000000000000000 R14: 00007efff1965fa0 R15: 00007fff38ae78c8 [ 208.876400][T14251] [ 209.163421][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3487'. [ 209.172461][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3487'. [ 209.266414][T14262] loop8: detected capacity change from 0 to 512 [ 209.293560][T14262] EXT4-fs: Ignoring removed nobh option [ 209.345061][T14262] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3438: corrupted inode contents [ 209.408300][T14262] EXT4-fs (loop8): Remounting filesystem read-only [ 209.435280][T14262] EXT4-fs (loop8): 1 truncate cleaned up [ 209.441592][T14262] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 209.460990][ T37] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.471677][ T37] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 209.493414][ T37] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 209.517017][T14280] loop5: detected capacity change from 0 to 512 [ 209.532329][T14280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.579872][T14280] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.696908][T14289] netem: change failed [ 210.023584][T14304] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3501'. [ 210.087922][T14306] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3502'. [ 210.191291][ T1038] kernel write not supported for file /231/attr/exec (pid: 1038 comm: kworker/0:2) [ 210.262382][T14320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.404099][T14341] netem: change failed [ 210.448381][T14346] loop8: detected capacity change from 0 to 512 [ 210.457003][T14346] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.547259][ T36] kernel write not supported for file /204/attr/exec (pid: 36 comm: kworker/1:1) [ 210.562296][T14358] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 210.582264][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.589739][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.597327][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.608196][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.615670][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.623140][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.630560][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.638001][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.645480][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.652917][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.660397][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.667829][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.675308][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.682752][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.691435][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.698910][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.706469][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.710553][T14364] loop4: detected capacity change from 0 to 512 [ 210.713979][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.722545][T14364] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 210.727607][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.727635][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.727659][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.759863][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.767882][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.775379][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.782807][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.790250][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.797688][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.803383][T14364] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3525: invalid indirect mapped block 83886080 (level 1) [ 210.805188][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 210.823996][T14364] EXT4-fs (loop4): Remounting filesystem read-only [ 210.833653][ T36] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 210.838944][T14364] EXT4-fs (loop4): 1 orphan inode deleted [ 210.849227][T14364] EXT4-fs (loop4): 1 truncate cleaned up [ 210.855714][T14364] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 210.925364][T14371] loop5: detected capacity change from 0 to 512 [ 210.933606][T14371] EXT4-fs: Ignoring removed nobh option [ 210.943676][T14371] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #16: comm syz.5.3527: corrupted inode contents [ 210.957379][T14371] EXT4-fs (loop5): Remounting filesystem read-only [ 210.964627][T14375] loop4: detected capacity change from 0 to 512 [ 210.965193][T14371] EXT4-fs (loop5): 1 truncate cleaned up [ 210.971629][T14375] EXT4-fs: Ignoring removed nobh option [ 210.978646][T14371] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 210.982605][ T1089] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 210.999415][ T1089] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.010056][ T1089] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 211.013783][T14375] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3529: corrupted inode contents [ 211.033836][T14375] EXT4-fs (loop4): Remounting filesystem read-only [ 211.040485][T14375] EXT4-fs (loop4): 1 truncate cleaned up [ 211.046766][T14375] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 211.055327][ T1087] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.065995][ T1087] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.078760][ T1087] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 211.185080][T14388] loop4: detected capacity change from 0 to 512 [ 211.193137][T14388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.214293][T14388] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.226346][T14388] netlink: 'syz.4.3533': attribute type 10 has an invalid length. [ 211.383052][T14403] netlink: 'syz.9.3538': attribute type 21 has an invalid length. [ 211.437777][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.445331][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.452836][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.461856][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.469291][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.476952][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.484514][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.492107][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.499611][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.507113][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.514626][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.522077][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.529540][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.537012][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.544517][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.552250][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.559712][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.567340][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.574796][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.582264][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.589669][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.597095][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.604584][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.612006][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.619403][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.626852][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.634298][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.641765][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 211.650431][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 211.812208][T14413] loop9: detected capacity change from 0 to 512 [ 211.820633][T14413] EXT4-fs: Ignoring removed nobh option [ 211.847395][T14413] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3541: corrupted inode contents [ 211.862417][T14413] EXT4-fs (loop9): Remounting filesystem read-only [ 211.869180][T14413] EXT4-fs (loop9): 1 truncate cleaned up [ 211.875520][T14413] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 211.883298][ T1089] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.894045][ T1089] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 211.904708][ T1089] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 211.956176][T14426] FAULT_INJECTION: forcing a failure. [ 211.956176][T14426] name failslab, interval 1, probability 0, space 0, times 0 [ 211.968934][T14426] CPU: 1 UID: 0 PID: 14426 Comm: syz.9.3544 Not tainted 6.14.0-rc7-syzkaller #0 [ 211.968972][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.968984][T14426] Call Trace: [ 211.968992][T14426] [ 211.969000][T14426] dump_stack_lvl+0xf2/0x150 [ 211.969036][T14426] dump_stack+0x15/0x1a [ 211.969063][T14426] should_fail_ex+0x24a/0x260 [ 211.969107][T14426] should_failslab+0x8f/0xb0 [ 211.969145][T14426] kmem_cache_alloc_node_noprof+0x59/0x320 [ 211.969174][T14426] ? __alloc_skb+0x10b/0x310 [ 211.969221][T14426] __alloc_skb+0x10b/0x310 [ 211.969249][T14426] netlink_alloc_large_skb+0xad/0xe0 [ 211.969286][T14426] netlink_sendmsg+0x3b4/0x6e0 [ 211.969359][T14426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.969415][T14426] __sock_sendmsg+0x140/0x180 [ 211.969448][T14426] ____sys_sendmsg+0x326/0x4b0 [ 211.969480][T14426] __sys_sendmsg+0x19d/0x230 [ 211.969586][T14426] __x64_sys_sendmsg+0x46/0x50 [ 211.969619][T14426] x64_sys_call+0x2734/0x2dc0 [ 211.969651][T14426] do_syscall_64+0xc9/0x1c0 [ 211.969758][T14426] ? clear_bhb_loop+0x55/0xb0 [ 211.969817][T14426] ? clear_bhb_loop+0x55/0xb0 [ 211.969847][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.969889][T14426] RIP: 0033:0x7efff174d169 [ 211.969909][T14426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.969931][T14426] RSP: 002b:00007effefdb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.969953][T14426] RAX: ffffffffffffffda RBX: 00007efff1965fa0 RCX: 00007efff174d169 [ 211.969968][T14426] RDX: 0000000020040054 RSI: 0000400000006040 RDI: 0000000000000004 [ 211.969983][T14426] RBP: 00007effefdb1090 R08: 0000000000000000 R09: 0000000000000000 [ 211.969998][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.970014][T14426] R13: 0000000000000000 R14: 00007efff1965fa0 R15: 00007fff38ae78c8 [ 211.970099][T14426] [ 212.230744][T14434] 9pnet_fd: Insufficient options for proto=fd [ 212.254320][T14438] netem: change failed [ 212.267031][T14430] loop4: detected capacity change from 0 to 512 [ 212.274355][T14430] EXT4-fs: Ignoring removed nobh option [ 212.299206][T14444] loop9: detected capacity change from 0 to 512 [ 212.307505][T14444] EXT4-fs: Ignoring removed nobh option [ 212.309112][T14430] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3546: corrupted inode contents [ 212.327887][T14430] EXT4-fs (loop4): Remounting filesystem read-only [ 212.334777][T14430] EXT4-fs (loop4): 1 truncate cleaned up [ 212.342948][T14430] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 212.350088][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.360681][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.373883][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.388207][T14444] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3549: corrupted inode contents [ 212.400686][T14441] loop5: detected capacity change from 0 to 647 [ 212.407840][T14444] EXT4-fs (loop9): Remounting filesystem read-only [ 212.432694][T14444] EXT4-fs (loop9): 1 truncate cleaned up [ 212.444195][T14444] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 212.451106][ T37] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.461668][ T37] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.479078][ T37] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.577462][T14458] loop5: detected capacity change from 0 to 512 [ 212.584467][T14458] EXT4-fs: Ignoring removed nobh option [ 212.605939][T14458] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #16: comm syz.5.3554: corrupted inode contents [ 212.618470][T14458] EXT4-fs (loop5): Remounting filesystem read-only [ 212.625144][T14458] EXT4-fs (loop5): 1 truncate cleaned up [ 212.631359][T14458] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 212.638414][ T1087] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.649176][ T1087] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.661608][ T1087] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.777021][T14473] loop5: detected capacity change from 0 to 512 [ 212.786341][T14473] EXT4-fs: Ignoring removed nobh option [ 212.815566][T14473] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #16: comm syz.5.3559: corrupted inode contents [ 212.828648][T14473] EXT4-fs (loop5): Remounting filesystem read-only [ 212.839717][T14473] EXT4-fs (loop5): 1 truncate cleaned up [ 212.846610][T14473] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 212.853354][ T29] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.864018][ T29] __quota_error: 550 callbacks suppressed [ 212.864034][ T29] Quota error (device loop5): write_blk: dquota write failed [ 212.877169][ T29] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 212.887205][ T29] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 212.897770][ T29] Quota error (device loop5): write_blk: dquota write failed [ 212.905197][ T29] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 212.915202][ T29] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 212.925336][ T29] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 212.934340][ T29] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 212.948919][ T30] audit: type=1326 audit(1742262685.431:23539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4de128bad0 code=0x7ffc0000 [ 212.978781][ T30] audit: type=1326 audit(1742262685.461:23540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4de128cd6b code=0x7ffc0000 [ 213.002461][ T30] audit: type=1326 audit(1742262685.461:23541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4de128bdca code=0x7ffc0000 [ 213.026182][ T30] audit: type=1326 audit(1742262685.461:23542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14472 comm="syz.5.3559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4de128d169 code=0x7ffc0000 [ 213.068740][T14478] FAULT_INJECTION: forcing a failure. [ 213.068740][T14478] name failslab, interval 1, probability 0, space 0, times 0 [ 213.081440][T14478] CPU: 0 UID: 0 PID: 14478 Comm: syz.5.3560 Not tainted 6.14.0-rc7-syzkaller #0 [ 213.081465][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.081505][T14478] Call Trace: [ 213.081513][T14478] [ 213.081522][T14478] dump_stack_lvl+0xf2/0x150 [ 213.081621][T14478] dump_stack+0x15/0x1a [ 213.081643][T14478] should_fail_ex+0x24a/0x260 [ 213.081752][T14478] should_failslab+0x8f/0xb0 [ 213.081786][T14478] kmem_cache_alloc_noprof+0x52/0x320 [ 213.081814][T14478] ? skb_clone+0x154/0x1f0 [ 213.081876][T14478] skb_clone+0x154/0x1f0 [ 213.081930][T14478] ip_mc_output+0x115/0x350 [ 213.081956][T14478] ? __pfx_dst_output+0x10/0x10 [ 213.081981][T14478] ? __pfx_ip_mc_output+0x10/0x10 [ 213.082004][T14478] ip_send_skb+0x12f/0x140 [ 213.082033][T14478] udp_send_skb+0x6af/0x9f0 [ 213.082105][T14478] udp_sendmsg+0x12fa/0x1390 [ 213.082151][T14478] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 213.082222][T14478] ? __pfx_udp_sendmsg+0x10/0x10 [ 213.082332][T14478] inet_sendmsg+0xaf/0xd0 [ 213.082370][T14478] __sock_sendmsg+0x102/0x180 [ 213.082454][T14478] ____sys_sendmsg+0x326/0x4b0 [ 213.082524][T14478] __sys_sendmmsg+0x227/0x4b0 [ 213.082584][T14478] __x64_sys_sendmmsg+0x57/0x70 [ 213.082618][T14478] x64_sys_call+0x29aa/0x2dc0 [ 213.082651][T14478] do_syscall_64+0xc9/0x1c0 [ 213.082741][T14478] ? clear_bhb_loop+0x55/0xb0 [ 213.082775][T14478] ? clear_bhb_loop+0x55/0xb0 [ 213.082837][T14478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.082867][T14478] RIP: 0033:0x7f4de128d169 [ 213.082882][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.082904][T14478] RSP: 002b:00007f4ddf8f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.082933][T14478] RAX: ffffffffffffffda RBX: 00007f4de14a5fa0 RCX: 00007f4de128d169 [ 213.082983][T14478] RDX: 000000000800001d RSI: 0000400000007fc0 RDI: 0000000000000003 [ 213.082996][T14478] RBP: 00007f4ddf8f7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.083010][T14478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.083025][T14478] R13: 0000000000000000 R14: 00007f4de14a5fa0 R15: 00007ffff16769e8 [ 213.083088][T14478] [ 213.087482][T14480] 9pnet_fd: Insufficient options for proto=fd [ 213.435622][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.443312][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.450747][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452588][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452623][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452656][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452759][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452791][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452822][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452854][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452885][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452912][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.452942][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453012][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453051][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453077][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453106][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453226][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453346][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453371][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453480][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453509][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453535][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453558][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453602][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453688][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453713][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.453742][ T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 213.454161][ T25] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 213.502586][T14490] loop8: detected capacity change from 0 to 512 [ 213.502852][T14490] EXT4-fs: Ignoring removed nobh option [ 213.527822][T14490] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3562: corrupted inode contents [ 213.528050][T14490] EXT4-fs (loop8): Remounting filesystem read-only [ 213.528144][T14490] EXT4-fs (loop8): 1 truncate cleaned up [ 213.528539][T14490] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 213.529076][ T1089] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.529098][ T1089] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.529128][ T1089] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 213.552703][T14498] loop5: detected capacity change from 0 to 512 [ 213.607972][T14502] loop4: detected capacity change from 0 to 128 [ 213.611560][T14498] EXT4-fs: Ignoring removed nobh option [ 213.710424][T14499] syz.4.3567: attempt to access beyond end of device [ 213.710424][T14499] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 213.816166][T14498] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #16: comm syz.5.3566: corrupted inode contents [ 213.848879][T14498] EXT4-fs (loop5): Remounting filesystem read-only [ 213.857708][T14498] EXT4-fs (loop5): 1 truncate cleaned up [ 213.863646][T14515] loop8: detected capacity change from 0 to 512 [ 213.863847][T14498] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 213.877034][ T29] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.887689][ T29] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.902266][T14515] EXT4-fs: Ignoring removed nobh option [ 213.909162][T14506] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.910114][ T29] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 213.933539][T14499] syz.4.3567: attempt to access beyond end of device [ 213.933539][T14499] loop4: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 213.963627][T14515] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3569: corrupted inode contents [ 213.987907][T14526] 9pnet_fd: Insufficient options for proto=fd [ 213.992595][T14515] EXT4-fs (loop8): Remounting filesystem read-only [ 214.008624][T14506] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.009706][T14515] EXT4-fs (loop8): 1 truncate cleaned up [ 214.025878][T14515] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 214.043872][ T1087] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 214.054672][ T1087] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 214.071097][T14528] netem: change failed [ 214.075317][ T1087] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 214.123730][T14535] __nla_validate_parse: 6 callbacks suppressed [ 214.123749][T14535] netlink: 1196 bytes leftover after parsing attributes in process `syz.9.3576'. [ 214.145310][T14506] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.165485][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3577'. [ 214.174517][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3577'. [ 214.203090][T14506] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.234162][T14546] loop8: detected capacity change from 0 to 128 [ 214.259260][T14506] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.269783][T14546] syz.8.3580: attempt to access beyond end of device [ 214.269783][T14546] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 214.275423][T14506] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.297384][T14506] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.317984][T14546] syz.8.3580: attempt to access beyond end of device [ 214.317984][T14546] loop8: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 214.335704][T14506] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.443689][T14553] loop6: detected capacity change from 0 to 1024 [ 214.457314][T14553] EXT4-fs: Ignoring removed mblk_io_submit option [ 214.465203][T14553] EXT4-fs: Ignoring removed nobh option [ 214.470821][T14553] EXT4-fs: Ignoring removed bh option [ 214.477595][T14555] loop8: detected capacity change from 0 to 164 [ 214.493249][T14555] Unsupported NM flag settings (8) [ 214.511510][T14553] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 214.564732][T14553] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm +}[@: Allocating blocks 497-513 which overlap fs metadata [ 214.589212][T14553] EXT4-fs (loop6): pa ffff888106942af0: logic 256, phys. 385, len 8 [ 214.597410][T14553] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 214.625500][T14563] loop8: detected capacity change from 0 to 128 [ 214.676788][T14563] syz.8.3585: attempt to access beyond end of device [ 214.676788][T14563] loop8: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 214.710287][T14563] syz.8.3585: attempt to access beyond end of device [ 214.710287][T14563] loop8: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 214.738538][T14565] netem: change failed [ 214.830698][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3587'. [ 214.862841][T14576] netlink: 'syz.6.3589': attribute type 21 has an invalid length. [ 214.870830][T14576] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3589'. [ 214.892696][T14570] loop8: detected capacity change from 0 to 512 [ 214.899785][T14570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.920056][T14582] 9pnet_fd: Insufficient options for proto=fd [ 214.927321][T14570] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.943854][T14578] loop6: detected capacity change from 0 to 512 [ 214.960795][T14578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.974347][T14587] loop5: detected capacity change from 0 to 128 [ 215.005725][ T9] kernel write not supported for file /60/attr/exec (pid: 9 comm: kworker/0:0) [ 215.016112][T14578] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.042238][T14592] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 215.051291][T14592] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 215.080521][T14578] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.112347][T14587] syz.5.3592: attempt to access beyond end of device [ 215.112347][T14587] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 215.155312][T14597] netlink: 'syz.6.3591': attribute type 10 has an invalid length. [ 215.163363][T14597] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3591'. [ 215.174780][T14587] syz.5.3592: attempt to access beyond end of device [ 215.174780][T14587] loop5: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 215.205867][T14599] netem: change failed [ 215.252588][T14578] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.293726][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3600'. [ 215.307156][T14601] loop9: detected capacity change from 0 to 512 [ 215.314518][T14601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.336673][T14601] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.371467][T14578] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.442247][T14618] loop9: detected capacity change from 0 to 512 [ 215.449578][T14618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.502116][T14578] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.516660][T14618] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.529065][T14618] netlink: 'syz.9.3603': attribute type 10 has an invalid length. [ 215.536992][T14618] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3603'. [ 216.022921][T14630] 9pnet_fd: Insufficient options for proto=fd [ 216.070274][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3607'. [ 216.412575][T14647] loop4: detected capacity change from 0 to 512 [ 216.419249][T14647] EXT4-fs: Ignoring removed nobh option [ 216.433865][T14647] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3611: corrupted inode contents [ 216.446125][T14647] EXT4-fs (loop4): Remounting filesystem read-only [ 216.453020][T14647] EXT4-fs (loop4): 1 truncate cleaned up [ 216.459300][T14647] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 216.466926][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 216.477598][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 216.488387][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 216.503654][T14653] loop9: detected capacity change from 0 to 128 [ 216.534853][T14653] syz.9.3612: attempt to access beyond end of device [ 216.534853][T14653] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 216.572670][T14653] syz.9.3612: attempt to access beyond end of device [ 216.572670][T14653] loop9: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 216.595414][T14651] loop5: detected capacity change from 0 to 512 [ 216.605772][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.613298][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.620712][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.630497][T14651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 216.630722][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.646615][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.654337][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.658119][T14664] loop9: detected capacity change from 0 to 128 [ 216.661781][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.676152][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.683836][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.691316][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.698737][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.706714][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.714190][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.721789][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.729750][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.737238][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.744723][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.752160][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.759595][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.763890][T14651] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.767050][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.785207][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.792755][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.800142][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.807598][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.815004][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.822459][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.829842][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.837312][ T9] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 216.842618][T14422] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 216.845537][ T9] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 217.016969][T14682] loop4: detected capacity change from 0 to 512 [ 217.031263][T14682] EXT4-fs: Ignoring removed nobh option [ 217.052040][T14682] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3621: corrupted inode contents [ 217.073227][T14682] EXT4-fs (loop4): Remounting filesystem read-only [ 217.080122][T14682] EXT4-fs (loop4): 1 truncate cleaned up [ 217.090442][T14682] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 217.097929][ T1087] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 217.109013][ T1087] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 217.122272][ T1087] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 217.465834][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.473552][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.481561][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.493520][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.501132][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.508541][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.516094][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.524149][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.531777][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.539249][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.546706][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.554171][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.561680][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.561954][T14704] loop4: detected capacity change from 0 to 512 [ 217.569083][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.569355][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.590240][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.593725][T14704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.597717][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.613574][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.620999][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.628436][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.635891][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.643324][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.643453][T14704] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.650705][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.650735][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.676059][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.683491][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.690962][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.698439][ T25] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 217.711094][ T25] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 217.748105][T14709] loop9: detected capacity change from 0 to 128 [ 217.871772][ T30] kauditd_printk_skb: 443 callbacks suppressed [ 217.871790][ T30] audit: type=1326 audit(1742262690.361:23956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 217.910383][ T30] audit: type=1326 audit(1742262690.361:23957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 217.934170][ T30] audit: type=1326 audit(1742262690.361:23958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 217.958056][ T30] audit: type=1326 audit(1742262690.361:23959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 217.982045][ T30] audit: type=1326 audit(1742262690.361:23960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 218.005726][ T30] audit: type=1326 audit(1742262690.361:23961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 218.029394][ T30] audit: type=1326 audit(1742262690.361:23962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 218.053011][ T30] audit: type=1326 audit(1742262690.361:23963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 218.076775][ T30] audit: type=1326 audit(1742262690.371:23964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 218.100402][ T30] audit: type=1326 audit(1742262690.381:23965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14708 comm="syz.9.3631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff174d169 code=0x7ffc0000 [ 218.138478][T14718] netem: change failed [ 218.275130][T14723] loop4: detected capacity change from 0 to 512 [ 218.281914][T14723] EXT4-fs: Ignoring removed nobh option [ 218.337963][T14723] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3636: corrupted inode contents [ 218.357486][T14723] EXT4-fs (loop4): Remounting filesystem read-only [ 218.364860][T14723] EXT4-fs (loop4): 1 truncate cleaned up [ 218.372542][T14723] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 218.381501][ T1089] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.392167][ T1089] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.410068][T14723] EXT4-fs unmount: 83 callbacks suppressed [ 218.410083][T14723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.416247][ T1089] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.515038][T14730] loop9: detected capacity change from 0 to 512 [ 218.522151][T14730] EXT4-fs: Ignoring removed nobh option [ 218.544788][T14730] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #16: comm syz.9.3639: corrupted inode contents [ 218.590135][T14730] EXT4-fs (loop9): Remounting filesystem read-only [ 218.603090][T14730] EXT4-fs (loop9): 1 truncate cleaned up [ 218.609284][T14730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.621992][ T29] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.632687][ T29] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.651508][T14730] SELinux: (dev loop9, type ext4) getxattr errno 5 [ 218.658245][ T29] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.674853][T14730] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.781439][T14578] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.796131][T14578] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.810318][T14578] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.827151][T14578] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.858367][T13118] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.877916][T14744] loop4: detected capacity change from 0 to 512 [ 218.886579][T14744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.896039][T14747] loop9: detected capacity change from 0 to 512 [ 218.907435][T14747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 218.931333][T14744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.946256][T14744] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.958183][T14747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.982178][T14747] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.995126][T14744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.049241][T14747] netlink: 'syz.9.3645': attribute type 10 has an invalid length. [ 219.071456][T12600] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.096679][T14761] loop6: detected capacity change from 0 to 128 [ 219.187823][T14762] bio_check_eod: 4 callbacks suppressed [ 219.187840][T14762] syz.6.3650: attempt to access beyond end of device [ 219.187840][T14762] loop6: rw=2049, sector=145, nr_sectors = 816 limit=128 [ 219.374334][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.381837][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.389258][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.401961][T14769] loop6: detected capacity change from 0 to 512 [ 219.409182][T14769] EXT4-fs: Ignoring removed nobh option [ 219.415130][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.422713][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.430140][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.437670][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.445227][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.452700][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.460123][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.467561][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.475079][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.481642][T14783] __nla_validate_parse: 7 callbacks suppressed [ 219.481663][T14783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3653'. [ 219.482512][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.482537][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.512667][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.520108][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.526483][T14769] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #16: comm syz.6.3652: corrupted inode contents [ 219.527562][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.546837][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.554349][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.561812][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.569234][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.576758][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.584248][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.591744][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.599154][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.606601][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.614049][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.621521][ T25] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 219.662935][T14769] EXT4-fs (loop6): Remounting filesystem read-only [ 219.669802][T14769] EXT4-fs (loop6): 1 truncate cleaned up [ 219.676055][T14769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.688675][T14769] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 219.688982][ T29] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 219.697105][T14769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.705789][ T29] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 219.725850][ T29] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 219.737554][ T25] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 219.775289][T14786] loop4: detected capacity change from 0 to 512 [ 219.798256][T14786] EXT4-fs: Ignoring removed nobh option [ 219.861763][T14786] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #16: comm syz.4.3655: corrupted inode contents [ 219.878534][T14786] EXT4-fs (loop4): Remounting filesystem read-only [ 219.885831][T14786] EXT4-fs (loop4): 1 truncate cleaned up [ 219.893755][T14786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.906510][ T29] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 219.907590][T14786] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 219.917125][ T29] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 219.936574][T14786] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.955318][T14795] loop8: detected capacity change from 0 to 512 [ 219.962642][T14795] EXT4-fs: Ignoring removed nobh option [ 219.969186][ T29] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 220.044680][T14802] loop5: detected capacity change from 0 to 512 [ 220.078344][T14795] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #16: comm syz.8.3657: corrupted inode contents [ 220.090248][T14802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 220.099053][T14795] EXT4-fs (loop8): Remounting filesystem read-only [ 220.106275][T14795] EXT4-fs (loop8): 1 truncate cleaned up [ 220.112456][T14795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.125214][ T29] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.132345][T14812] loop4: detected capacity change from 0 to 128 [ 220.135845][ T29] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.152961][T14795] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 220.159552][ T29] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 220.170653][T14795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.199366][T14802] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.240009][T14802] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.267092][ T1089] kworker/u8:6: attempt to access beyond end of device [ 220.267092][ T1089] loop4: rw=2049, sector=145, nr_sectors = 736 limit=128 [ 220.282114][T14802] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.311302][T14812] syz.4.3663: attempt to access beyond end of device [ 220.311302][T14812] loop4: rw=2049, sector=881, nr_sectors = 96 limit=128 [ 220.381828][T14812] syz.4.3663: attempt to access beyond end of device [ 220.381828][T14812] loop4: rw=524288, sector=145, nr_sectors = 832 limit=128 [ 220.415316][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.422800][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.430294][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.437732][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.445262][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.452740][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.460158][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.467617][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.475103][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.482637][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.490209][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.497642][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.505162][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.512958][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.520369][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.528061][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.535516][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.542979][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.550379][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.557907][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.565349][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.572778][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.580279][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.587925][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.595413][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.602876][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.610282][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.617730][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.625174][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.632665][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.640149][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.647590][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.655044][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.662465][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.669880][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.677369][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.684933][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.692438][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.699848][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.707329][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.714892][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.722332][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.729904][ T25] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 220.740698][ T25] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 220.796493][T14835] netlink: 'syz.5.3671': attribute type 21 has an invalid length. [ 220.804444][T14835] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3671'. [ 220.855523][T14827] loop6: detected capacity change from 0 to 512 [ 220.862094][T14839] loop5: detected capacity change from 0 to 128 [ 220.865441][T14827] EXT4-fs: Ignoring removed nobh option [ 220.909443][T14827] EXT4-fs error (device loop6): ext4_do_update_inode:5154: inode #16: comm syz.6.3669: corrupted inode contents [ 220.936247][T14827] EXT4-fs (loop6): Remounting filesystem read-only [ 220.957973][T14827] EXT4-fs (loop6): 1 truncate cleaned up [ 220.977881][ T1087] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 220.988573][ T1087] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 221.012592][T14827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.037022][T14839] syz.5.3674: attempt to access beyond end of device [ 221.037022][T14839] loop5: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 221.084982][T14827] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 221.085783][ T1087] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 221.115053][T14827] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.136355][T14827] ================================================================== [ 221.144486][T14827] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 221.151819][T14827] [ 221.154146][T14827] read-write to 0xffff888237d2ba28 of 8 bytes by task 3287 on cpu 1: [ 221.162223][T14827] __find_get_block+0x42e/0x890 [ 221.167101][T14827] bdev_getblk+0x30/0x3b0 [ 221.171459][T14827] __ext4_get_inode_loc+0x2f7/0x940 [ 221.176693][T14827] ext4_reserve_inode_write+0xb0/0x200 [ 221.182165][T14827] __ext4_mark_inode_dirty+0x8e/0x440 [ 221.187561][T14827] ext4_dirty_inode+0x91/0xb0 [ 221.192255][T14827] __mark_inode_dirty+0x166/0x7e0 [ 221.197337][T14827] file_update_time+0x285/0x2b0 [ 221.202210][T14827] ext4_page_mkwrite+0x19e/0xb70 [ 221.207159][T14827] do_wp_page+0xca1/0x2340 [ 221.211598][T14827] handle_mm_fault+0xc63/0x2ac0 [ 221.216474][T14827] exc_page_fault+0x3b9/0x650 [ 221.221171][T14827] asm_exc_page_fault+0x26/0x30 [ 221.226057][T14827] [ 221.228405][T14827] read to 0xffff888237d2ba28 of 8 bytes by task 14827 on cpu 0: [ 221.236041][T14827] has_bh_in_lru+0x35/0x1f0 [ 221.241290][T14827] smp_call_function_many_cond+0x305/0xbb0 [ 221.247104][T14827] on_each_cpu_cond_mask+0x3c/0x90 [ 221.252252][T14827] invalidate_bh_lrus+0x2a/0x30 [ 221.257121][T14827] blkdev_flush_mapping+0x9b/0x1a0 [ 221.262256][T14827] bdev_release+0x2f9/0x420 [ 221.266778][T14827] blkdev_release+0x15/0x20 [ 221.271323][T14827] __fput+0x2ac/0x640 [ 221.275421][T14827] ____fput+0x1c/0x30 [ 221.279412][T14827] task_work_run+0x13a/0x1a0 [ 221.284025][T14827] syscall_exit_to_user_mode+0xa8/0x120 [ 221.289591][T14827] do_syscall_64+0xd6/0x1c0 [ 221.294116][T14827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.300042][T14827] [ 221.302370][T14827] value changed: 0x0000000000000000 -> 0xffff8881006e5208 [ 221.309478][T14827] [ 221.311806][T14827] Reported by Kernel Concurrency Sanitizer on: [ 221.317958][T14827] CPU: 0 UID: 0 PID: 14827 Comm: syz.6.3669 Not tainted 6.14.0-rc7-syzkaller #0 [ 221.326986][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.337049][T14827] ================================================================== [ 221.359551][T14854] syz.5.3674: attempt to access beyond end of device [ 221.359551][T14854] loop5: rw=524288, sector=145, nr_sectors = 896 limit=128