last executing test programs: 3m31.871104404s ago: executing program 32 (id=731): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[]) 3m27.161811555s ago: executing program 33 (id=801): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r3, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) rmdir(0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 3m21.488279544s ago: executing program 34 (id=871): syz_io_uring_setup(0x601d, &(0x7f00000006c0)={0x0, 0x7758, 0x100, 0x8007, 0x1bf}, &(0x7f0000000300), &(0x7f0000000040)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000003640)='clear_refs\x00') write$tcp_mem(r1, &(0x7f0000004940)={0xfffffffffffffff9, 0x20, 0x7, 0x20, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x912, 0xfffffffffffffffe}, 0x100012, 0x0, 0x1, 0x0, 0x0, 0xb1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) readahead(0xffffffffffffffff, 0x8, 0x8) 3m21.195414213s ago: executing program 6 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 3m20.238200219s ago: executing program 6 (id=892): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000900)={[{@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@noquota}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_clone3(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7472006e733dd7642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x3, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0xa10082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2c1, &(0x7f0000000c00)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) socket$packet(0x11, 0xa, 0x300) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3m19.752912528s ago: executing program 6 (id=894): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480), 0x2, 0x8}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x10, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0xc5, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x3, 0x5, 0x3, 0x2, 0x0, 0xe61b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r3, 0x40284504, &(0x7f0000000000)=""/56) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003040)={0x0, 0x0}, &(0x7f0000000200)=0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0xa10002, &(0x7f0000000300)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid={'resuid', 0x3d, r4}}, {@jqfmt_vfsv0}, {@abort}, {@noinit_itable}]}, 0x0, 0x587, &(0x7f0000000f80)="$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") 3m19.598491183s ago: executing program 6 (id=896): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000600)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mblk_io_submit}, {@nombcache}, {@stripe}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x12, &(0x7f0000000700)=@raw=[@alu={0x4, 0x0, 0x3, 0x4, 0x9, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x47b0, 0x0, 0x0, 0x0, 0x9}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0xb, 0x5, 0x6, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) io_getevents(r5, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0xa, 0x4) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc85d, 0x4, 0x0, 0x0, 0x7, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0xf}, 0x94) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) fallocate(r8, 0x0, 0x0, 0x1001f0) 3m19.351594917s ago: executing program 2 (id=899): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047452, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) unshare(0x8000000) timer_create(0x0, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f0000000040)=0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) timer_gettime(r3, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x101082) ioctl$BLKPG(r6, 0x1269, &(0x7f0000001780)={0x1, 0x0, 0x98, &(0x7f00000016c0)={0x2000000000004, 0x4, 0xd}}) semget$private(0x0, 0x4000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x2) open_tree(r7, &(0x7f0000000100)='./file0\x00', 0x0) 3m19.143015939s ago: executing program 6 (id=903): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3m18.850866728s ago: executing program 6 (id=909): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000013}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3f, r1, &(0x7f00000016c0)={0x40000001}) 3m18.811460562s ago: executing program 35 (id=909): r0 = epoll_create1(0x80000) r1 = socket$unix(0x1, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000013}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3f, r1, &(0x7f00000016c0)={0x40000001}) 3m18.268204626s ago: executing program 2 (id=914): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 3m18.156726697s ago: executing program 2 (id=916): r0 = socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) rt_sigpending(0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000003c0)={{}, "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"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf25010000000000000008410000004c0018"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a3200000000e4040000060a010400000000000000000500000008000b40000000000900010073797a300000000008000940000000020c0005800800014000000000c4000740ab487b1b512f33a8dbd67a8b35f2405127f309901ea13e31d5810f85eae8f528c938c24abb1b1abbda2e7fa6e0758629bb09ed64a8ba5b2ef3c3591fd06d7e10d93c0857ecac854ac51ad69639d98adb2c1464e444cc1a6a2e7ee244622433b51f58606b063f4938101a7e764c957eba2e913b2ac10435471fa769740a1275cb467e5264b71bc8727fc12e9aba46e4a8abf3dda91e0da608d6a0a35573d5524fb25451cc23051887de4df85c8e771260c4943e78905aa1e7493027366ed1bea0d80304804800018008000100667764"], 0x558}}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m16.708123883s ago: executing program 2 (id=923): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000600)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mblk_io_submit}, {@nombcache}, {@stripe}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x12, &(0x7f0000000700)=@raw=[@alu={0x4, 0x0, 0x3, 0x4, 0x9, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x47b0, 0x0, 0x0, 0x0, 0x9}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0xb, 0x5, 0x6, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) io_getevents(r5, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0xa, 0x4) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc85d, 0x4, 0x0, 0x0, 0x7, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7000000}}}, &(0x7f0000000680)='syzkaller\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0xf}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) 3m16.480639065s ago: executing program 2 (id=925): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(0x0, &(0x7f0000000800)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 3m16.306761982s ago: executing program 2 (id=927): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m16.269167437s ago: executing program 36 (id=927): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3m13.000825584s ago: executing program 1 (id=964): r0 = socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) rt_sigpending(0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000003c0)={{}, "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"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf25010000000000000008410000004c0018"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m11.24104701s ago: executing program 1 (id=978): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r3, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) rmdir(0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 3m10.518238582s ago: executing program 1 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353b, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x2, r8, 0xf, r9}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xc, 0x9, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80a0, 0x0, 0xfffffeff, 0xff}}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r12, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d80)={'gre0\x00', &(0x7f0000000c80)={'syztnl0\x00', 0x0, 0xf890, 0x1, 0x0, 0xdc, {{0x2b, 0x4, 0x0, 0x7, 0xac, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x3c, 0x84, 0x3, 0x3, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@broadcast, 0xd0}, {@empty, 0x7}, {@multicast1, 0x3}, {@broadcast, 0x4}, {@multicast1, 0xffffffff}]}, @rr={0x7, 0x7, 0x82, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x3b, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x1ff}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x42, 0x1, 0xf, [{@loopback, 0x3ff}, {@multicast1}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f00000015c0)=ANY=[@ANYBLOB='H\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="74010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="200102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000200000074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040005000201020000001e97059b02000000080009ff040000000800010735a26c54feff0f060500000004000500000080ffff7fffde4f9e0000070038491d00000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="f000028038000100240001006d636173745f89656a6f696e5f696e74657276616c00000000000000000000000500030043000000080004000900000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004007a0100003c00010024000100757365725f6c696e6b75705f656e61626c6564000000000000000000000000000500030006000000040004000800060029977da86ed4ddf6725c74dd7cce6ceda8ef805ba83bf2403c9cd8b9d7b4c60d7284e880cc51d77b0bfc13ea9da187007decd47ef86a41", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000104000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="b000028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="500102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000000f104ff0f0000000010400400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000700000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040000000100"], 0x748}}, 0x44090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m10.226326651s ago: executing program 1 (id=988): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x10000, &(0x7f0000000600)={[{@norecovery}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@nodioread_nolock}, {@usrquota}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@mblk_io_submit}, {@nombcache}, {@stripe}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x12, &(0x7f0000000700)=@raw=[@alu={0x4, 0x0, 0x3, 0x4, 0x9, 0x6, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x47b0, 0x0, 0x0, 0x0, 0x9}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0xb, 0x5, 0x6, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) io_getevents(r5, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0xa, 0x4) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) fallocate(r6, 0x0, 0x0, 0x1001f0) 3m9.821497432s ago: executing program 1 (id=994): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r3, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x106) rmdir(0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 3m9.766991498s ago: executing program 1 (id=995): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r3, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x106) rmdir(0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 3m9.74025316s ago: executing program 37 (id=995): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0xa, &(0x7f0000000200), &(0x7f0000000400)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r3, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c"], 0x10b8}, 0x106) rmdir(0x0) io_uring_register$IORING_REGISTER_CLOCK(r4, 0x1d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 2m24.640517958s ago: executing program 8 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) preadv2(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000380)=""/244, 0xf4}, {&(0x7f0000000140)=""/55, 0x37}, {0x0}, {&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/253, 0xfd}, {&(0x7f0000000900)=""/103, 0x67}], 0xa, 0x7fffffff, 0x100, 0xa) 2m24.559484086s ago: executing program 8 (id=1801): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000900)={[{@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@noquota}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") syz_clone3(0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7472006e733dd7642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',nodevmap,\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x3, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0xa10082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2c1, &(0x7f0000000c00)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) socket$tipc(0x1e, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x0) 2m23.701823572s ago: executing program 8 (id=1811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000001ac0)={@private2}, &(0x7f0000001b00)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) socket$inet(0x2, 0x3, 0x5) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x499, 0x0, &(0x7f0000000100), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0x3, 0xc, &(0x7f0000001cc0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe01}, 0x94) ioperm(0xffffffffffff34e9, 0xfffffffffffffff7, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) 2m23.668314325s ago: executing program 8 (id=1812): syz_open_dev$sg(0x0, 0xffff0000, 0x40) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r2) r3 = getpid() ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x1) r4 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x18) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000300)={0x9, 0x108, 0xfa00, {r9, 0x8, "0920b6", "b169b1e4bb1f0a54a40ab87ed025c3bfe0aa62043cb42fb64aa9171e38301e5bb77778a04994aea4fb835958d9b7a8f9b865c0612ef9336181e92ffc21d8154713f20960ae437f0f9ec77d2bed0ecbe481814f2c01c25b7a0ff09d0c354ad89a563ce8c58f66a0ab210607d59888da2a682b1282eb6aaa24275450483fc212479e1cfb064076cd81ae36f07e750a5b68cebb6883c8d565ea22a3dc63cb0f4555a3debe510337ec1c695b5fbb739604f581625c49ae9cde036c7b8ab6901b5f595bf09aad8ee32c1059a0764ba6c4daa08af9db027f2320c5246fefdc54f5077c28e8ca87e4f2a86dae577bc1e36c44ed142e60944c3acbd8d19929e09b4b93f8"}}, 0x110) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x60100100, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv0\x00'}) 2m22.71608479s ago: executing program 8 (id=1821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 2m22.435708108s ago: executing program 8 (id=1829): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r2, 0x2e, 0x0, 0xfffffff7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0]}, 0x40) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020020f8ffffffb703000008000000b704000000000000850005000000000000000000000000003d19efe8bd131d807ca8cd0a9c"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003b0007010000000000000000047c0000f8fffb800c0001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x2}, 0x2052, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x6}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2540, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x2}}, @var={0xc, 0x0, 0x0, 0xe, 0x1}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/64, 0x5b, 0x40, 0x1, 0x7}, 0x28) 2m22.363586296s ago: executing program 38 (id=1829): r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r2, 0x2e, 0x0, 0xfffffff7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0]}, 0x40) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020020f8ffffffb703000008000000b704000000000000850005000000000000000000000000003d19efe8bd131d807ca8cd0a9c"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000003b0007010000000000000000047c0000f8fffb800c0001"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x2}, 0x2052, 0x0, 0x1, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x6}) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2540, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x2}}, @var={0xc, 0x0, 0x0, 0xe, 0x1}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x5}, @float={0xe, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/64, 0x5b, 0x40, 0x1, 0x7}, 0x28) 7.996631359s ago: executing program 4 (id=3989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000a40)='./file0\x00', 0x0, 0x35dc19, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000000c0), 0x401, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 7.968737303s ago: executing program 4 (id=3990): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0xd993, 0x10000, 0x2, 0x800264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f9b080476ee7b8004469564262d81f5da6c025d060ab186d94af98af1da2b5952eb15855933a212324e035f72e5dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cf8b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61cd552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea50839a457c2c5000000a0c548552b571bed5647323c78a996810000000571cb62f0e9c147c0"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) openat(r5, &(0x7f0000000280)='./file0\x00', 0x410282, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x4}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r6, 0x0, 0x58) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r6, 0x942e, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 7.881119561s ago: executing program 4 (id=3992): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 7.863334743s ago: executing program 4 (id=3994): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000300)={'\x00', 0x401, 0x0, 0xa}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r4, r3, 0x0, 0x3ffff) 7.79456584s ago: executing program 4 (id=3996): r0 = socket$isdn_base(0x22, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x18) rt_sigpending(0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000003c0)={{}, "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"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf25010000000000000008410000004c0018"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.460640013s ago: executing program 4 (id=4000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 7.439178505s ago: executing program 39 (id=4000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3.529688817s ago: executing program 7 (id=4050): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='mm_page_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x6, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x1200000, 0x260900) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000004034000000000000080000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b", 0xe, 0xfffffffffffffffd) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) syz_usbip_server_init(0x6) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) 2.852182685s ago: executing program 0 (id=4054): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010100"], 0x48) 2.791676501s ago: executing program 0 (id=4057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 2.718025818s ago: executing program 0 (id=4059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0x43, 0xa0, 0x148, 0x98, 0x270, 0x178, 0x178, 0x270, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x12a, 0xe0, 0x148, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x0, 0x7, '\x00', 'syz1\x00', {0xd063}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@addrtype={{0x30}, {0x4, 0x810, 0x0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xff000000, 0x0, 0xffffff00], 0x1000, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x16b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) stat(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200006de5da85df786400040081d118c757d0b6103ba003a76299acee7d84fb1990d8f80e68c55b2825a573a5f61bff3b8d5981ef785e78c711b97a4688d075daeec015f1af1734236fcb350982a1e6e66eb41bcf1ce2282b6ada96b3650f1a4b3957c10438dcc7065a7d2b655e957bec4a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000380)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = socket(0x10, 0x1, 0xc) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000010000304f60300"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000300012800b00010062726964676500001f00028008000500", @ANYRES32=0x0, @ANYBLOB="04001400"], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) write$UHID_CREATE2(r1, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.276684302s ago: executing program 7 (id=4062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0x43, 0xa0, 0x148, 0x98, 0x270, 0x178, 0x178, 0x270, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x12a, 0xe0, 0x148, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x0, 0x7, '\x00', 'syz1\x00', {0xd063}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@addrtype={{0x30}, {0x4, 0x810, 0x0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xff000000, 0x0, 0xffffff00], 0x1000, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x16b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) stat(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200006de5da85df786400040081d118c757d0b6103ba003a76299acee7d84fb1990d8f80e68c55b2825a573a5f61bff3b8d5981ef785e78c711b97a4688d075daeec015f1af1734236fcb350982a1e6e66eb41bcf1ce2282b6ada96b3650f1a4b3957c10438dcc7065a7d2b655e957bec4a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x4]}, &(0x7f00000001c0), &(0x7f0000000400)={r6, r7+60000000}, 0x8) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) r8 = socket(0x10, 0x1, 0xc) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000010000304f60300"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000300012800b00010062726964676500001f00028008000500", @ANYRES32=0x0, @ANYBLOB="04001400"], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) write$UHID_CREATE2(r1, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.121166848s ago: executing program 0 (id=4064): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000300)={'\x00', 0x401, 0x0, 0xa}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r4, r3, 0x0, 0x3ffff) 1.973657363s ago: executing program 9 (id=4067): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r0 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 1.870890013s ago: executing program 9 (id=4069): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000540)="63eea97d36043547c983fae876ca7f347153651accaba67c37631ae67b69d8f654a85bb7ee3faa6690b1c6b2b8c0ad6c03ad16daa5cc4dae40995b78c99b98301cf48bd0c57ae2f6b54882d112b9dc83f593b16a9218233ef902d16dac4258b907c69e0877cdbaa2cb6c57c0c3471e88d8c2649c01fe6d5479751f18a6af2ce8431f487b3aaf51eb84bf6ec37e2d27efbc131a11ddccafc0d176918e36c30590cc36eed7ae73a1e1ae128d3d10", 0xad) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200a05000000000000000000020000000900"], 0x84}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) syz_usb_connect(0x5, 0x36, 0x0, 0x0) unshare(0x6a040000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1.842784536s ago: executing program 7 (id=4070): creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f15f9ef2f5c3816600095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x50214, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) alarm(0x8a8000000000) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r9, 0x80044942, &(0x7f0000000080)) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56641, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x2, 0x300) 1.650675345s ago: executing program 0 (id=4073): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r0, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r0}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000000b00)=""/4086, 0xff, 0xff6, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1c00000004000000040000000200000002e0", @ANYRESHEX=r1, @ANYRES32, @ANYRESDEC=r1, @ANYBLOB='\x00\x00'], 0x50) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r2 = getpgid(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = syz_open_dev$vcsu(&(0x7f00000007c0), 0xd, 0x200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f00000006000240000000002400"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, &(0x7f00000006c0)) r6 = syz_pidfd_open(r2, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1.321028528s ago: executing program 5 (id=4076): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) readahead(r2, 0x4, 0xd7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x145402, 0x1d2) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xc2, &(0x7f0000000140)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xb4, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1, {[@generic={0x7, 0x2}]}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "69eb047c187e143bddcbe699ef7a74fd2c1a7c6b59dd637719d6395dda566f42", "6e8ae37dc217c78b70a4dc5eeb6f624200e45176f0c8444ad4b18c65ce5eb8dbb3b30234e8bea411688bf272fdef179d", "ff2a09d662def3d2eb45734d1b7067384ff2442258e9fc1dfc1701ba", {"18b0a3516f6b94835c625da017fdd035", "7f78bc2b0e933988c64a103320cfe3d2"}}}}}}}, 0x0) open(&(0x7f0000000040)='.\x00', 0x10a400, 0x116) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x33, 0x3a, '\\xaf_\x00', 0x3a, 'erofs\x00', 0x3a, './bus'}, 0x31) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1.242317526s ago: executing program 5 (id=4077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="bf655697cafd81d1f9ceaa1f7c59a276ef4d96f218f6e5623e85f652a1b0d2c8fbd525927915550f5640dd1d105967eedb9ae4a7df0dc265b7972149f9581b0c32e47c98876310700b2320badad8797a1e66a99d2748b49e8c8706fab4cd20079b6d075a8c34f0492aab984f250731d59bde03d74c67b52f3ac4870e", @ANYRESDEC=0x0, @ANYBLOB="581bb9d8133ccbabe5ef56dcaf59b7bb7a105e771e5b4f04d6bd0dc4c9133b0e31e926ddc0c5dfcc6c082dfadd0b4699621d280572e1939f248b6c964ee5efa0c0beda5684777c28b9fe8dca375a269e03df6db031ef5d55b07563ffd1f391966ecff30ed81972c4dc01b5a5d73b2c17ed13e1d4b908ad939a21b4c8", @ANYRES64=r0, @ANYRESHEX], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8170a4f7b00bfa200000000000007020000f8ffffffb703000008000000b7048f7e9f4787e1fb02dd2f50927761540d000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFBR(r6, 0x8940, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x80) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sg(0x0, 0x0, 0x22c43) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 1.2060661s ago: executing program 0 (id=4078): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.172195693s ago: executing program 40 (id=4078): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000400018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 873.051103ms ago: executing program 9 (id=4080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x48) 784.398312ms ago: executing program 9 (id=4082): r0 = eventfd(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000600), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) read$eventfd(r0, &(0x7f0000000240), 0x8) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async) unshare(0x64000600) (async) r4 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r3, @ANYBLOB="049c01000750050008001300", @ANYRES32=r4, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES8=r8, @ANYRES32=r8, @ANYRES32=r8], 0x11c}, 0x1, 0x0, 0x0, 0x40084}, 0xc0080) (async) r10 = socket$unix(0x1, 0x2, 0x0) r11 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x101040, 0x10, 0x10}, 0x18) getdents64(r11, &(0x7f0000000500)=""/213, 0xd5) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB="0100010100ed0bc25918d032edc5a7a4e909a685cfb770bad8f950bcc2b9493817d1f2"]) (async) bind$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000004c0)={'hsr0\x00', 0x0}) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYRES32=r7, @ANYRES64=r1, @ANYBLOB="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", @ANYRES8=r9, @ANYRES64=0x0, @ANYRESDEC=r6, @ANYRES8=r11, @ANYRESOCT=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x240000d1}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x7, 0xa}, {0x0, 0x7}, {0xc, 0xffe0}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) 783.886242ms ago: executing program 9 (id=4083): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0x97f, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7, 0x4) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000540)="63eea97d36043547c983fae876ca7f347153651accaba67c37631ae67b69d8f654a85bb7ee3faa6690b1c6b2b8c0ad6c03ad16daa5cc4dae40995b78c99b98301cf48bd0c57ae2f6b54882d112b9dc83f593b16a9218233ef902d16dac4258b907c69e0877cdbaa2cb6c57c0c3471e88d8c2649c01fe6d5479751f18a6af2ce8431f487b3aaf51eb84bf6ec37e2d27efbc131a11ddccafc0d176918e36c30590cc36eed7ae73a1e1ae128d3d10", 0xad) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200a05000000000000000000020000000900"], 0x84}}, 0x0) unshare(0x6a040000) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 682.424212ms ago: executing program 3 (id=4084): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f0000000000), 0xd4ba103) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) rmdir(0x0) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x41}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd8}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 588.124752ms ago: executing program 3 (id=4085): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0xd993, 0x10000, 0x2, 0x800264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) openat(r5, &(0x7f0000000280)='./file0\x00', 0x410282, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x4}, {}]}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") 521.790448ms ago: executing program 5 (id=4086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc050) 510.836039ms ago: executing program 3 (id=4087): timerfd_create(0x0, 0x0) 497.313851ms ago: executing program 5 (id=4088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006002000128008000100736974001400028008000200ac14142d08"], 0x40}}, 0x4008040) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) preadv(r6, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000200), 0x3, 0x200) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x8, 0x0, 0x71, r11}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000003c0)={r11, 0x98, &(0x7f0000000680)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x50369ce4, @private2={0xfc, 0x2, '\x00', 0x4}, 0x26}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f00000004c0)=0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x6}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x3, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x98}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9f6}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x100000}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd, 0x0, 0x8}, {}, {}, {0x1a6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x140d, 0x0, 0x401, 0x3e}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{0x0}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6e55eda1d4e32742a289e8d010022e38b7eb9d588524ec5c8bc0b879208517ca2d3", 0x42}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd883356630000000000000000", 0x58}], 0x6, 0x0, 0x0, 0x804}}, {{&(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32=r7, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x2, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getitimer(0x0, &(0x7f0000000540)) 452.651225ms ago: executing program 3 (id=4089): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 309.964319ms ago: executing program 5 (id=4090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0x43, 0xa0, 0x148, 0x98, 0x270, 0x178, 0x178, 0x270, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x12a, 0xe0, 0x148, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@state={{0x28}, {0xfffffffe}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x0, 0x7, '\x00', 'syz1\x00', {0xd063}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@addrtype={{0x30}, {0x4, 0x810, 0x0, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0x0, 0xff000000, 0x0, 0xffffff00], 0x1000, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x16b}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) stat(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200006de5da85df786400040081d118c757d0b6103ba003a76299acee7d84fb1990d8f80e68c55b2825a573a5f61bff3b8d5981ef785e78c711b97a4688d075daeec015f1af1734236fcb350982a1e6e66eb41bcf1ce2282b6ada96b3650f1a4b3957c10438dcc7065a7d2b655e957bec4a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigtimedwait(&(0x7f0000000100)={[0x4]}, &(0x7f00000001c0), &(0x7f0000000400), 0x8) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = socket(0x10, 0x1, 0xc) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000010000304f60300"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000300012800b00010062726964676500001f00028008000500", @ANYRES32=0x0, @ANYBLOB="04001400"], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) write$UHID_CREATE2(r1, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 308.603279ms ago: executing program 3 (id=4091): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x48) 307.912209ms ago: executing program 7 (id=4092): iopl(0x3) 261.013505ms ago: executing program 3 (id=4093): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) unshare(0x4020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x14010, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000004c0)='./file0\x00') socket(0x40000000015, 0x5, 0x0) 260.374364ms ago: executing program 7 (id=4094): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000240), &(0x7f0000000340)=""/86}, 0x20) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x121}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xa1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 107.07507ms ago: executing program 7 (id=4095): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='afs_notify_call\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x924}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9, 0x0, 0x3}, 0x18) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r11 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r11, 0x0) ftruncate(r11, 0x51a9497) pipe2(&(0x7f0000000080), 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 36.531487ms ago: executing program 5 (id=4096): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) getpgid(0x0) 0s ago: executing program 9 (id=4097): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0xd993, 0x10000, 0x2, 0x800264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f9b080476ee7b8004469564262d81f5da6c025d060ab186d94af98af1da2b5952eb15855933a212324e035f72e5dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cf8b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61cd552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea50839a457c2c5000000a0c548552b571bed5647323c78a996810000000571cb62f0e9c147c0"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) openat(r5, &(0x7f0000000280)='./file0\x00', 0x410282, 0x100) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") kernel console output (not intermixed with test programs): ‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 260.862839][T15189] loop0: detected capacity change from 0 to 128 [ 260.879563][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 260.904940][T15189] loop0: detected capacity change from 0 to 128 [ 260.922044][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 260.963939][T15189] loop0: detected capacity change from 0 to 128 [ 260.970598][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.003261][T15189] loop0: detected capacity change from 0 to 128 [ 261.019739][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.047223][T15189] loop0: detected capacity change from 0 to 128 [ 261.061543][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.195196][T15189] loop0: detected capacity change from 0 to 128 [ 261.209688][T15276] lo speed is unknown, defaulting to 1000 [ 261.215967][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.261230][T15189] loop0: detected capacity change from 0 to 128 [ 261.293598][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.338790][T15189] loop0: detected capacity change from 0 to 128 [ 261.375278][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.432890][T15189] loop0: detected capacity change from 0 to 128 [ 261.463720][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.495578][T15285] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 261.515240][T15189] loop0: detected capacity change from 0 to 128 [ 261.521649][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.545242][T15189] loop0: detected capacity change from 0 to 128 [ 261.551732][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 261.574926][T15189] loop0: detected capacity change from 0 to 128 [ 261.581483][T15189] vfat: Unknown parameter ' |4¼ü…ù\ÄmÉä¥àæHªGšógüfvlDÕmÏï‘äÖü´¤ä¿àüt`~L.]Ü’¯IJ>ÍHYL™uÇÑÈ9¢ÔÛÙ¦ü„Û' [ 262.299946][T15339] loop4: detected capacity change from 0 to 512 [ 262.337726][T15339] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 262.378836][T15339] EXT4-fs (loop4): mount failed [ 262.500466][T15346] loop7: detected capacity change from 0 to 512 [ 262.613021][T15339] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3625'. [ 262.685415][T15349] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3627'. [ 262.780842][T15346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.798452][T15346] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.898116][T15353] lo speed is unknown, defaulting to 1000 [ 262.976033][T15358] loop4: detected capacity change from 0 to 512 [ 263.008561][T15358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.062221][T15362] loop0: detected capacity change from 0 to 512 [ 263.070232][T15362] EXT4-fs: Ignoring removed bh option [ 263.081606][T15358] ext4 filesystem being mounted at /553/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.108720][T15362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.139997][T15362] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.282259][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 263.304668][T15362] siw: device registration error -23 [ 263.313990][T15362] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 263.320632][T15362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 263.328838][T15362] vhci_hcd vhci_hcd.0: Device attached [ 263.350308][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.382999][T15365] vhci_hcd: connection closed [ 263.384084][T13777] vhci_hcd: stop threads [ 263.393109][T13777] vhci_hcd: release socket [ 263.397575][T13777] vhci_hcd: disconnect device [ 263.424388][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 263.424407][ T29] audit: type=1400 audit(1763134877.013:9633): avc: denied { ioctl } for pid=15357 comm="syz.4.3630" path="/553/file2/file1" dev="loop4" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 263.468940][T15372] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #18: comm syz.4.3630: corrupted inode contents [ 263.491756][T15358] lo speed is unknown, defaulting to 1000 [ 263.498118][T15372] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #18: comm syz.4.3630: mark_inode_dirty error [ 263.541702][T15372] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #18: comm syz.4.3630: corrupted inode contents [ 263.567807][T15372] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #18: comm syz.4.3630: mark_inode_dirty error [ 263.631621][T15372] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #18: comm syz.4.3630: mark inode dirty (error -117) [ 263.660350][T15387] loop3: detected capacity change from 0 to 512 [ 263.682598][T15387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.701289][T15372] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 263.723032][T15387] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.770177][T15393] bridge10: entered promiscuous mode [ 263.973420][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.064218][T15409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3645'. [ 264.344838][ T7169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.367821][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.475253][T15430] bridge8: entered promiscuous mode [ 264.534521][T15438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.601472][T15444] netlink: 996 bytes leftover after parsing attributes in process `syz.4.3657'. [ 264.617374][T13750] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.642886][T15416] lo speed is unknown, defaulting to 1000 [ 264.648720][T13750] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.648884][T15447] loop7: detected capacity change from 0 to 1024 [ 264.670150][T15447] EXT4-fs: Ignoring removed bh option [ 264.677124][T15447] EXT4-fs: inline encryption not supported [ 264.677770][T13750] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.686591][T15447] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 264.705857][T15447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 264.718511][T13750] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.744523][T15447] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.3655: lblock 2 mapped to illegal pblock 2 (length 1) [ 264.785785][T15452] loop3: detected capacity change from 0 to 512 [ 264.863732][T15447] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 264.895771][T15452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.911716][T15447] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.3655: lblock 0 mapped to illegal pblock 48 (length 1) [ 264.930838][T15452] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.944112][T15416] chnl_net:caif_netlink_parms(): no params data found [ 264.957585][T15447] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 264.966481][T15447] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.3655: Failed to acquire dquot type 0 [ 264.994029][T15447] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 265.014108][T15447] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.3655: mark_inode_dirty error [ 265.033168][T15447] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 265.044707][T15416] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.051865][T15416] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.060553][T15447] EXT4-fs (loop7): 1 orphan inode deleted [ 265.064006][T15416] bridge_slave_0: entered allmulticast mode [ 265.072385][T15447] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.083531][T15416] bridge_slave_0: entered promiscuous mode [ 265.091747][T15416] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.098896][T15416] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.106483][T15416] bridge_slave_1: entered allmulticast mode [ 265.113025][T15416] bridge_slave_1: entered promiscuous mode [ 265.113075][T13776] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 265.156036][T15416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.166412][T13776] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 265.174990][T13776] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 265.175759][T15416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.208195][T15443] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm syz.7.3655: lblock 1 mapped to illegal pblock 1 (length 1) [ 265.223739][T15416] team0: Port device team_slave_0 added [ 265.230702][T15416] team0: Port device team_slave_1 added [ 265.242180][T15443] Quota error (device loop7): find_next_id: Can't read quota tree block 1 [ 265.275060][T15416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.282065][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.308051][T15416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.319659][T15416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.326841][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.352960][T15416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.394134][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.403514][ T6379] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 265.406802][T15416] hsr_slave_0: entered promiscuous mode [ 265.424071][ T6379] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 265.432790][T15416] hsr_slave_1: entered promiscuous mode [ 265.444178][ T6379] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 265.449750][T15416] debugfs: 'hsr0' already exists in 'hsr' [ 265.461458][T15416] Cannot create hsr debugfs directory [ 265.472448][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.570897][ T29] audit: type=1326 audit(1763134879.153:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.0.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 265.594589][ T29] audit: type=1326 audit(1763134879.153:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.0.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 265.618423][ T29] audit: type=1326 audit(1763134879.153:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.0.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 265.642132][ T29] audit: type=1326 audit(1763134879.153:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.0.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 265.644720][T15479] netlink: 996 bytes leftover after parsing attributes in process `syz.7.3662'. [ 265.665942][ T29] audit: type=1326 audit(1763134879.153:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15472 comm="syz.0.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 266.011645][T15416] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 266.022534][T15416] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 266.038891][T15416] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 266.055110][T15416] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 266.111088][T15416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.135584][T15416] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.148439][T13777] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.155696][T13777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.180371][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.187495][T13774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.263262][T15512] FAULT_INJECTION: forcing a failure. [ 266.263262][T15512] name failslab, interval 1, probability 0, space 0, times 0 [ 266.276058][T15512] CPU: 1 UID: 0 PID: 15512 Comm: syz.0.3673 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.276098][T15512] Tainted: [W]=WARN [ 266.276107][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 266.276124][T15512] Call Trace: [ 266.276132][T15512] [ 266.276143][T15512] __dump_stack+0x1d/0x30 [ 266.276173][T15512] dump_stack_lvl+0xe8/0x140 [ 266.276199][T15512] dump_stack+0x15/0x1b [ 266.276293][T15512] should_fail_ex+0x265/0x280 [ 266.276318][T15512] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 266.276349][T15512] should_failslab+0x8c/0xb0 [ 266.276415][T15512] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 266.276522][T15512] ? shmem_alloc_inode+0x34/0x50 [ 266.276550][T15512] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 266.276586][T15512] shmem_alloc_inode+0x34/0x50 [ 266.276624][T15512] alloc_inode+0x40/0x170 [ 266.276656][T15512] new_inode+0x1d/0xe0 [ 266.276706][T15512] shmem_get_inode+0x244/0x750 [ 266.276739][T15512] __shmem_file_setup+0x113/0x210 [ 266.276767][T15512] shmem_file_setup+0x3b/0x50 [ 266.276791][T15512] __se_sys_memfd_create+0x2c3/0x590 [ 266.276826][T15512] __x64_sys_memfd_create+0x31/0x40 [ 266.276926][T15512] x64_sys_call+0x2ac2/0x3000 [ 266.276954][T15512] do_syscall_64+0xd2/0x200 [ 266.276979][T15512] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 266.277061][T15512] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 266.277145][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.277204][T15512] RIP: 0033:0x7f0b68a4f6c9 [ 266.277225][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.277250][T15512] RSP: 002b:00007f0b674b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 266.277275][T15512] RAX: ffffffffffffffda RBX: 0000000000000441 RCX: 00007f0b68a4f6c9 [ 266.277385][T15512] RDX: 00007f0b674b6ef0 RSI: 0000000000000000 RDI: 00007f0b68ad2960 [ 266.277402][T15512] RBP: 0000200000000440 R08: 00007f0b674b6bb7 R09: 00007f0b674b6e40 [ 266.277418][T15512] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 266.277435][T15512] R13: 00007f0b674b6ef0 R14: 00007f0b674b6eb0 R15: 0000200000000200 [ 266.277461][T15512] [ 266.288667][T15416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.585384][T15532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.606373][T15416] veth0_vlan: entered promiscuous mode [ 266.631387][T15416] veth1_vlan: entered promiscuous mode [ 266.685214][T15416] veth0_macvtap: entered promiscuous mode [ 266.695914][T15416] veth1_macvtap: entered promiscuous mode [ 266.704200][T15544] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.713405][T15416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.723175][T15416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.736213][T15539] loop0: detected capacity change from 0 to 1024 [ 266.750093][T13776] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.764628][T13776] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.779571][T15539] EXT4-fs: Ignoring removed bh option [ 266.786125][T15539] EXT4-fs: inline encryption not supported [ 266.794008][T13776] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.803747][T13776] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.817005][T15539] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 266.839324][T15539] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 266.858430][T15539] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3677: lblock 2 mapped to illegal pblock 2 (length 1) [ 266.896729][T15539] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3677: lblock 0 mapped to illegal pblock 48 (length 1) [ 266.911712][T15539] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3677: Failed to acquire dquot type 0 [ 266.923234][T15550] loop3: detected capacity change from 0 to 512 [ 266.929781][T15539] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 266.939510][T15539] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3677: mark_inode_dirty error [ 266.953065][T15539] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 266.964063][T15539] EXT4-fs (loop0): 1 orphan inode deleted [ 266.970275][T15539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.971573][T15550] EXT4-fs: Ignoring removed bh option [ 266.990565][T13774] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.011425][T13774] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:35: Failed to release dquot type 0 [ 267.011435][T15539] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm syz.0.3677: lblock 1 mapped to illegal pblock 1 (length 1) [ 267.061030][T15550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.075310][T15550] ext4 filesystem being mounted at /340/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.118650][T15550] siw: device registration error -23 [ 267.125178][T15550] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 267.131819][T15550] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 267.139991][T15550] vhci_hcd vhci_hcd.0: Device attached [ 267.147283][T15565] vhci_hcd: connection closed [ 267.147421][T13774] vhci_hcd: stop threads [ 267.156579][T13774] vhci_hcd: release socket [ 267.161039][T13774] vhci_hcd: disconnect device [ 267.557984][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.616102][T12948] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 267.632591][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3690'. [ 267.635490][T12948] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 267.653419][T12948] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 267.742973][T15591] netlink: 996 bytes leftover after parsing attributes in process `syz.4.3692'. [ 267.765766][T15593] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3697'. [ 267.776046][T15593] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 267.843060][T15595] FAULT_INJECTION: forcing a failure. [ 267.843060][T15595] name failslab, interval 1, probability 0, space 0, times 0 [ 267.855920][T15595] CPU: 1 UID: 0 PID: 15595 Comm: syz.7.3695 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 267.855959][T15595] Tainted: [W]=WARN [ 267.856008][T15595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.856021][T15595] Call Trace: [ 267.856028][T15595] [ 267.856036][T15595] __dump_stack+0x1d/0x30 [ 267.856059][T15595] dump_stack_lvl+0xe8/0x140 [ 267.856080][T15595] dump_stack+0x15/0x1b [ 267.856098][T15595] should_fail_ex+0x265/0x280 [ 267.856133][T15595] should_failslab+0x8c/0xb0 [ 267.856163][T15595] kmem_cache_alloc_noprof+0x50/0x480 [ 267.856193][T15595] ? copy_net_ns+0x10f/0x3b0 [ 267.856225][T15595] copy_net_ns+0x10f/0x3b0 [ 267.856250][T15595] create_new_namespaces+0x20e/0x3d0 [ 267.856332][T15595] unshare_nsproxy_namespaces+0xe8/0x120 [ 267.856354][T15595] ksys_unshare+0x3d0/0x6d0 [ 267.856385][T15595] ? ksys_write+0x192/0x1a0 [ 267.856413][T15595] __x64_sys_unshare+0x1f/0x30 [ 267.856566][T15595] x64_sys_call+0x2915/0x3000 [ 267.856588][T15595] do_syscall_64+0xd2/0x200 [ 267.856609][T15595] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 267.856725][T15595] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 267.856758][T15595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.856807][T15595] RIP: 0033:0x7f7bbd24f6c9 [ 267.856822][T15595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.856841][T15595] RSP: 002b:00007f7bbbc75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 267.856860][T15595] RAX: ffffffffffffffda RBX: 00007f7bbd4a6180 RCX: 00007f7bbd24f6c9 [ 267.856873][T15595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 267.856886][T15595] RBP: 00007f7bbbc75090 R08: 0000000000000000 R09: 0000000000000000 [ 267.856907][T15595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.856920][T15595] R13: 00007f7bbd4a6218 R14: 00007f7bbd4a6180 R15: 00007ffe31ac95a8 [ 267.856939][T15595] [ 268.162977][T15597] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.284726][T15600] loop0: detected capacity change from 0 to 1024 [ 268.299593][T15600] EXT4-fs: Ignoring removed bh option [ 268.305219][T15600] EXT4-fs: inline encryption not supported [ 268.312403][T15600] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 268.350837][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.363154][T15600] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 268.385353][T15600] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3698: lblock 2 mapped to illegal pblock 2 (length 1) [ 268.404848][T15600] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3698: lblock 0 mapped to illegal pblock 48 (length 1) [ 268.423953][T15600] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3698: Failed to acquire dquot type 0 [ 268.451108][T15600] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 268.487649][T15600] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3698: mark_inode_dirty error [ 268.518090][T15600] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 268.554056][T15600] EXT4-fs (loop0): 1 orphan inode deleted [ 268.560447][T15600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.595839][T13801] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.620739][T13801] __quota_error: 64 callbacks suppressed [ 268.620764][T13801] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 268.621698][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 268.626505][T13801] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:62: Failed to release dquot type 0 [ 268.674140][T15600] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm syz.0.3698: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.731988][T15600] Quota error (device loop0): find_next_id: Can't read quota tree block 1 [ 268.745804][T15620] loop4: detected capacity change from 0 to 512 [ 268.775061][T15620] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 268.795327][T15620] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 268.812994][T15620] EXT4-fs (loop4): mount failed [ 268.831604][T15620] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3706'. [ 268.899463][T15636] netlink: 172 bytes leftover after parsing attributes in process `syz.7.3709'. [ 268.910685][ T29] audit: type=1400 audit(1763134882.493:9697): avc: denied { name_connect } for pid=15626 comm="syz.7.3709" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 268.995532][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.005586][T12948] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 269.023890][T12948] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 269.073934][T12948] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 269.099853][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3717'. [ 269.155022][T15649] lo speed is unknown, defaulting to 1000 [ 269.195821][T15654] FAULT_INJECTION: forcing a failure. [ 269.195821][T15654] name failslab, interval 1, probability 0, space 0, times 0 [ 269.208848][T15654] CPU: 1 UID: 0 PID: 15654 Comm: syz.0.3718 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 269.208962][T15654] Tainted: [W]=WARN [ 269.208969][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.208981][T15654] Call Trace: [ 269.208987][T15654] [ 269.208994][T15654] __dump_stack+0x1d/0x30 [ 269.209075][T15654] dump_stack_lvl+0xe8/0x140 [ 269.209102][T15654] dump_stack+0x15/0x1b [ 269.209125][T15654] should_fail_ex+0x265/0x280 [ 269.209145][T15654] ? __se_sys_mount+0xef/0x2e0 [ 269.209247][T15654] should_failslab+0x8c/0xb0 [ 269.209276][T15654] __kmalloc_cache_noprof+0x4c/0x4a0 [ 269.209307][T15654] ? memdup_user+0x99/0xd0 [ 269.209420][T15654] __se_sys_mount+0xef/0x2e0 [ 269.209447][T15654] ? fput+0x8f/0xc0 [ 269.209469][T15654] ? ksys_write+0x192/0x1a0 [ 269.209500][T15654] __x64_sys_mount+0x67/0x80 [ 269.209582][T15654] x64_sys_call+0x2b51/0x3000 [ 269.209613][T15654] do_syscall_64+0xd2/0x200 [ 269.209632][T15654] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 269.209748][T15654] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 269.209790][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.209879][T15654] RIP: 0033:0x7f0b68a4f6c9 [ 269.209897][T15654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.209939][T15654] RSP: 002b:00007f0b674b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.209964][T15654] RAX: ffffffffffffffda RBX: 00007f0b68ca5fa0 RCX: 00007f0b68a4f6c9 [ 269.209981][T15654] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 269.210041][T15654] RBP: 00007f0b674b7090 R08: 0000200000000300 R09: 0000000000000000 [ 269.210069][T15654] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 269.210085][T15654] R13: 00007f0b68ca6038 R14: 00007f0b68ca5fa0 R15: 00007ffda58f0608 [ 269.210109][T15654] [ 269.478945][T15652] lo speed is unknown, defaulting to 1000 [ 269.557059][T15662] netlink: 'syz.0.3721': attribute type 9 has an invalid length. [ 269.565034][ T29] audit: type=1400 audit(1763134883.143:9698): avc: denied { setattr } for pid=15661 comm="syz.0.3721" name="" dev="pipefs" ino=43794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 269.598701][T15664] bridge1: entered promiscuous mode [ 269.706138][T15670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.796913][T15671] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 269.816820][ T29] audit: type=1400 audit(1763134883.403:9699): avc: granted { setsecparam } for pid=15669 comm="syz.9.3725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 269.870913][T15673] loop9: detected capacity change from 0 to 1024 [ 269.909218][T15673] EXT4-fs: Ignoring removed bh option [ 269.971535][T15673] EXT4-fs: inline encryption not supported [ 269.990372][T15673] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 270.014329][T15673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 270.014666][T15683] loop3: detected capacity change from 0 to 512 [ 270.023513][T15673] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.3725: lblock 2 mapped to illegal pblock 2 (length 1) [ 270.073044][T15683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.087630][T15673] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 270.122097][T15673] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.3725: lblock 0 mapped to illegal pblock 48 (length 1) [ 270.173875][T15683] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.184795][T15673] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 270.193623][T15673] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3725: Failed to acquire dquot type 0 [ 270.215839][T15673] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 270.225914][T15673] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.3725: mark_inode_dirty error [ 270.238003][T15673] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 270.284699][T15673] EXT4-fs (loop9): 1 orphan inode deleted [ 270.290947][T15673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.311587][T15672] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm syz.9.3725: lblock 1 mapped to illegal pblock 1 (length 1) [ 270.328005][T15672] Quota error (device loop9): find_next_id: Can't read quota tree block 1 [ 270.336616][T13801] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 270.351181][T13801] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 270.359849][T13801] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:62: Failed to release dquot type 0 [ 270.553522][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.572980][T15416] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 270.590395][T15416] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 270.601166][T15416] EXT4-fs error (device loop9): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 270.730035][T15719] loop0: detected capacity change from 0 to 512 [ 270.740237][T15719] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 270.832690][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.844578][T15719] EXT4-fs (loop0): 1 truncate cleaned up [ 270.850713][T15719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.948916][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.030137][T15738] loop9: detected capacity change from 0 to 512 [ 271.071138][T15738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.084165][T15738] ext4 filesystem being mounted at /16/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.098991][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3750'. [ 271.150025][T15738] lo speed is unknown, defaulting to 1000 [ 271.368924][T15738] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.3750: corrupted inode contents [ 271.400481][T15738] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #18: comm syz.9.3750: mark_inode_dirty error [ 271.439476][T15738] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.3750: corrupted inode contents [ 271.480739][T15738] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #18: comm syz.9.3750: mark_inode_dirty error [ 271.504567][T15738] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #18: comm syz.9.3750: mark inode dirty (error -117) [ 271.526900][T15738] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 271.716904][T15766] FAULT_INJECTION: forcing a failure. [ 271.716904][T15766] name failslab, interval 1, probability 0, space 0, times 0 [ 271.729643][T15766] CPU: 1 UID: 0 PID: 15766 Comm: syz.4.3757 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 271.729800][T15766] Tainted: [W]=WARN [ 271.729809][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 271.729899][T15766] Call Trace: [ 271.729905][T15766] [ 271.729912][T15766] __dump_stack+0x1d/0x30 [ 271.729934][T15766] dump_stack_lvl+0xe8/0x140 [ 271.729953][T15766] dump_stack+0x15/0x1b [ 271.729970][T15766] should_fail_ex+0x265/0x280 [ 271.730024][T15766] should_failslab+0x8c/0xb0 [ 271.730091][T15766] kmem_cache_alloc_noprof+0x50/0x480 [ 271.730128][T15766] ? flock_lock_inode+0x135/0xf60 [ 271.730167][T15766] flock_lock_inode+0x135/0xf60 [ 271.730200][T15766] ? file_has_perm+0x35c/0x3a0 [ 271.730310][T15766] locks_lock_inode_wait+0x6f/0x2a0 [ 271.730345][T15766] ? selinux_file_lock+0x38/0x50 [ 271.730396][T15766] __se_sys_flock+0x2f1/0x3b0 [ 271.730429][T15766] __x64_sys_flock+0x31/0x40 [ 271.730474][T15766] x64_sys_call+0x1e5a/0x3000 [ 271.730503][T15766] do_syscall_64+0xd2/0x200 [ 271.730528][T15766] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 271.730555][T15766] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 271.730595][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.730615][T15766] RIP: 0033:0x7f29ca24f6c9 [ 271.730630][T15766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.730802][T15766] RSP: 002b:00007f29c8cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 271.730823][T15766] RAX: ffffffffffffffda RBX: 00007f29ca4a5fa0 RCX: 00007f29ca24f6c9 [ 271.730835][T15766] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000006 [ 271.730847][T15766] RBP: 00007f29c8cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 271.730858][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.730870][T15766] R13: 00007f29ca4a6038 R14: 00007f29ca4a5fa0 R15: 00007ffebf5a0048 [ 271.730893][T15766] [ 271.950389][T15769] loop4: detected capacity change from 0 to 512 [ 271.984183][T15769] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 272.014574][T15769] EXT4-fs (loop4): mount failed [ 272.185468][T15788] loop7: detected capacity change from 0 to 512 [ 272.206089][T15788] /dev/loop7: Can't open blockdev [ 272.260332][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.346796][T15801] loop0: detected capacity change from 0 to 512 [ 272.363250][T15801] EXT4-fs: Mount option(s) incompatible with ext3 [ 272.383709][T15803] netlink: 996 bytes leftover after parsing attributes in process `syz.9.3769'. [ 272.400986][T15801] loop0: detected capacity change from 0 to 256 [ 272.476327][T15809] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3773'. [ 272.502596][T15799] lo speed is unknown, defaulting to 1000 [ 272.549689][T15807] pim6reg: entered allmulticast mode [ 272.598687][T15807] pim6reg: left allmulticast mode [ 272.655635][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3776'. [ 272.686286][T15821] hsr_slave_1 (unregistering): left promiscuous mode [ 272.998473][T15836] loop4: detected capacity change from 0 to 512 [ 273.015495][T15836] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.055537][T15836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.083080][T15840] loop3: detected capacity change from 0 to 512 [ 273.104629][T15840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 273.114651][T15836] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.135559][T15840] EXT4-fs (loop3): 1 truncate cleaned up [ 273.141765][T15840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.161714][T15847] loop0: detected capacity change from 0 to 1024 [ 273.171046][T15848] loop7: detected capacity change from 0 to 512 [ 273.197199][ T7169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.227207][T15848] EXT4-fs: Mount option(s) incompatible with ext3 [ 273.235101][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.244758][T15847] EXT4-fs: Ignoring removed orlov option [ 273.261422][T15847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.281120][T15848] loop7: detected capacity change from 0 to 256 [ 273.458092][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.553043][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3799'. [ 273.568365][T15882] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3798'. [ 273.577622][T15884] loop3: detected capacity change from 0 to 512 [ 273.593499][T15884] EXT4-fs: Ignoring removed bh option [ 273.606713][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3799'. [ 273.628080][T15884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.634462][T15888] loop9: detected capacity change from 0 to 512 [ 273.644793][T15884] ext4 filesystem being mounted at /363/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.668558][T15892] loop4: detected capacity change from 0 to 512 [ 273.676222][T15892] EXT4-fs: Mount option(s) incompatible with ext3 [ 273.685667][T15888] __quota_error: 247 callbacks suppressed [ 273.685684][T15888] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 273.690278][T15882] lo speed is unknown, defaulting to 1000 [ 273.693191][T15888] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 273.722240][T15892] loop4: detected capacity change from 0 to 256 [ 273.725140][T15888] EXT4-fs (loop9): mount failed [ 273.733436][ T29] audit: type=1400 audit(1763134887.313:9946): avc: denied { write } for pid=15883 comm="syz.3.3800" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.755802][ T29] audit: type=1400 audit(1763134887.313:9947): avc: denied { open } for pid=15883 comm="syz.3.3800" path="/363/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 273.781808][ T29] audit: type=1400 audit(1763134887.363:9948): avc: denied { create } for pid=15883 comm="syz.3.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 273.787330][T15881] lo speed is unknown, defaulting to 1000 [ 273.829554][T15888] netlink: 272 bytes leftover after parsing attributes in process `syz.9.3801'. [ 273.890929][ T29] audit: type=1400 audit(1763134887.363:9949): avc: denied { write } for pid=15883 comm="syz.3.3800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 273.911271][ T29] audit: type=1400 audit(1763134887.413:9950): avc: denied { write } for pid=15885 comm="syz.9.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 273.930843][ T29] audit: type=1400 audit(1763134887.413:9951): avc: denied { create } for pid=15885 comm="syz.9.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.951030][ T29] audit: type=1400 audit(1763134887.413:9952): avc: denied { bind } for pid=15885 comm="syz.9.3801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.971056][ T29] audit: type=1400 audit(1763134887.423:9953): avc: denied { ioctl } for pid=15885 comm="syz.9.3801" path="socket:[44678]" dev="sockfs" ino=44678 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.014157][T15897] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 274.020831][T15897] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 274.029035][T15897] vhci_hcd vhci_hcd.0: Device attached [ 274.058556][T15884] siw: device registration error -23 [ 274.071220][T15898] vhci_hcd: connection closed [ 274.071394][T13777] vhci_hcd: stop threads [ 274.080425][T13777] vhci_hcd: release socket [ 274.084933][T13777] vhci_hcd: disconnect device [ 274.199318][T15907] loop4: detected capacity change from 0 to 1024 [ 274.219625][T15907] EXT4-fs: Ignoring removed orlov option [ 274.251293][T15907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.285108][T15910] loop9: detected capacity change from 0 to 4096 [ 274.293910][ T29] audit: type=1326 audit(1763134887.853:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15909 comm="syz.9.3807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7cc1f6c9 code=0x7ffc0000 [ 274.328648][T15910] ext4: Unknown parameter '@' [ 274.350409][T15907] FAULT_INJECTION: forcing a failure. [ 274.350409][T15907] name failslab, interval 1, probability 0, space 0, times 0 [ 274.363156][T15907] CPU: 0 UID: 0 PID: 15907 Comm: syz.4.3806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.363315][T15907] Tainted: [W]=WARN [ 274.363322][T15907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.363334][T15907] Call Trace: [ 274.363341][T15907] [ 274.363348][T15907] __dump_stack+0x1d/0x30 [ 274.363375][T15907] dump_stack_lvl+0xe8/0x140 [ 274.363453][T15907] dump_stack+0x15/0x1b [ 274.363475][T15907] should_fail_ex+0x265/0x280 [ 274.363565][T15907] should_failslab+0x8c/0xb0 [ 274.363600][T15907] __kmalloc_noprof+0xa5/0x570 [ 274.363709][T15907] ? alloc_pipe_info+0x1c9/0x350 [ 274.363803][T15907] alloc_pipe_info+0x1c9/0x350 [ 274.363841][T15907] splice_direct_to_actor+0x592/0x680 [ 274.363915][T15907] ? kstrtouint_from_user+0x9f/0xf0 [ 274.363979][T15907] ? __pfx_direct_splice_actor+0x10/0x10 [ 274.364009][T15907] ? __rcu_read_unlock+0x4f/0x70 [ 274.364043][T15907] ? get_pid_task+0x96/0xd0 [ 274.364143][T15907] ? avc_policy_seqno+0x15/0x30 [ 274.364166][T15907] ? selinux_file_permission+0x1e4/0x320 [ 274.364211][T15907] do_splice_direct+0xda/0x150 [ 274.364308][T15907] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 274.364344][T15907] do_sendfile+0x380/0x650 [ 274.364390][T15907] __x64_sys_sendfile64+0x105/0x150 [ 274.364560][T15907] x64_sys_call+0x2bb4/0x3000 [ 274.364588][T15907] do_syscall_64+0xd2/0x200 [ 274.364677][T15907] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 274.364771][T15907] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 274.364858][T15907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.364879][T15907] RIP: 0033:0x7f29ca24f6c9 [ 274.364903][T15907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.364920][T15907] RSP: 002b:00007f29c8cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.364943][T15907] RAX: ffffffffffffffda RBX: 00007f29ca4a5fa0 RCX: 00007f29ca24f6c9 [ 274.364959][T15907] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 274.364975][T15907] RBP: 00007f29c8cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 274.364991][T15907] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 274.365007][T15907] R13: 00007f29ca4a6038 R14: 00007f29ca4a5fa0 R15: 00007ffebf5a0048 [ 274.365070][T15907] [ 274.704939][ T7169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.733485][T15920] loop4: detected capacity change from 0 to 512 [ 274.819957][T15920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.848376][T15920] ext4 filesystem being mounted at /597/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.920127][T15934] loop9: detected capacity change from 0 to 512 [ 274.951814][T15932] loop7: detected capacity change from 0 to 512 [ 274.965786][T15925] lo speed is unknown, defaulting to 1000 [ 274.966493][T15934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.984618][T15932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.009419][T15934] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.024833][T15938] loop0: detected capacity change from 0 to 512 [ 275.037378][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.059896][T15932] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 275.067952][T15932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 275.090843][T15938] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 275.117319][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3816'. [ 275.172118][T15932] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 275.181670][T15932] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 275.191063][T15932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 275.223952][T15938] EXT4-fs (loop0): mount failed [ 275.324220][T15949] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.3816: corrupted inode contents [ 275.363060][T15949] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #18: comm syz.9.3816: mark_inode_dirty error [ 275.377597][T15938] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3818'. [ 275.391877][T15925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.409131][T15949] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.3816: corrupted inode contents [ 275.443872][T15925] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 275.453632][T15949] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #18: comm syz.9.3816: mark_inode_dirty error [ 275.482606][T15925] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.3813: dx entry: limit 65535 != root limit 120 [ 275.494940][T15925] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3813: Corrupt directory, running e2fsck is recommended [ 275.516513][T15947] lo speed is unknown, defaulting to 1000 [ 275.522410][T15949] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #18: comm syz.9.3816: mark inode dirty (error -117) [ 275.538565][T15946] loop3: detected capacity change from 0 to 32768 [ 275.579530][T15949] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 275.592397][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.812284][ T7169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.151389][T15976] lo speed is unknown, defaulting to 1000 [ 276.181841][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.326480][T15991] loop9: detected capacity change from 0 to 512 [ 276.349952][T15993] FAULT_INJECTION: forcing a failure. [ 276.349952][T15993] name failslab, interval 1, probability 0, space 0, times 0 [ 276.362916][T15993] CPU: 1 UID: 0 PID: 15993 Comm: syz.0.3833 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 276.362955][T15993] Tainted: [W]=WARN [ 276.362964][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.362980][T15993] Call Trace: [ 276.362988][T15993] [ 276.362998][T15993] __dump_stack+0x1d/0x30 [ 276.363034][T15993] dump_stack_lvl+0xe8/0x140 [ 276.363122][T15993] dump_stack+0x15/0x1b [ 276.363145][T15993] should_fail_ex+0x265/0x280 [ 276.363171][T15993] should_failslab+0x8c/0xb0 [ 276.363206][T15993] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 276.363281][T15993] ? __alloc_skb+0x101/0x320 [ 276.363311][T15993] __alloc_skb+0x101/0x320 [ 276.363489][T15993] alloc_skb_with_frags+0x7d/0x470 [ 276.363520][T15993] ? kernel_text_address+0x94/0xb0 [ 276.363552][T15993] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 276.363572][T15993] ? __kernel_text_address+0xd/0x40 [ 276.363646][T15993] sock_alloc_send_pskb+0x430/0x4e0 [ 276.363681][T15993] __ip_append_data+0x18bd/0x2440 [ 276.363716][T15993] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 276.363822][T15993] ? ipv4_mtu+0x210/0x230 [ 276.363889][T15993] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 276.364078][T15993] ip_make_skb+0x137/0x2c0 [ 276.364114][T15993] udp_sendmsg+0x1013/0x13c0 [ 276.364166][T15993] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 276.364214][T15993] ? __pfx_udp_sendmsg+0x10/0x10 [ 276.364245][T15993] inet_sendmsg+0xac/0xd0 [ 276.364273][T15993] __sock_sendmsg+0x102/0x180 [ 276.364327][T15993] ____sys_sendmsg+0x345/0x4e0 [ 276.364432][T15993] ___sys_sendmsg+0x17b/0x1d0 [ 276.364476][T15993] __sys_sendmmsg+0x178/0x300 [ 276.364515][T15993] __x64_sys_sendmmsg+0x57/0x70 [ 276.364597][T15993] x64_sys_call+0x1c4a/0x3000 [ 276.364626][T15993] do_syscall_64+0xd2/0x200 [ 276.364652][T15993] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 276.364758][T15993] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 276.364801][T15993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.364828][T15993] RIP: 0033:0x7f0b68a4f6c9 [ 276.364848][T15993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.364936][T15993] RSP: 002b:00007f0b674b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 276.364925][T15991] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 276.364955][T15993] RAX: ffffffffffffffda RBX: 00007f0b68ca5fa0 RCX: 00007f0b68a4f6c9 [ 276.365004][T15993] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 276.365029][T15993] RBP: 00007f0b674b7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.365124][T15993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.365141][T15993] R13: 00007f0b68ca6038 R14: 00007f0b68ca5fa0 R15: 00007ffda58f0608 [ 276.365170][T15993] [ 276.436910][T15976] chnl_net:caif_netlink_parms(): no params data found [ 276.463838][T15991] EXT4-fs (loop9): mount failed [ 276.675109][T15991] netlink: 272 bytes leftover after parsing attributes in process `syz.9.3831'. [ 276.705354][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.712470][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.723336][T15976] bridge_slave_0: entered allmulticast mode [ 276.730309][T15976] bridge_slave_0: entered promiscuous mode [ 276.739083][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.746364][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.780422][T15976] bridge_slave_1: entered allmulticast mode [ 276.787687][T15976] bridge_slave_1: entered promiscuous mode [ 276.810829][T13750] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.829226][T16020] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3839'. [ 276.852272][T16020] loop3: detected capacity change from 0 to 512 [ 276.867923][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.881288][T13750] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.912591][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.939072][T15976] team0: Port device team_slave_0 added [ 276.950845][T15976] team0: Port device team_slave_1 added [ 276.977612][T13750] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.004883][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.011951][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.038008][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.052234][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.056636][T16036] loop7: detected capacity change from 0 to 512 [ 277.059386][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.091449][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.092086][T16036] /dev/loop7: Can't open blockdev [ 277.115217][T16036] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3845'. [ 277.138097][T15976] hsr_slave_0: entered promiscuous mode [ 277.144204][T15976] hsr_slave_1: entered promiscuous mode [ 277.150299][T15976] debugfs: 'hsr0' already exists in 'hsr' [ 277.156106][T15976] Cannot create hsr debugfs directory [ 277.163711][T13750] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.268571][T16036] lo speed is unknown, defaulting to 1000 [ 277.282531][T13750] bridge_slave_1: left allmulticast mode [ 277.288333][T13750] bridge_slave_1: left promiscuous mode [ 277.294094][T16046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3848'. [ 277.294193][T13750] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.311166][T13750] bridge_slave_0: left allmulticast mode [ 277.316885][T13750] bridge_slave_0: left promiscuous mode [ 277.322587][T13750] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.787437][T16053] loop9: detected capacity change from 0 to 512 [ 277.794441][T16053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.805899][T16053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.818658][T16053] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.832301][T16053] netlink: 67 bytes leftover after parsing attributes in process `syz.9.3850'. [ 277.844157][T13750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.854331][T13750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.863806][T13750] bond0 (unregistering): Released all slaves [ 277.921346][T13750] tipc: Left network mode [ 277.926321][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.023310][T13750] hsr_slave_0: left promiscuous mode [ 278.038820][T13750] hsr_slave_1: left promiscuous mode [ 278.049094][T13750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.056618][T13750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.068867][T16076] loop3: detected capacity change from 0 to 512 [ 278.076112][T16076] EXT4-fs: Mount option(s) incompatible with ext3 [ 278.077990][T13750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.090000][T13750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.106054][T16076] loop3: detected capacity change from 0 to 256 [ 278.112599][T13750] veth1_macvtap: left promiscuous mode [ 278.122378][T13750] veth0_macvtap: left promiscuous mode [ 278.128068][T13750] veth0_vlan: left promiscuous mode [ 278.208269][T13750] team0 (unregistering): Port device team_slave_1 removed [ 278.222193][T13750] team0 (unregistering): Port device team_slave_0 removed [ 278.222730][T16085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3862'. [ 278.267568][T16078] bridge2: entered promiscuous mode [ 278.385799][T15976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.394960][T15976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.404422][T15976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 278.425165][T15976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 278.468107][T16099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3866'. [ 278.522091][T15976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.539036][T16119] loop0: detected capacity change from 0 to 512 [ 278.542632][T15976] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.557740][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.564885][T13801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.585588][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.592712][T13801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.605353][T16119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.619759][T16119] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.634418][T16125] bridge6: entered promiscuous mode [ 278.660475][T15976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.671039][T15976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.716494][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 278.716511][ T29] audit: type=1400 audit(1763134892.303:10168): avc: denied { create } for pid=16116 comm="syz.0.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.726531][T16132] loop3: detected capacity change from 0 to 1024 [ 278.774624][T16132] EXT4-fs: Ignoring removed orlov option [ 278.804162][ T29] audit: type=1400 audit(1763134892.333:10169): avc: denied { ioctl } for pid=16116 comm="syz.0.3871" path="socket:[46214]" dev="sockfs" ino=46214 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 278.829152][ T29] audit: type=1400 audit(1763134892.343:10170): avc: denied { create } for pid=16116 comm="syz.0.3871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 278.868380][T16132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.910864][T15976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.951958][ T29] audit: type=1400 audit(1763134892.533:10171): avc: denied { read open } for pid=16131 comm="syz.3.3874" path="/382/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.981667][ T29] audit: type=1400 audit(1763134892.533:10172): avc: denied { write } for pid=16131 comm="syz.3.3874" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 279.003596][ T29] audit: type=1400 audit(1763134892.533:10173): avc: denied { ioctl } for pid=16131 comm="syz.3.3874" path="/382/bus/bus" dev="loop3" ino=18 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 279.049240][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.063272][T16148] loop9: detected capacity change from 0 to 512 [ 279.076524][ T29] audit: type=1326 audit(1763134892.663:10174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.7.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbd24f6c9 code=0x7ffc0000 [ 279.082527][T16148] EXT4-fs: Mount option(s) incompatible with ext3 [ 279.100179][ T29] audit: type=1326 audit(1763134892.663:10175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16143 comm="syz.7.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bbd24f6c9 code=0x7ffc0000 [ 279.178399][T16148] loop9: detected capacity change from 0 to 256 [ 279.213847][ T29] audit: type=1326 audit(1763134892.783:10176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.3.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 279.237550][ T29] audit: type=1326 audit(1763134892.783:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.3.3880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 279.291580][T16166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3882'. [ 279.308513][T15976] veth0_vlan: entered promiscuous mode [ 279.337446][T15976] veth1_vlan: entered promiscuous mode [ 279.359279][T15976] veth0_macvtap: entered promiscuous mode [ 279.369221][T15976] veth1_macvtap: entered promiscuous mode [ 279.381165][T15976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.391978][T16169] bridge3: entered promiscuous mode [ 279.404494][T15976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.416551][T13750] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.427924][T13750] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.445413][T13750] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.461161][T13750] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.496700][T16179] loop9: detected capacity change from 0 to 512 [ 279.563231][T16179] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 279.583516][T16179] EXT4-fs (loop9): mount failed [ 279.597534][T16179] netlink: 272 bytes leftover after parsing attributes in process `syz.9.3886'. [ 279.612436][T16188] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3888'. [ 279.723873][T16200] FAULT_INJECTION: forcing a failure. [ 279.723873][T16200] name failslab, interval 1, probability 0, space 0, times 0 [ 279.736573][T16200] CPU: 1 UID: 0 PID: 16200 Comm: syz.4.3891 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 279.736603][T16200] Tainted: [W]=WARN [ 279.736609][T16200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.736620][T16200] Call Trace: [ 279.736627][T16200] [ 279.736712][T16200] __dump_stack+0x1d/0x30 [ 279.736735][T16200] dump_stack_lvl+0xe8/0x140 [ 279.736759][T16200] dump_stack+0x15/0x1b [ 279.736799][T16200] should_fail_ex+0x265/0x280 [ 279.736822][T16200] should_failslab+0x8c/0xb0 [ 279.736880][T16200] kmem_cache_alloc_noprof+0x50/0x480 [ 279.736913][T16200] ? security_inode_alloc+0x37/0x100 [ 279.736938][T16200] security_inode_alloc+0x37/0x100 [ 279.736960][T16200] inode_init_always_gfp+0x4b7/0x500 [ 279.736992][T16200] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 279.737034][T16200] alloc_inode+0x58/0x170 [ 279.737061][T16200] new_inode+0x1d/0xe0 [ 279.737091][T16200] shmem_get_inode+0x244/0x750 [ 279.737132][T16200] __shmem_file_setup+0x113/0x210 [ 279.737227][T16200] shmem_file_setup+0x3b/0x50 [ 279.737250][T16200] __se_sys_memfd_create+0x2c3/0x590 [ 279.737281][T16200] __x64_sys_memfd_create+0x31/0x40 [ 279.737350][T16200] x64_sys_call+0x2ac2/0x3000 [ 279.737374][T16200] do_syscall_64+0xd2/0x200 [ 279.737448][T16200] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.737489][T16200] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.737523][T16200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.737600][T16200] RIP: 0033:0x7f4f0541f6c9 [ 279.737637][T16200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.737660][T16200] RSP: 002b:00007f4f03e65e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 279.737685][T16200] RAX: ffffffffffffffda RBX: 00000000000005fd RCX: 00007f4f0541f6c9 [ 279.737700][T16200] RDX: 00007f4f03e65ef0 RSI: 0000000000000000 RDI: 00007f4f054a2960 [ 279.737713][T16200] RBP: 0000200000000c00 R08: 00007f4f03e65bb7 R09: 00007f4f03e65e40 [ 279.737729][T16200] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 279.737746][T16200] R13: 00007f4f03e65ef0 R14: 00007f4f03e65eb0 R15: 00002000000002c0 [ 279.737849][T16200] [ 280.043416][T16210] loop9: detected capacity change from 0 to 512 [ 280.050694][T16210] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 280.072448][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.097596][T16210] EXT4-fs (loop9): 1 truncate cleaned up [ 280.104527][T16210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.121251][T16214] loop0: detected capacity change from 0 to 512 [ 280.133229][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.150099][T16214] EXT4-fs: Mount option(s) incompatible with ext3 [ 280.207772][T16214] loop0: detected capacity change from 0 to 256 [ 280.349534][T16232] bridge7: entered promiscuous mode [ 280.628000][T16257] loop9: detected capacity change from 0 to 512 [ 280.637549][T16257] EXT4-fs: Mount option(s) incompatible with ext3 [ 280.656900][T16257] loop9: detected capacity change from 0 to 256 [ 280.694040][T16265] FAULT_INJECTION: forcing a failure. [ 280.694040][T16265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.707255][T16265] CPU: 1 UID: 0 PID: 16265 Comm: syz.3.3921 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.707287][T16265] Tainted: [W]=WARN [ 280.707294][T16265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.707306][T16265] Call Trace: [ 280.707372][T16265] [ 280.707382][T16265] __dump_stack+0x1d/0x30 [ 280.707411][T16265] dump_stack_lvl+0xe8/0x140 [ 280.707434][T16265] dump_stack+0x15/0x1b [ 280.707451][T16265] should_fail_ex+0x265/0x280 [ 280.707553][T16265] should_fail+0xb/0x20 [ 280.707568][T16265] should_fail_usercopy+0x1a/0x20 [ 280.707594][T16265] strncpy_from_user+0x25/0x230 [ 280.707624][T16265] __se_sys_memfd_create+0x1ff/0x590 [ 280.707681][T16265] __x64_sys_memfd_create+0x31/0x40 [ 280.707708][T16265] x64_sys_call+0x2ac2/0x3000 [ 280.707738][T16265] do_syscall_64+0xd2/0x200 [ 280.707841][T16265] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.707869][T16265] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.707901][T16265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.707926][T16265] RIP: 0033:0x7fa1449ef6c9 [ 280.708004][T16265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.708023][T16265] RSP: 002b:00007fa143456e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 280.708042][T16265] RAX: ffffffffffffffda RBX: 0000000000000531 RCX: 00007fa1449ef6c9 [ 280.708058][T16265] RDX: 00007fa143456ef0 RSI: 0000000000000000 RDI: 00007fa144a72960 [ 280.708075][T16265] RBP: 0000200000000640 R08: 00007fa143456bb7 R09: 00007fa143456e40 [ 280.708091][T16265] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 280.708104][T16265] R13: 00007fa143456ef0 R14: 00007fa143456eb0 R15: 00002000000001c0 [ 280.708130][T16265] [ 280.920222][T16263] SELinux: failed to load policy [ 281.051639][T16273] hub 1-0:1.0: USB hub found [ 281.066024][T16273] hub 1-0:1.0: 8 ports detected [ 281.245834][T16282] lo speed is unknown, defaulting to 1000 [ 281.735930][T16294] loop9: detected capacity change from 0 to 1024 [ 281.743066][T16294] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 281.754068][T16294] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 281.774259][T16294] JBD2: no valid journal superblock found [ 281.780176][T16294] EXT4-fs (loop9): Could not load journal inode [ 281.795739][T16305] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.830536][T16307] FAULT_INJECTION: forcing a failure. [ 281.830536][T16307] name failslab, interval 1, probability 0, space 0, times 0 [ 281.851453][T16307] CPU: 0 UID: 0 PID: 16307 Comm: syz.0.3936 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.851543][T16307] Tainted: [W]=WARN [ 281.851551][T16307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.851568][T16307] Call Trace: [ 281.851576][T16307] [ 281.851584][T16307] __dump_stack+0x1d/0x30 [ 281.851659][T16307] dump_stack_lvl+0xe8/0x140 [ 281.851730][T16307] dump_stack+0x15/0x1b [ 281.851752][T16307] should_fail_ex+0x265/0x280 [ 281.851771][T16307] should_failslab+0x8c/0xb0 [ 281.851889][T16307] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 281.851927][T16307] ? __alloc_skb+0x101/0x320 [ 281.852000][T16307] __alloc_skb+0x101/0x320 [ 281.852039][T16307] netlink_alloc_large_skb+0xbf/0xf0 [ 281.852080][T16307] netlink_sendmsg+0x3cf/0x6b0 [ 281.852106][T16307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.852130][T16307] __sock_sendmsg+0x145/0x180 [ 281.852161][T16307] ____sys_sendmsg+0x31e/0x4e0 [ 281.852256][T16307] ___sys_sendmsg+0x17b/0x1d0 [ 281.852286][T16307] __x64_sys_sendmsg+0xd4/0x160 [ 281.852307][T16307] x64_sys_call+0x191e/0x3000 [ 281.852328][T16307] do_syscall_64+0xd2/0x200 [ 281.852402][T16307] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 281.852437][T16307] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 281.852509][T16307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.852536][T16307] RIP: 0033:0x7f0b68a4f6c9 [ 281.852583][T16307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.852613][T16307] RSP: 002b:00007f0b674b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.852631][T16307] RAX: ffffffffffffffda RBX: 00007f0b68ca5fa0 RCX: 00007f0b68a4f6c9 [ 281.852643][T16307] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 281.852654][T16307] RBP: 00007f0b674b7090 R08: 0000000000000000 R09: 0000000000000000 [ 281.852708][T16307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.852720][T16307] R13: 00007f0b68ca6038 R14: 00007f0b68ca5fa0 R15: 00007ffda58f0608 [ 281.852737][T16307] [ 282.078445][T16311] loop7: detected capacity change from 0 to 1024 [ 282.085775][T16311] EXT4-fs: Ignoring removed orlov option [ 282.091639][T16313] loop3: detected capacity change from 0 to 1024 [ 282.102342][T16311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.117816][T16313] EXT4-fs: Ignoring removed bh option [ 282.123431][T16313] EXT4-fs: inline encryption not supported [ 282.129991][T16313] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 282.142648][T16313] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 282.235325][T16313] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3935: lblock 2 mapped to illegal pblock 2 (length 1) [ 282.276394][T16313] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3935: lblock 0 mapped to illegal pblock 48 (length 1) [ 282.293262][T16313] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.3935: Failed to acquire dquot type 0 [ 282.307104][T16313] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 282.316878][T16313] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3935: mark_inode_dirty error [ 282.330226][T16313] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 282.360451][T16328] loop0: detected capacity change from 0 to 512 [ 282.371552][T16313] EXT4-fs (loop3): 1 orphan inode deleted [ 282.378266][T16328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 282.390786][T13750] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.406300][T16313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.422252][T13750] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 282.423973][T16328] EXT4-fs (loop0): 1 truncate cleaned up [ 282.439994][T16328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.442021][T16330] loop9: detected capacity change from 0 to 512 [ 282.473914][T16308] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm syz.3.3935: lblock 1 mapped to illegal pblock 1 (length 1) [ 282.492932][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.503289][ T6379] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.532165][T16330] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 282.571171][T16330] EXT4-fs (loop9): 1 truncate cleaned up [ 282.586255][T16330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.635937][T16347] __nla_validate_parse: 5 callbacks suppressed [ 282.635956][T16347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3949'. [ 282.757279][ T9863] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 282.783656][ T9863] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 282.803418][ T9863] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 282.825572][T16358] tmpfs: Bad value for 'mpol' [ 282.841030][T16359] loop4: detected capacity change from 0 to 512 [ 282.847441][T16358] TCP: TCP_TX_DELAY enabled [ 282.884839][T16359] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 282.932658][T16359] EXT4-fs (loop4): mount failed [ 282.989324][T16359] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3955'. [ 283.060888][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3959'. [ 283.067289][T16353] lo speed is unknown, defaulting to 1000 [ 283.139576][T16388] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3962'. [ 283.148683][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3962'. [ 283.157880][T16388] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3962'. [ 283.223195][T16397] loop4: detected capacity change from 0 to 128 [ 283.233396][T16353] chnl_net:caif_netlink_parms(): no params data found [ 283.331009][T16404] loop4: detected capacity change from 0 to 512 [ 283.339400][T16388] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3962'. [ 283.348431][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3962'. [ 283.357434][T16388] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3962'. [ 283.388751][T16404] EXT4-fs: Mount option(s) incompatible with ext3 [ 283.399368][T16353] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.406481][T16353] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.436377][T16353] bridge_slave_0: entered allmulticast mode [ 283.445005][T16404] loop4: detected capacity change from 0 to 256 [ 283.468166][T16353] bridge_slave_0: entered promiscuous mode [ 283.474387][T16388] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3962'. [ 283.486998][T16353] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.494157][T16353] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.526724][T16353] bridge_slave_1: entered allmulticast mode [ 283.780498][T16353] bridge_slave_1: entered promiscuous mode [ 283.838647][T16353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.868585][T16353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.929999][T16353] team0: Port device team_slave_0 added [ 283.939203][T16353] team0: Port device team_slave_1 added [ 283.968182][T16353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.975301][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.001300][T16353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.039610][T16353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.046778][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.072796][T16353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.110620][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 284.110658][ T29] audit: type=1326 audit(1763134897.693:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.132310][T16429] loop4: detected capacity change from 0 to 1024 [ 284.145134][ T29] audit: type=1326 audit(1763134897.693:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.171202][ T29] audit: type=1326 audit(1763134897.693:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.194790][ T29] audit: type=1326 audit(1763134897.693:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.196104][T16429] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 284.218394][ T29] audit: type=1326 audit(1763134897.693:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.229328][T16429] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 284.253181][ T29] audit: type=1326 audit(1763134897.693:10286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.286339][ T29] audit: type=1326 audit(1763134897.693:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.308341][T16438] loop0: detected capacity change from 0 to 512 [ 284.310459][ T29] audit: type=1326 audit(1763134897.693:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.340704][ T29] audit: type=1326 audit(1763134897.693:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.341946][T16429] JBD2: no valid journal superblock found [ 284.364299][ T29] audit: type=1326 audit(1763134897.693:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16432 comm="syz.3.3975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fa1449ef6c9 code=0x7ffc0000 [ 284.370071][T16429] EXT4-fs (loop4): Could not load journal inode [ 284.413233][T16438] ext4 filesystem being mounted at /206/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.435972][T16444] loop3: detected capacity change from 0 to 512 [ 284.447206][T16353] hsr_slave_0: entered promiscuous mode [ 284.453390][T16353] hsr_slave_1: entered promiscuous mode [ 284.459860][T16353] debugfs: 'hsr0' already exists in 'hsr' [ 284.465337][T16444] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 284.465679][T16353] Cannot create hsr debugfs directory [ 284.492285][T16447] loop9: detected capacity change from 0 to 512 [ 284.529252][T16444] EXT4-fs (loop3): mount failed [ 284.570524][T16447] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 284.581466][T16451] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #18: comm syz.0.3978: corrupted inode contents [ 284.593940][T16451] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #18: comm syz.0.3978: mark_inode_dirty error [ 284.606992][T16444] netlink: 'syz.3.3979': attribute type 3 has an invalid length. [ 284.607646][T16447] EXT4-fs (loop9): 1 truncate cleaned up [ 284.620604][T16451] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #18: comm syz.0.3978: corrupted inode contents [ 284.633504][T16451] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #18: comm syz.0.3978: mark_inode_dirty error [ 284.713964][T16438] lo speed is unknown, defaulting to 1000 [ 284.733218][T16451] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #18: comm syz.0.3978: mark inode dirty (error -117) [ 284.756585][T16451] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 284.773613][T13777] bridge_slave_1: left allmulticast mode [ 284.779494][T13777] bridge_slave_1: left promiscuous mode [ 284.785235][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.795548][T13777] bridge_slave_0: left allmulticast mode [ 284.801290][T13777] bridge_slave_0: left promiscuous mode [ 284.807020][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.825879][T16463] loop3: detected capacity change from 0 to 512 [ 284.832486][T16463] EXT4-fs: Ignoring removed bh option [ 284.858355][T16463] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.872292][T13777] bond1 (unregistering): (slave erspan0): Releasing active interface [ 284.898404][T16463] siw: device registration error -23 [ 284.904910][T16463] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 284.911537][T16463] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 284.919748][T16463] vhci_hcd vhci_hcd.0: Device attached [ 284.937667][T16469] vhci_hcd: connection closed [ 284.937887][T13750] vhci_hcd: stop threads [ 284.947040][T13750] vhci_hcd: release socket [ 284.951516][T13750] vhci_hcd: disconnect device [ 285.445763][T13777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.457599][T13777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.468990][T13777] bond0 (unregistering): Released all slaves [ 285.478041][T13777] bond1 (unregistering): Released all slaves [ 285.526446][T13777] tipc: Disabling bearer [ 285.531723][T13777] tipc: Left network mode [ 285.556914][T13777] hsr_slave_0: left promiscuous mode [ 285.563286][T13777] hsr_slave_1: left promiscuous mode [ 285.569910][T13777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.579342][T13777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.619088][T13777] team0 (unregistering): Port device team_slave_1 removed [ 285.629339][T13777] team0 (unregistering): Port device team_slave_0 removed [ 285.649097][T16493] loop4: detected capacity change from 0 to 1024 [ 285.656603][T16493] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 285.667794][T16493] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 285.678706][T16493] JBD2: no valid journal superblock found [ 285.684653][T16493] EXT4-fs (loop4): Could not load journal inode [ 285.745808][T16502] loop4: detected capacity change from 0 to 1024 [ 285.752693][T16502] EXT4-fs: Ignoring removed orlov option [ 285.805359][T15976] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 285.823979][T15976] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 285.868304][T16353] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 285.881862][T16353] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 285.890919][T16353] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 285.900109][T16353] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 285.923740][T16520] loop9: detected capacity change from 0 to 512 [ 285.936638][T16520] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.945035][T16353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.960088][T16353] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.974476][T13776] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.981583][T13776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.997056][T13796] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.004234][T13796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.057173][T13777] IPVS: stop unused estimator thread 0... [ 286.125475][T13777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.157667][T16527] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 286.209597][T13777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.251715][T16353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.287993][T13777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.368774][T13777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.493615][T13777] bridge_slave_1: left allmulticast mode [ 286.499449][T13777] bridge_slave_1: left promiscuous mode [ 286.505295][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.513999][T13777] bridge_slave_0: left allmulticast mode [ 286.519798][T13777] bridge_slave_0: left promiscuous mode [ 286.525501][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.618005][T13777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.628181][T13777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.637874][T13777] bond0 (unregistering): Released all slaves [ 286.656935][T16531] lo speed is unknown, defaulting to 1000 [ 286.702540][T16553] loop3: detected capacity change from 0 to 1024 [ 286.711777][T16553] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 286.722922][T16553] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 286.728177][T16353] veth0_vlan: entered promiscuous mode [ 286.739742][T16553] JBD2: no valid journal superblock found [ 286.745563][T16553] EXT4-fs (loop3): Could not load journal inode [ 286.778688][T13777] hsr_slave_0: left promiscuous mode [ 286.784938][T13777] hsr_slave_1: left promiscuous mode [ 286.790621][T13777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.798052][T13777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.805899][T13777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.813426][T13777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.823718][T13777] veth1_macvtap: left promiscuous mode [ 286.829351][T13777] veth0_macvtap: left promiscuous mode [ 286.835202][T13777] veth1_vlan: left promiscuous mode [ 286.840460][T13777] veth0_vlan: left promiscuous mode [ 286.906545][T13777] team0 (unregistering): Port device team_slave_1 removed [ 286.916649][T13777] team0 (unregistering): Port device team_slave_0 removed [ 286.968895][T15416] EXT4-fs unmount: 11 callbacks suppressed [ 286.968916][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.999276][T16353] veth1_vlan: entered promiscuous mode [ 287.017010][T16531] chnl_net:caif_netlink_parms(): no params data found [ 287.044488][T16353] veth0_macvtap: entered promiscuous mode [ 287.167002][T16353] veth1_macvtap: entered promiscuous mode [ 287.205974][T16531] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.213220][T16531] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.226723][T16531] bridge_slave_0: entered allmulticast mode [ 287.233523][T16531] bridge_slave_0: entered promiscuous mode [ 287.241090][T16531] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.248258][T16531] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.255698][T16531] bridge_slave_1: entered allmulticast mode [ 287.262200][T16531] bridge_slave_1: entered promiscuous mode [ 287.269744][T16353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.281645][T16353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.304532][T13796] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.314764][T16531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.325501][T13796] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.336022][T16531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.345273][T13796] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.360499][T13789] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.361121][T16589] loop9: detected capacity change from 0 to 512 [ 287.386280][T16589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.398949][T16589] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.426717][T16531] team0: Port device team_slave_0 added [ 287.433577][T16531] team0: Port device team_slave_1 added [ 287.443230][T16594] loop0: detected capacity change from 0 to 512 [ 287.453899][T16594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.470949][T16595] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.4012: corrupted inode contents [ 287.489601][T16531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.496637][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.522572][T16531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.533575][T16595] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #18: comm syz.9.4012: mark_inode_dirty error [ 287.537206][T16589] lo speed is unknown, defaulting to 1000 [ 287.546550][T16594] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4013: invalid indirect mapped block 83886080 (level 1) [ 287.560739][T16531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.571974][T16531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.572197][T16595] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.4012: corrupted inode contents [ 287.598057][T16531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.643156][T16595] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #18: comm syz.9.4012: mark_inode_dirty error [ 287.655596][T16594] EXT4-fs (loop0): Remounting filesystem read-only [ 287.662457][T16594] EXT4-fs (loop0): 1 orphan inode deleted [ 287.667726][T16601] loop7: detected capacity change from 0 to 512 [ 287.668329][T16594] EXT4-fs (loop0): 1 truncate cleaned up [ 287.674911][T16595] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #18: comm syz.9.4012: mark inode dirty (error -117) [ 287.681814][T16594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.700384][T16595] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 287.713940][T16601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.728234][T16601] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.746343][T16531] hsr_slave_0: entered promiscuous mode [ 287.757941][T16531] hsr_slave_1: entered promiscuous mode [ 287.877855][T16609] loop3: detected capacity change from 0 to 512 [ 287.918208][T16609] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.942927][T16609] EXT4-fs (loop3): mount failed [ 287.972867][T16609] __nla_validate_parse: 14 callbacks suppressed [ 287.972883][T16609] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4016'. [ 288.094574][T16613] bridge8: entered promiscuous mode [ 288.121051][T16615] loop3: detected capacity change from 0 to 512 [ 288.135748][T16615] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 288.151413][T16615] EXT4-fs (loop3): mount failed [ 288.162917][T16615] netlink: 'syz.3.4018': attribute type 3 has an invalid length. [ 288.175979][T16531] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 288.185356][T16531] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 288.194366][T16531] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 288.203047][T16531] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.239229][T16531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.256274][T16531] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.270534][T13796] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.277767][T13796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.289232][T13796] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.296409][T13796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.305182][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.329648][T16531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.341433][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.436763][T16531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.464287][T16637] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 288.544378][T16353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.561570][T16647] loop9: detected capacity change from 0 to 512 [ 288.590039][T16647] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 288.665477][T16647] EXT4-fs (loop9): 1 truncate cleaned up [ 288.678642][T16647] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.715835][T16531] veth0_vlan: entered promiscuous mode [ 288.723397][T16531] veth1_vlan: entered promiscuous mode [ 288.807711][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.824807][T16531] veth0_macvtap: entered promiscuous mode [ 288.832646][T16531] veth1_macvtap: entered promiscuous mode [ 288.845881][T16531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.870145][T16531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.889785][T13796] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.904444][T13796] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.922437][T13789] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.935426][T13789] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.961577][T16674] loop3: detected capacity change from 0 to 512 [ 288.976557][T16674] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 289.008252][T16674] EXT4-fs (loop3): mount failed [ 289.020209][T16674] netlink: 272 bytes leftover after parsing attributes in process `syz.3.4027'. [ 289.083689][T16691] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.087842][T16688] loop3: detected capacity change from 0 to 1024 [ 289.103485][T16688] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 289.114609][T16688] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 289.125506][T16688] JBD2: no valid journal superblock found [ 289.131272][T16688] EXT4-fs (loop3): Could not load journal inode [ 289.154403][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 289.154459][ T29] audit: type=1400 audit(1763134902.743:10364): avc: granted { setsecparam } for pid=16689 comm="syz.5.4033" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 289.180340][T16694] loop5: detected capacity change from 0 to 1024 [ 289.189935][T16694] EXT4-fs: Ignoring removed bh option [ 289.230490][T16694] EXT4-fs: inline encryption not supported [ 289.251219][T16694] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 289.264596][T16694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 289.276583][T16694] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.4033: lblock 2 mapped to illegal pblock 2 (length 1) [ 289.297818][T16694] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 289.307901][ T29] audit: type=1326 audit(1763134902.893:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 289.331598][ T29] audit: type=1326 audit(1763134902.893:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 289.331877][T16694] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.4033: lblock 0 mapped to illegal pblock 48 (length 1) [ 289.355861][ T29] audit: type=1326 audit(1763134902.913:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 289.394012][ T29] audit: type=1326 audit(1763134902.973:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 289.417897][ T29] audit: type=1326 audit(1763134903.003:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 289.442287][T16694] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 289.451404][T16694] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4033: Failed to acquire dquot type 0 [ 289.463787][ T29] audit: type=1326 audit(1763134903.003:10370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 289.487469][ T29] audit: type=1326 audit(1763134903.003:10371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16701 comm="syz.0.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b68a4f6c9 code=0x7ffc0000 [ 289.511536][T16694] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 289.521570][T16694] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4033: mark_inode_dirty error [ 289.536542][T16694] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 289.554740][T16694] EXT4-fs (loop5): 1 orphan inode deleted [ 289.566023][T16706] bridge5: entered promiscuous mode [ 289.572055][T16694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.585874][T13776] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 289.612844][T13776] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 289.622915][T16712] loop0: detected capacity change from 0 to 512 [ 289.635335][T16691] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.4033: lblock 1 mapped to illegal pblock 1 (length 1) [ 289.660961][T16712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.683160][T16531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.686578][T16712] ext4 filesystem being mounted at /219/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.704311][T16531] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 289.717384][T16719] loop7: detected capacity change from 0 to 1024 [ 289.724737][T16719] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 289.735663][T16719] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 289.744491][T16531] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 289.748417][T16712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4042'. [ 289.757186][T16531] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 289.766802][T16719] JBD2: no valid journal superblock found [ 289.780927][T16719] EXT4-fs (loop7): Could not load journal inode [ 289.798180][T16712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #18: comm syz.0.4042: corrupted inode contents [ 289.810280][T16712] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #18: comm syz.0.4042: mark_inode_dirty error [ 289.822165][T16712] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #18: comm syz.0.4042: corrupted inode contents [ 289.835582][T16712] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #18: comm syz.0.4042: mark_inode_dirty error [ 289.848347][T16712] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #18: comm syz.0.4042: mark inode dirty (error -117) [ 289.867375][T16725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4047'. [ 289.873871][T16712] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 289.876510][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4047'. [ 289.894646][T16725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4047'. [ 289.938439][T16728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.945637][T16725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4047'. [ 289.962853][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4047'. [ 289.971893][T16725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4047'. [ 290.002394][T16726] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4045'. [ 290.059275][T16736] loop9: detected capacity change from 0 to 1024 [ 290.066298][T16736] EXT4-fs: Ignoring removed bh option [ 290.073482][T16736] EXT4-fs: inline encryption not supported [ 290.082320][T16736] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.110437][T16738] loop7: detected capacity change from 0 to 512 [ 290.113858][T16736] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 290.158653][T16736] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.4048: lblock 2 mapped to illegal pblock 2 (length 1) [ 290.173488][T16738] EXT4-fs: Ignoring removed bh option [ 290.202695][T16738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.226262][T16736] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.4048: lblock 0 mapped to illegal pblock 48 (length 1) [ 290.245869][T16738] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.436120][T16736] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4048: Failed to acquire dquot type 0 [ 290.453578][T16738] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 290.465826][T16736] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 290.483998][T16736] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.4048: mark_inode_dirty error [ 290.569744][T16738] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 290.576411][T16738] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 290.584587][T16738] vhci_hcd vhci_hcd.0: Device attached [ 290.591307][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.592007][T16746] vhci_hcd: connection closed [ 290.600599][T16736] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 290.600826][T13776] vhci_hcd: stop threads [ 290.619935][T13776] vhci_hcd: release socket [ 290.624379][T13776] vhci_hcd: disconnect device [ 290.624446][T16736] EXT4-fs (loop9): 1 orphan inode deleted [ 290.643823][T13789] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:50: lblock 1 mapped to illegal pblock 1 (length 1) [ 290.669056][T13789] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:50: Failed to release dquot type 0 [ 290.681458][T16736] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.778406][T16734] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm syz.9.4048: lblock 1 mapped to illegal pblock 1 (length 1) [ 290.780466][T16759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.841369][T16763] loop3: detected capacity change from 0 to 128 [ 290.849840][T16759] loop5: detected capacity change from 0 to 1024 [ 290.862568][T16759] EXT4-fs: Ignoring removed bh option [ 290.868216][T16759] EXT4-fs: inline encryption not supported [ 290.874800][T16759] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.884566][T16765] xt_CT: You must specify a L4 protocol and not use inversions on it [ 290.885858][T16759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 290.921178][T16759] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.4056: lblock 2 mapped to illegal pblock 2 (length 1) [ 290.935799][T16759] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.4056: lblock 0 mapped to illegal pblock 48 (length 1) [ 290.950338][T16759] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4056: Failed to acquire dquot type 0 [ 290.962760][T16759] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 290.972550][T16759] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4056: mark_inode_dirty error [ 290.984471][T16759] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 290.994805][T16759] EXT4-fs (loop5): 1 orphan inode deleted [ 291.000990][T16767] loop0: detected capacity change from 0 to 1024 [ 291.001083][T16759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.020113][T13761] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:22: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.020920][T16768] bond1: entered promiscuous mode [ 291.039410][T16768] bond1: entered allmulticast mode [ 291.045054][T16768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.048600][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.061188][T16767] EXT4-fs: Ignoring removed bh option [ 291.067923][T13761] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:22: Failed to release dquot type 0 [ 291.069527][T16767] EXT4-fs: inline encryption not supported [ 291.079562][T16759] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.4056: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.087032][T16767] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.110241][T15416] EXT4-fs error (device loop9): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 291.122061][T16767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 291.124085][T15416] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.133357][T16767] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.4059: lblock 2 mapped to illegal pblock 2 (length 1) [ 291.141609][T15416] EXT4-fs error (device loop9): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 291.155527][T16531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.168813][T16767] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.4059: lblock 0 mapped to illegal pblock 48 (length 1) [ 291.189815][T16531] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 291.190151][T16767] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4059: Failed to acquire dquot type 0 [ 291.203275][T16531] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.223354][T16767] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.228691][T16531] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 291.244716][T16767] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.4059: mark_inode_dirty error [ 291.256349][T16767] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 291.266793][T16767] EXT4-fs (loop0): 1 orphan inode deleted [ 291.273042][T16767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.297662][T13796] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.318117][T13796] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:57: Failed to release dquot type 0 [ 291.341318][T16353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.364913][T16777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.425144][T16765] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm syz.0.4059: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.463576][T12948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.481892][T16777] loop7: detected capacity change from 0 to 1024 [ 291.488587][T16777] EXT4-fs: Ignoring removed bh option [ 291.492484][T12948] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 291.494037][T16777] EXT4-fs: inline encryption not supported [ 291.500364][T16777] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.508070][T12948] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.527715][T16777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 291.542036][T16777] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.4062: lblock 2 mapped to illegal pblock 2 (length 1) [ 291.546767][T16786] loop5: detected capacity change from 0 to 512 [ 291.556563][T16777] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.4062: lblock 0 mapped to illegal pblock 48 (length 1) [ 291.576878][T16777] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4062: Failed to acquire dquot type 0 [ 291.576954][T12948] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 291.599605][T16777] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.609895][T16777] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.4062: mark_inode_dirty error [ 291.621417][T16777] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 291.625639][T16786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.632263][T16777] EXT4-fs (loop7): 1 orphan inode deleted [ 291.650711][T16777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.668415][T13776] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.687270][T16786] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.711744][T13776] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 291.723708][T16777] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm syz.7.4062: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.755349][T16795] loop9: detected capacity change from 0 to 512 [ 291.766691][T16353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.776931][T16792] loop0: detected capacity change from 0 to 1024 [ 291.783653][T16792] EXT4-fs: Ignoring removed orlov option [ 291.785089][T16786] lo speed is unknown, defaulting to 1000 [ 291.790285][T16353] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 291.803920][T16798] netlink: 'syz.3.4068': attribute type 21 has an invalid length. [ 291.808376][T16353] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 291.826791][T16795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.834891][T16353] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 291.852149][T16792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.854932][T16795] ext4 filesystem being mounted at /88/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.916791][T16804] loop3: detected capacity change from 0 to 512 [ 291.946674][T12948] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 291.961212][T16795] lo speed is unknown, defaulting to 1000 [ 291.965047][T16804] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.982750][T16531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.985185][T16804] ext4 filesystem being mounted at /432/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.004072][T12948] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 292.021557][T16810] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.4069: corrupted inode contents [ 292.080326][T16810] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #18: comm syz.9.4069: mark_inode_dirty error [ 292.137437][T16810] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #18: comm syz.9.4069: corrupted inode contents [ 292.149593][T16810] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2996: inode #18: comm syz.9.4069: mark_inode_dirty error [ 292.149687][T16804] lo speed is unknown, defaulting to 1000 [ 292.162160][T16810] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2999: inode #18: comm syz.9.4069: mark inode dirty (error -117) [ 292.191561][T16810] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 292.310153][T16829] loop5: detected capacity change from 0 to 512 [ 292.328767][T16829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.341663][T16829] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.377640][T16806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.409804][T13776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.477659][T13776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.527007][T13776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.577528][T13776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.592298][T16833] lo speed is unknown, defaulting to 1000 [ 292.651778][T13776] bridge_slave_1: left allmulticast mode [ 292.657604][T13776] bridge_slave_1: left promiscuous mode [ 292.663293][T13776] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.671473][T13776] bridge_slave_0: left allmulticast mode [ 292.677242][T13776] bridge_slave_0: left promiscuous mode [ 292.682987][T13776] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.720858][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.757248][ T9863] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.796155][T16854] loop9: detected capacity change from 0 to 512 [ 292.815774][T16854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.828625][T16854] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.019567][T16861] loop3: detected capacity change from 0 to 1024 [ 293.026627][T16861] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 293.037604][T16861] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 293.049548][T16861] JBD2: no valid journal superblock found [ 293.055423][T16861] EXT4-fs (loop3): Could not load journal inode [ 293.063461][T16531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.197686][T13776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.208179][T13776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.218370][T13776] bond0 (unregistering): Released all slaves [ 293.229582][T16833] chnl_net:caif_netlink_parms(): no params data found [ 293.292402][T16854] lo speed is unknown, defaulting to 1000 [ 293.301664][T16878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.359220][T16878] loop5: detected capacity change from 0 to 1024 [ 293.374256][T16878] EXT4-fs: Ignoring removed bh option [ 293.379712][T16878] EXT4-fs: inline encryption not supported [ 293.385961][T16878] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 293.390167][T16881] bridge1: entered promiscuous mode [ 293.397200][T16878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 293.411583][T16878] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.4090: lblock 2 mapped to illegal pblock 2 (length 1) [ 293.425966][T16878] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.4090: lblock 0 mapped to illegal pblock 48 (length 1) [ 293.441086][T16878] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4090: Failed to acquire dquot type 0 [ 293.441696][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.459445][T16878] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 293.459493][T16833] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.469076][T16878] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.4090: mark_inode_dirty error [ 293.488072][T16878] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 293.498667][T16878] EXT4-fs (loop5): 1 orphan inode deleted [ 293.501264][T16833] bridge_slave_0: entered allmulticast mode [ 293.504907][T16878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.511713][T16833] bridge_slave_0: entered promiscuous mode [ 293.531144][T16878] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.4090: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.546106][T13750] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 293.561038][T16889] siw: device registration error -23 [ 293.561084][T13750] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 293.561173][T16889] ================================================================== [ 293.561206][T16889] BUG: KCSAN: data-race in data_push_tail / string [ 293.561247][T16889] [ 293.561257][T16889] write to 0xffffffff88e521e0 of 1 bytes by task 13750 on cpu 0: [ 293.561281][T16889] string+0x187/0x220 [ 293.561315][T16889] vsnprintf+0x532/0x890 [ 293.561348][T16889] vscnprintf+0x41/0x90 [ 293.561377][T16889] printk_sprint+0x30/0x2d0 [ 293.561410][T16889] vprintk_store+0x599/0x860 [ 293.561431][T16889] vprintk_emit+0x10d/0x580 [ 293.561458][T16889] vprintk_default+0x26/0x30 [ 293.561486][T16889] vprintk+0x1d/0x30 [ 293.561522][T16889] _printk+0x79/0xa0 [ 293.561559][T16889] __ext4_error+0x248/0x320 [ 293.561586][T16889] ext4_release_dquot+0x2e7/0x460 [ 293.561613][T16889] quota_release_workfn+0x256/0x530 [ 293.561632][T16889] process_scheduled_works+0x4ce/0x9d0 [ 293.561670][T16889] worker_thread+0x582/0x770 [ 293.561695][T16889] kthread+0x489/0x510 [ 293.561724][T16889] ret_from_fork+0x122/0x1b0 [ 293.561753][T16889] ret_from_fork_asm+0x1a/0x30 [ 293.561778][T16889] [ 293.561785][T16889] read to 0xffffffff88e521e0 of 8 bytes by task 16889 on cpu 1: [ 293.561803][T16889] data_push_tail+0xfd/0x420 [ 293.561824][T16889] data_alloc+0xfb/0x2e0 [ 293.561842][T16889] prb_reserve+0x807/0xaf0 [ 293.561866][T16889] vprintk_store+0x56d/0x860 [ 293.561888][T16531] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.561894][T16889] vprintk_emit+0x10d/0x580 [ 293.561929][T16889] vprintk_default+0x26/0x30 [ 293.561959][T16889] vprintk+0x1d/0x30 [ 293.561987][T16889] _printk+0x79/0xa0 [ 293.562014][T16889] siw_newlink+0x66c/0x680 [ 293.562046][T16889] nldev_newlink+0x369/0x3f0 [ 293.562081][T16889] rdma_nl_rcv+0x47c/0x5a0 [ 293.562110][T16889] netlink_unicast+0x5c0/0x690 [ 293.562147][T16889] netlink_sendmsg+0x58b/0x6b0 [ 293.562172][T16889] __sock_sendmsg+0x145/0x180 [ 293.562204][T16889] ____sys_sendmsg+0x31e/0x4e0 [ 293.562247][T16889] ___sys_sendmsg+0x17b/0x1d0 [ 293.562255][T16531] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 293.562270][T16889] __x64_sys_sendmsg+0xd4/0x160 [ 293.562293][T16889] x64_sys_call+0x191e/0x3000 [ 293.562322][T16889] do_syscall_64+0xd2/0x200 [ 293.562343][T16889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.562372][T16889] [ 293.562368][T16531] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 293.562379][T16889] value changed: 0x00000000fffffbc7 -> 0x6c65725f34747865 [ 293.562405][T16889] [ 293.562412][T16889] Reported by Kernel Concurrency Sanitizer on: [ 293.562434][T16889] CPU: 1 UID: 0 PID: 16889 Comm: syz.7.4095 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.562437][T16531] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 293.562476][T16889] Tainted: [W]=WARN [ 293.562488][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.562503][T16889] ================================================================== [ 293.878164][T13776] hsr_slave_0: left promiscuous mode [ 293.885079][T15416] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.896076][T13776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.903581][T13776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.911883][T13776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.919654][T13776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.933350][T13776] veth1_macvtap: left promiscuous mode [ 293.938932][T13776] veth0_macvtap: left promiscuous mode [ 293.944497][T13776] veth1_vlan: left promiscuous mode [ 293.949861][T13776] veth0_vlan: left promiscuous mode [ 293.978329][T16895] loop9: detected capacity change from 0 to 1024 [ 293.986673][T16895] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 293.997956][T16895] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 294.008779][T16895] JBD2: no valid journal superblock found [ 294.014611][T16895] EXT4-fs (loop9): Could not load journal inode [ 294.045767][T13776] team0 (unregistering): Port device team_slave_1 removed [ 294.055587][T13776] team0 (unregistering): Port device team_slave_0 removed [ 294.063934][T13789] smc: removing ib device syz! [ 294.091666][T16833] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.098936][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.106419][T16833] bridge_slave_1: entered allmulticast mode [ 294.113038][T16833] bridge_slave_1: entered promiscuous mode [ 294.145156][T16833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.158032][T16833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.200247][T16833] team0: Port device team_slave_0 added [ 294.208459][T16833] team0: Port device team_slave_1 added [ 294.231150][T16833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.238203][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.264198][T16833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.276468][T16833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.283480][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.309429][T16833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.342705][T16833] hsr_slave_0: entered promiscuous mode [ 294.348868][T16833] hsr_slave_1: entered promiscuous mode [ 294.354852][T16833] debugfs: 'hsr0' already exists in 'hsr' [ 294.360589][T16833] Cannot create hsr debugfs directory [ 294.659275][T16833] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 294.668083][T16833] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 294.676804][T16833] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 294.686083][T16833] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 294.720468][T16833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.735972][T16833] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.746946][T13796] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.754037][T13796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.765813][T13796] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.773026][T13796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.839575][T16833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.943522][T16833] veth0_vlan: entered promiscuous mode [ 294.951647][T16833] veth1_vlan: entered promiscuous mode [ 294.968905][T16833] veth0_macvtap: entered promiscuous mode [ 294.977021][T16833] veth1_macvtap: entered promiscuous mode [ 294.989228][T16833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.001000][T16833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.012047][T13796] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.021219][T13796] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.031637][T13796] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.040844][T13796] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0