last executing test programs: 5m19.127535076s ago: executing program 32 (id=48): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000002c0)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") statfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000c00)=""/232) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_bt_hci(r10, 0x400448e7, 0x0) close(r10) 5m12.71285764s ago: executing program 33 (id=126): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000280)=[{r0, 0x10a8}], 0x1, 0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) signalfd4(r0, &(0x7f0000000200)={[0x7]}, 0x8, 0x80800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r4, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000007cc0)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r11 = socket$rds(0x15, 0x5, 0x0) r12 = socket$phonet(0x23, 0x2, 0x1) r13 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@deltclass={0xa1c, 0x29, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x10, 0x2}, {0x4, 0xc}, {0xf, 0xfff5}}, [@c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x1, 0x3, 0xe, 0x0, 0x8, 0x100, 0x0, 0xb14}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x0, 0x2, 0x1, 0xd26, 0x81, 0x2, 0x8000}}]}}, @c_cbq={{0x8}, {0x450, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x2, 0x3, 0x1, 0x800, 0x101, 0x2, 0x0, 0x7, 0x100, 0x3, 0xbe16, 0x100, 0x3, 0x9, 0x6, 0x1551, 0x9, 0x3, 0x100, 0x0, 0xf154, 0x7, 0x4, 0xfffffffc, 0x8000, 0x800, 0x6, 0x1, 0x7, 0x0, 0x5, 0x401, 0x0, 0x2, 0x8000, 0x8, 0x9, 0x7fff, 0xc4, 0x3, 0xe, 0x4, 0x7ff, 0x1b000, 0x98, 0x0, 0x4, 0x1, 0x7, 0x4, 0x8, 0x4, 0x2, 0x0, 0xffff39e1, 0x800, 0x3ff, 0x7f, 0x4, 0xff, 0x1, 0x40, 0xe, 0x2d, 0x9, 0x8, 0x4, 0x9, 0x48, 0x6f9d09a7, 0x7, 0x10001, 0x2e, 0x80000000, 0x9, 0x78, 0x6, 0x3, 0x5, 0x749, 0x6, 0x1ff, 0x2, 0x5, 0x2, 0xee, 0x10, 0x81, 0x3, 0xdb, 0x93, 0x0, 0x0, 0x8000, 0xfff, 0x6, 0xfffffff8, 0x0, 0xd, 0x400, 0x3, 0x0, 0xfff, 0x7fffffff, 0x4, 0x2, 0xff, 0x5, 0x7fffffff, 0x10, 0x9, 0x3, 0x1, 0x800, 0xd, 0x9, 0x8, 0x6, 0x7, 0x0, 0x4, 0x76, 0x6, 0x2, 0x9, 0x0, 0x81, 0xfffffe00, 0xfffffffc, 0x0, 0x1aa8, 0xa8, 0x901, 0x8, 0x7, 0xffff, 0x7, 0xe, 0x401, 0x9, 0x2, 0xfffffffd, 0xffffffff, 0x3, 0x6, 0x4, 0x8520, 0x8, 0xd7, 0xcbc, 0x5, 0x3, 0x2c20, 0x3, 0x5, 0x9f6, 0x3ff, 0x29, 0x6, 0x10001, 0x3, 0x7, 0x4a, 0x9, 0x4, 0x8001, 0x5, 0x6, 0x1, 0x6, 0x8, 0x80000001, 0x7c, 0x9, 0x6, 0x4, 0x2c, 0x7, 0x5f1, 0x9, 0x4, 0x4, 0x1, 0x0, 0x8000, 0x7, 0x8001, 0x1ff, 0x4, 0x2, 0x2, 0x80, 0x7, 0xaa9, 0x0, 0x80, 0x9, 0x9, 0xfc3, 0x3, 0x3, 0x8, 0x5, 0xa65d, 0xe, 0x7f, 0x8, 0x9, 0x6, 0x6, 0x1, 0x88, 0x10, 0x5, 0x7, 0x6, 0x6, 0xe, 0xffff, 0x3, 0x5, 0x101, 0x1, 0xb, 0xfffffffe, 0x401, 0x7f, 0x8, 0x6, 0x400, 0xf, 0x9, 0x1, 0xa8b, 0x0, 0xe6d, 0x9, 0xd28, 0x7, 0x0, 0x6, 0x3, 0x10001, 0x8, 0x627d3da6, 0x5, 0x5, 0x1, 0x2e3f39a3, 0x9, 0x6b, 0x10000, 0x1, 0x9, 0xc]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0xa}, 0x3, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0x4}, 0x3, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x0, 0x40, 0x41, 0x6f8, 0x8}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x32, 0x3, 0xa, 0x5, 0x1, 0x2, 0x4, 0x7}}]}}, @c_atm={{0x8}, {0x4c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r9}, @TCA_ATM_FD={0x8, 0x1, r10}, @TCA_ATM_HDR={0x36, 0x3, "8fcd31ac68d13ee75cd493a05893b9355dafc9d89017fc98ef6f1c3c9d543ca84c2bbd169443b9d9d0d5b5b4d3908921a7e7"}]}}, @c_atm={{0x8}, {0x7c, 0x2, [@TCA_ATM_HDR={0x1c, 0x3, "d7a52cc0e8b76e3d83921bfe765516104e909a0f2559c9ad"}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1cfccb1485498cd2, 0xd}}, @TCA_ATM_FD={0x8, 0x1, r11}, @TCA_ATM_FD={0x8, 0x1, r12}, @TCA_ATM_HDR={0x33, 0x3, "b2931e726e748989f682ede394f557beb5c98afac46fa30f5738a872d1cca70b588b5d405f799741dc2141cdb56a17"}, @TCA_ATM_FD={0x8, 0x1, r13}]}}, @c_cbq={{0x8}, {0x458, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0xf9, 0x6, 0x0, 0x7, 0x2, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x21, 0x0, 0x9, 0x7, 0x1, 0x9, 0xc7b, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x14, 0x1, 0x13, 0x2, 0x54d8, 0x7ff, 0x2, 0x4d09fac0}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x1, 0x9, 0x5, 0xb9fb, 0x200}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0xfffffff0, 0x9, 0x3, 0x401, 0x8, 0x6, 0x1a, 0x2, 0x8, 0x8, 0x8b57, 0x0, 0x5, 0x2, 0x67bd7a48, 0x9, 0x7fffffff, 0x8, 0x8, 0x1, 0xa, 0x4, 0x9, 0x6, 0xd, 0xffff5531, 0xc2d7, 0x3ff, 0x7, 0xfffeffff, 0x5, 0x10000, 0x3, 0x55, 0x100, 0x1, 0x2, 0x0, 0x2, 0x6, 0x6, 0x7, 0x7f, 0x9, 0x7, 0x4e, 0x7, 0x5, 0x3, 0x6, 0x9, 0x3ff, 0x3, 0x9, 0x3, 0x100, 0xaf, 0x3ff, 0x9, 0x2, 0x6, 0xfffffffc, 0x8, 0x7fffffff, 0x7ff, 0x7ff, 0x2, 0x2a, 0xffff, 0xb3, 0x9, 0x100, 0x4, 0x0, 0x5f, 0x80, 0x8, 0x5, 0x6ee8, 0xb1be, 0x1, 0x9658, 0xc05, 0x406a4cee, 0x0, 0x10, 0x10001, 0x100, 0x1000, 0xb4a1, 0x3, 0x9, 0x6, 0x100, 0x1005d, 0x5816, 0xfffffffe, 0x8, 0x2, 0x7493, 0xffffffff, 0x0, 0x8, 0xe7aa, 0x3, 0x0, 0x0, 0x0, 0x9, 0x4, 0x2, 0x8000, 0x6, 0x8, 0xbc, 0x101, 0x0, 0x1, 0xffff9e5d, 0x9, 0xffff, 0x7, 0x7, 0x1, 0x5, 0x3ff, 0x1, 0x7, 0x70000, 0x0, 0xec6, 0x2, 0x7, 0xe40af945, 0xa, 0x9, 0x80000000, 0x8, 0x1ff, 0x200, 0x1, 0x2, 0x1, 0x2, 0xfff, 0x1, 0xc, 0x4, 0x377c, 0x600000, 0x40b, 0x8, 0x7, 0x0, 0x1, 0x1ff, 0x0, 0x3, 0x8000, 0x7, 0x2, 0x3, 0x3, 0x80000000, 0xfbf, 0xffff2bc1, 0x2, 0x3ff, 0xfffffff7, 0x0, 0x4, 0xff, 0x9, 0x1ff, 0x8, 0xc, 0x2, 0xbeec, 0x9, 0x3, 0x3, 0x8, 0x9, 0xb0fc, 0x8, 0x1, 0x5, 0x7f, 0x6, 0x478, 0xca7d, 0xf, 0x0, 0x7ff, 0x1, 0x9, 0x64a, 0x9, 0xcfa, 0x7, 0x2, 0x400, 0x6, 0x4, 0xd, 0x100, 0x14000, 0x3, 0x0, 0xfffffff5, 0xe4, 0x81, 0xe778, 0x2, 0x400, 0x1, 0x2, 0xfff, 0xd, 0x8, 0xd, 0x5, 0x0, 0x8, 0x5, 0x6, 0xfffffffb, 0xa, 0x3, 0x3, 0x4, 0x400, 0x7, 0x5, 0xe1, 0x5, 0x9d2, 0x0, 0x9, 0x1, 0x71, 0xcd, 0x8, 0x1a000, 0xc, 0x0, 0x19dbb71b, 0xfffff001, 0x246, 0x7ff, 0xe, 0x4, 0x9, 0x2, 0x4]}]}}, @c_atm={{0x8}, {0xc, 0x2, [@TCA_ATM_FD={0x8, 0x1, r14}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xff}}}]}, 0xa1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) uname(0xfffffffffffffffc) 4m42.044903596s ago: executing program 34 (id=570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 4m39.111793604s ago: executing program 35 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 4m20.251023747s ago: executing program 7 (id=1526): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) 4m20.248458527s ago: executing program 7 (id=1532): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc0}}, 0x0) 4m20.213888748s ago: executing program 7 (id=1533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x10, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "580eadc45d97"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m20.167186778s ago: executing program 7 (id=1537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @random="b40007350060"}) 4m20.10565937s ago: executing program 7 (id=1542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x891c, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e030800d3ff71ef288543"], 0xffdd) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000003000000040001000500000000000000", @ANYBLOB="000000000000000000000000000000000000000070d71ae27a3a432120fb6abe190d8ebc8690b72df25d18d76004619631c11ea6588d9346fd9c63a07bb1f85a5571a2acb72e55b3404c8d10d47f06e176", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 4m19.977737692s ago: executing program 7 (id=1553): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) 4m4.945767759s ago: executing program 36 (id=1553): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) 3m29.45920526s ago: executing program 1 (id=3554): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC, @ANYRESDEC, @ANYRES16], 0x1, 0x2a1, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB="39ed977f177b903a558511ae45194ee52163c7aa3bd8baa80cca61b48aadc123cb7b2e34a3861158ab"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe57f3be922e90f9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="32a0000000ca080000000000004000000200000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100000005000000060000000000000000000000000000006b58200d154eee1bc6b288359f6a5c8cfe54169f374c4689f3d10f194fca017d2a90aabcbc71ffcb1c3c9c2ab0add08ad9f41c35bdf5248c1c3c645899754995bb737b6969a7adda0b0e86c07ae85579c9b30f5e07c30220feb5c6212cc3af902163b499c38df396d438c62ff7e6e8ffc8bc87f50fb97c3fa09423e7b14a16f686444bcbaa50c8da97276349a93325f0"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) getpid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000009c0)=0xda) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r6 = eventfd2(0x8, 0x1) r7 = eventfd2(0x9, 0x0) r8 = eventfd(0x5) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = eventfd2(0x1ff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110b80000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) io_submit(0x0, 0x6, &(0x7f0000000740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x8, r2, 0x0, 0x0, 0xff, 0x0, 0x2, r6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f00000002c0)="bea52608f165391bf80855e5925578f9", 0x10, 0x1, 0x0, 0x1, r7}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x7, r5, &(0x7f0000000440)="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", 0xfd, 0x6, 0x0, 0x0, r8}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x2, r5, &(0x7f0000000380)="5e99349a1aec1435ffc282d1797562fdcdb322e7970313bc26a77c6b8146e66bad9288a8d3d05be6d53dc2a3e40d5b6a8a57e1", 0x33, 0xfffffffffffffff9}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000000540)="055166a869f4d665770ded83512a0ff229d75ee8280bcb95cfa400", 0x1b, 0xffffffffffffffff, 0x0, 0x1, r9}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0xc, r10, &(0x7f0000000640)="be88855afd6cf0699a91bb29b663dc45601ef1c698f17d03897162998fbdca206b49fb42ea7c9b3bb526c6ac7d47433ff9f9e18671680b4e8f27925311a54a0543e590ec74fdb839f81a34df145b8c05836f8a12718cf4dec835bcbafed55e5b09f1a2677564d47efd420c784ff223f45e989e674fec93c93074c8d24a9bcf1430e0da89b2cdf3bae69421be55980ad86cfc2b29bd0d", 0x96, 0x4, 0x0, 0x1, r11}]) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 3m29.082611838s ago: executing program 1 (id=3559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000007d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa000000000000000000000000000004d63300000000000000000000000000000000000000000000000000000000000000000000000000000044000000ff020000000000000000000000000001000000006c"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m28.99091147s ago: executing program 1 (id=3560): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3m28.895995621s ago: executing program 1 (id=3561): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb09001800000000000000340000003400000003000000010000000200000f390000000500000037000000390000000200000002000000390000004d3655100000000000000f01000000b5005f00df3e9e81909a2b186020accf0d937195cdca180ff41f06218a8c8df6e4879caf2f4fe4d9e9"], 0x0, 0x4f, 0x0, 0x1, 0x5}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080f00000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0xa54a9d76e5e2e84, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0x5, 0x9, 0x7, 0x100000001, 0x7, 0x0}) unlink(&(0x7f0000000280)='./cgroup\x00') r9 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000000000000000000560dc30000000009111800", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) setxattr$incfs_metadata(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') ptrace$cont(0x9, r8, 0x80000001, 0x1) r12 = epoll_create(0x5) kcmp$KCMP_EPOLL_TFD(r8, r9, 0x7, r4, &(0x7f0000000040)={r12, r0, 0x1}) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b800800"], 0x250}}, 0x4c000) 3m28.245558614s ago: executing program 1 (id=3569): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2, 0x1, [0x2]}, 0xa) 3m27.597519137s ago: executing program 1 (id=3584): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0xa}, 0x40010102) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 3m27.597189917s ago: executing program 37 (id=3584): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001040)=""/4096, 0x1000}], 0xa}, 0x40010102) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 2m47.025349469s ago: executing program 8 (id=4314): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x7c, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r9, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00ea46a681f407c434", @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = socket(0x400000000010, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 2m46.834395943s ago: executing program 8 (id=4318): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") (fail_nth: 18) 2m46.4676885s ago: executing program 8 (id=4323): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 2m46.221248995s ago: executing program 8 (id=4326): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) getdents64(r0, &(0x7f0000002080)=""/170, 0xaa) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = gettid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000002c0)={r3, r3, 0x8}) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000001fa400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 2m45.95541737s ago: executing program 8 (id=4334): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (fail_nth: 7) 2m45.653524656s ago: executing program 8 (id=4343): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) write$UHID_INPUT2(r1, &(0x7f0000000280), 0x6) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000480)=""/56, 0x38}, {&(0x7f00000024c0)=""/139, 0x8b}, {&(0x7f0000002580)=""/89, 0x59}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/110, 0x6e}, {&(0x7f0000003680)=""/196, 0xc4}, {&(0x7f0000003780)=""/33, 0x21}, {&(0x7f0000003840)=""/190, 0xbe}], 0x8}}], 0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r5, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x20, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80, 0x2f2) openat2(r8, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x8001, 0x110, 0x8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90, 0x80c0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x4, 0x0, &(0x7f0000000040)="976d9023", 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="bf049f", 0x0, 0x8000}, 0x50) 2m45.649429256s ago: executing program 38 (id=4343): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020"], 0x138) write$UHID_INPUT2(r1, &(0x7f0000000280), 0x6) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r3, &(0x7f0000007240)=[{{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000480)=""/56, 0x38}, {&(0x7f00000024c0)=""/139, 0x8b}, {&(0x7f0000002580)=""/89, 0x59}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/110, 0x6e}, {&(0x7f0000003680)=""/196, 0xc4}, {&(0x7f0000003780)=""/33, 0x21}, {&(0x7f0000003840)=""/190, 0xbe}], 0x8}}], 0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r5, 0x0, 0x4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x20, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x80, 0x2f2) openat2(r8, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)={0x8001, 0x110, 0x8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90, 0x80c0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x4, 0x0, &(0x7f0000000040)="976d9023", 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="bf049f", 0x0, 0x8000}, 0x50) 56.63776609s ago: executing program 2 (id=6152): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\a\x00\x00\x00\xb6\x9b\xdb\xdc\xf3\xb9\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x3, 0x3, &(0x7f0000001dc0)=[{}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lremovexattr(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x8, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8, 0x6}, 0x2014, 0xfffe, 0x7f, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fefffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x8, 0x2c, 0xff, @remote, @local, {[@routing={0x6, 0x0, 0x2, 0x8}]}}}}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0xf1110, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x127037, 0x5, 0xc, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000001c0)={0x2, &(0x7f00000000c0)=[{0xa, 0xc, 0x2, 0x4f9c}, {0x80, 0xe4, 0x97, 0x3}]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0800428004"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 54.846543216s ago: executing program 2 (id=6180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 54.796869167s ago: executing program 2 (id=6182): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x22000, 0x0) finit_module(r0, 0x0, 0x1) getuid() syz_emit_ethernet(0x2a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108000604ea010180c2000001000000000180c2"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0x400000000006}, 0x18) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x838, &(0x7f0000000cc0)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000280)={0x0, 0x87, 0x20000}, 0x20) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3e) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r6}, 0x18) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000401811000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = io_uring_setup(0x40ae, &(0x7f0000000100)={0x0, 0x7282, 0x9, 0x3, 0x30a}) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@ipv4}, 0x0) 54.429694304s ago: executing program 2 (id=6193): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x24}}, 0x800) 54.225288828s ago: executing program 2 (id=6198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f00000003c0)={'wg2\x00', 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r5 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getattr(r5, &(0x7f0000000100)={0x38}, 0x38, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') sched_setscheduler(r5, 0x3, &(0x7f0000000300)=0x30f90815) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setreuid(0xee01, 0x0) 54.199055488s ago: executing program 39 (id=6198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f00000003c0)={'wg2\x00', 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r5 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getattr(r5, &(0x7f0000000100)={0x38}, 0x38, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') sched_setscheduler(r5, 0x3, &(0x7f0000000300)=0x30f90815) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setreuid(0xee01, 0x0) 11.827777546s ago: executing program 6 (id=6852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000004c0)='cdg\x00', 0x4) execve(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)={[&(0x7f0000000180)='\x00']}, &(0x7f0000000500)={[&(0x7f0000000280)='.\x8c@-+^\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='cdg\x00', &(0x7f0000000340)='/.\x00', &(0x7f0000000380)='kmem_cache_free\x00']}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r6 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES8=r3, @ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRES16=r0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) creat(0x0, 0x49) r9 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 11.687979649s ago: executing program 6 (id=6853): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) syz_open_procfs$userns(r0, &(0x7f00000000c0)) syz_open_procfs$userns(r0, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup(r5) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 11.576473611s ago: executing program 6 (id=6857): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) getpgrp(0x0) setns(0xffffffffffffffff, 0x34020000) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x4, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_open_dev$vcsa(&(0x7f0000000080), 0x951, 0x400) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x0, 0x8, 0x9, 0x6}) 11.08862251s ago: executing program 6 (id=6864): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500002000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xfffffffc}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000280)={0x1, 'veth1_virt_wifi\x00', 0x200}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x12d}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x838, &(0x7f0000000cc0)="$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") r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r12, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r5, 0x22d2, 0x20, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r5, 0x1e, &(0x7f0000000000)={r2}, 0x1) 10.857411135s ago: executing program 6 (id=6870): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x10fc, 0x30, 0x12f, 0x0, 0x0, {}, [{0x10e8, 0x1, [@m_police={0x10e4, 0x1, 0x0, 0x0, {{0xb}, {0x10b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x0, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x4, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0xc, 0x8001, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x8001, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x9, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0c, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x7ffe, 0x6, 0x9, 0x580, 0x8b1, 0xc, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0xfffffff7, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0xe, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x200, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7ff, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c1, 0x9, 0x2, 0x5e9, 0x2, 0x36d, 0x2, 0x1, 0x101, 0x5, 0x5, 0x7ff, 0x7, 0x1, 0x0, 0x3, 0xc0a9, 0x7, 0x0, 0x10000, 0x7f, 0x8000, 0xfffffffd, 0x8, 0x4b8, 0x81d9, 0x3, 0x401, 0x81, 0x30f, 0x765, 0x369, 0x2, 0x6, 0x1ff, 0xe, 0x2, 0x7, 0xf, 0x3, 0x6, 0x8, 0xd, 0x3ff, 0x1, 0x30000, 0x24, 0x9, 0x2, 0x5c2c, 0x8, 0x4, 0x10, 0x0, 0x5, 0x100, 0x10001, 0x2, 0x400, 0x4, 0x400, 0x6e0f1d14, 0x2, 0x5, 0x5, 0xd90d, 0x3, 0x3, 0x2, 0xa, 0x4, 0x2, 0x4, 0x4fbe, 0x1, 0x4, 0x5, 0x7, 0xffff, 0x7, 0xa, 0x2, 0xaf8, 0x1, 0x3ff, 0x9, 0x10001, 0x5529, 0x9, 0x80, 0x7, 0xd, 0x5, 0x2, 0xffffffff, 0x6, 0x81, 0xdbb, 0xa1b, 0x2, 0x2, 0x2, 0x3, 0x101, 0x10, 0x3, 0x800, 0x80000000, 0x3, 0x5055, 0x3, 0x8, 0x4a47, 0x0, 0x6, 0x80000000, 0x7, 0xe, 0x100, 0x8001, 0x4, 0x8, 0x2, 0x8, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x7fffffff, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xffffffff, 0x1, 0x4, 0x9, 0xff, 0x7ff, 0xc, 0x6, 0xfffffbf2, 0x80000000, 0xa, 0x8, 0x400, 0x1, 0x2, 0x1, 0xe, 0x4, 0x0, 0x8, 0x6, 0x3, 0xe8, 0x58d, 0x5, 0x6, 0x63, 0xfffffffd, 0x6fe55df5, 0x3, 0x8001, 0x2f, 0x2, 0x1, 0x40, 0x7ff, 0x6, 0x4, 0x5, 0x5, 0x5, 0x3, 0xffff0001, 0x1d, 0x8, 0x0, 0x8, 0x3, 0x2, 0xb, 0xaf, 0x27ff, 0x100, 0x5, 0x25, 0x8e7e, 0x7fff, 0x3, 0x6, 0x5, 0x80000001, 0xe, 0xeaaf, 0x7, 0xb, 0x1, 0x7f, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x6, 0x8, 0x3, 0x4, 0x100000cb, 0x7ae3, 0x7, 0x5, 0x0, 0xad980, 0x9, 0x6, 0x3, 0x5, 0x3, 0x7, 0x8, 0x3ff, 0x5, 0x1, 0x4, 0x1, 0x7, 0x4, 0x8, 0x3, 0x4, 0xc871, 0xff, 0x10000, 0x80, 0xffff, 0x401, 0xfffffffc, 0x1ff, 0x8, 0x7, 0xba, 0x8001, 0xd96f, 0x1, 0xa, 0x2, 0xfffffff8, 0x4, 0x9, 0x3, 0x8000, 0xb, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x10fc}}, 0xc0) 10.486210832s ago: executing program 6 (id=6878): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f00000003c0)={'wg2\x00', 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r5 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getattr(r5, &(0x7f0000000100)={0x38}, 0x38, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x103) sched_setscheduler(r5, 0x3, &(0x7f0000000300)=0x30f90815) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setreuid(0xee01, 0x0) 10.485738672s ago: executing program 40 (id=6878): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/158, 0x9e}], 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f00000003c0)={'wg2\x00', 0x3}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) r5 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sched_getattr(r5, &(0x7f0000000100)={0x38}, 0x38, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000020010000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x103) sched_setscheduler(r5, 0x3, &(0x7f0000000300)=0x30f90815) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setreuid(0xee01, 0x0) 3.935792762s ago: executing program 9 (id=7005): sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000425bd70000400000055000000"], 0x14}, 0x1, 0x0, 0x0, 0x240440d1}, 0x10000) r0 = syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x000\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES8, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6) pipe(&(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r9, 0x0, 0x8000000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@block_validity}]}, 0x0, 0x46c, &(0x7f0000000bc0)="$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") 2.389543962s ago: executing program 9 (id=7030): r0 = open$dir(0x0, 0x0, 0x10) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x9000) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) setitimer(0x0, &(0x7f0000000440)={{0x0, 0xea60}, {0x77359400}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r3) r4 = inotify_init1(0x800) fcntl$setstatus(r3, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r3, 0x8, r5) fcntl$setsig(r4, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 2.306145444s ago: executing program 9 (id=7032): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf250300000005002f00000000000500380000000000080039000300000008000300", @ANYRES32=r5, @ANYBLOB="2dcfeb97456ea42744db83b1c62284d140ac8965d436c5d6194cc0551c2de25da3e69622db3d"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000814) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004000000060000000500"], 0x48) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x9, 0x80002}, 0x0, 0x10000, 0x8, 0x7, 0x0, 0xfffffffb, 0x602, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r8, &(0x7f0000000040), &(0x7f0000000200)=@v3={0x3000000, [{0xffffff80, 0x2d}, {0x8, 0x4}]}, 0x18, 0x2) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') lseek(r9, 0x4, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0x84, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0x1, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044}, 0x20008c45) getdents64(r9, 0xffffffffffffffff, 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x5c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x748, 0xffff8000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20002044}, 0x40080) r14 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x40900) ioctl$USBDEVFS_IOCTL(r14, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.945760101s ago: executing program 5 (id=7042): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, 0x0, 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000008d0000000000ff00eb000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500030004000000"], 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.818027193s ago: executing program 5 (id=7047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1.802436424s ago: executing program 9 (id=7048): r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x118) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) pause() setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x9) 1.729025336s ago: executing program 3 (id=7051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 1.657416827s ago: executing program 3 (id=7053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x10fc, 0x30, 0x12f, 0x0, 0x0, {}, [{0x10e8, 0x1, [@m_police={0x10e4, 0x1, 0x0, 0x0, {{0xb}, {0x10b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x0, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x4, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0xc, 0x8001, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x8001, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x9, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0c, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x7ffe, 0x6, 0x9, 0x580, 0x8b1, 0xc, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0xfffffff7, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0xe, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x200, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7ff, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c1, 0x9, 0x2, 0x5e9, 0x2, 0x36d, 0x2, 0x1, 0x101, 0x5, 0x5, 0x7ff, 0x7, 0x1, 0x0, 0x3, 0xc0a9, 0x7, 0x0, 0x10000, 0x7f, 0x8000, 0xfffffffd, 0x8, 0x4b8, 0x81d9, 0x3, 0x401, 0x81, 0x30f, 0x765, 0x369, 0x2, 0x6, 0x1ff, 0xe, 0x2, 0x7, 0xf, 0x3, 0x6, 0x8, 0xd, 0x3ff, 0x1, 0x30000, 0x24, 0x9, 0x2, 0x5c2c, 0x8, 0x4, 0x10, 0x0, 0x5, 0x100, 0x10001, 0x2, 0x400, 0x4, 0x400, 0x6e0f1d14, 0x2, 0x5, 0x5, 0xd90d, 0x3, 0x3, 0x2, 0xa, 0x4, 0x2, 0x4, 0x4fbe, 0x1, 0x4, 0x5, 0x7, 0xffff, 0x7, 0xa, 0x2, 0xaf8, 0x1, 0x3ff, 0x9, 0x10001, 0x5529, 0x9, 0x80, 0x7, 0xd, 0x5, 0x2, 0xffffffff, 0x6, 0x81, 0xdbb, 0xa1b, 0x2, 0x2, 0x2, 0x3, 0x101, 0x10, 0x3, 0x800, 0x80000000, 0x3, 0x5055, 0x3, 0x8, 0x4a47, 0x0, 0x6, 0x80000000, 0x7, 0xe, 0x100, 0x8001, 0x4, 0x8, 0x2, 0x8, 0x5, 0x6, 0x1, 0x3ff, 0x9, 0x7fffffff, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xffffffff, 0x1, 0x4, 0x9, 0xff, 0x7ff, 0xc, 0x6, 0xfffffbf2, 0x80000000, 0xa, 0x8, 0x400, 0x1, 0x2, 0x1, 0xe, 0x4, 0x0, 0x8, 0x6, 0x3, 0xe8, 0x58d, 0x5, 0x6, 0x63, 0xfffffffd, 0x6fe55df5, 0x3, 0x8001, 0x2f, 0x2, 0x1, 0x40, 0x7ff, 0x6, 0x4, 0x5, 0x5, 0x5, 0x3, 0xffff0001, 0x1d, 0x8, 0x0, 0x8, 0x3, 0x2, 0xb, 0xaf, 0x27ff, 0x100, 0x5, 0x25, 0x8e7e, 0x7fff, 0x3, 0x6, 0x5, 0x80000001, 0xe, 0xeaaf, 0x7, 0xb, 0x1, 0x7f, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x6, 0x8, 0x3, 0x4, 0x100000cb, 0x7ae3, 0x7, 0x5, 0x0, 0xad980, 0x9, 0x6, 0x3, 0x5, 0x3, 0x7, 0x8, 0x3ff, 0x5, 0x1, 0x4, 0x1, 0x7, 0x4, 0x8, 0x3, 0x4, 0xc871, 0xff, 0x10000, 0x80, 0xffff, 0x401, 0xfffffffc, 0x1ff, 0x8, 0x7, 0xba, 0x8001, 0xd96f, 0x1, 0xa, 0x2, 0xfffffff8, 0x4, 0x9, 0x3, 0x8000, 0xb, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x10fc}}, 0xc0) 1.637375177s ago: executing program 3 (id=7054): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) pipe2(&(0x7f0000000180), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000001b00)) 1.615564068s ago: executing program 4 (id=7055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a888df4279c00c6dd1ddec7ddbc96d77d2a3f0d2992fb800fa1bdcbccb6be55961e6a0c326fc553cd885398a51f90607b755b5eb6f6b11e592c62efc0461ca6b416ecd636e9c1e27d834cbaed75ca989c83aef2fdec87759c0a1a03824d54420f62d57d1745fd0015696b1fa7fd3db777154a9f8e4a3333f6ccc4bee78875f89f721db3bb8cd135a1fa87621311c1ad0688079f9402079091cbb1994963a42c428cee9b0790abbe5c67f38bdec0e6375d89e549571b264abd2", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0x17, 0x1e7, &(0x7f0000000080)="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"}) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.605377978s ago: executing program 5 (id=7056): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 1.48286955s ago: executing program 5 (id=7058): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xc}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 1.430674362s ago: executing program 5 (id=7060): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x19c0000, &(0x7f0000000180), 0xfe, 0x455, &(0x7f0000000fc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000000085000000860000049500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x20006}, 0x18) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="a40100000f0a0102"], 0x1a4}, 0x1, 0x0, 0x0, 0x20000830}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000070a01010000020000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r9, &(0x7f0000000600)=ANY=[@ANYBLOB="08000800070303000200140000004510801600000000082f9078ac1e0001ffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r6], 0xfdef) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1.414231372s ago: executing program 4 (id=7061): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xfe80ffff}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$kcm(0x21, 0x2, 0x2) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x50, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x3}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.292357664s ago: executing program 0 (id=7062): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xc}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 1.037691429s ago: executing program 4 (id=7063): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x2000000, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 873.492212ms ago: executing program 4 (id=7064): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC, @ANYRESDEC, @ANYRES16], 0x1, 0x2a1, &(0x7f0000000540)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe57f3be922e90f9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="32a0000000ca080000000000004000000200000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100000005000000060000000000000000000000000000006b58200d154eee1bc6b288359f6a5c8cfe54169f374c4689f3d10f194fca017d2a90aabcbc71ffcb1c3c9c2ab0add08ad9f41c35bdf5248c1c3c645899754995bb737b6969a7adda0b0e86c07ae85579c9b30f5e07c30220feb5c6212cc3af902163b499c38df396d438c62ff7e6e8ffc8bc87f50fb97c3fa09423e7b14a16f686444bcbaa50c8da97276349a93325f0"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) getpid() ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000009c0)=0xda) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) eventfd2(0x8, 0x1) eventfd2(0x9, 0x0) eventfd(0x5) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580), 0x1, 0x0) pipe(&(0x7f0000000600)) eventfd2(0x1ff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 814.281253ms ago: executing program 9 (id=7065): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x2, 0x7ffc9ffe}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @mcast2, 0x2}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e6"], 0x20}], 0x1, 0x0, 0x0, 0x4008090}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffc, @mcast2, 0xc}}}, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18) ioprio_set$pid(0x3, 0x0, 0x2007) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) ustat(0x801, &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) 755.673154ms ago: executing program 0 (id=7066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 736.417235ms ago: executing program 9 (id=7067): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 597.062528ms ago: executing program 0 (id=7068): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 586.713938ms ago: executing program 5 (id=7069): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x2dfb956c67c4ecc4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f0000000140)={&(0x7f00000000c0)="28e6aa949f159cc8c59ef9c67860287ffdab756b6fc134153f9cbbe1d67353da20e00d6492", 0x25, &(0x7f0000000100)=""/61, 0x3d}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000ce00000500000080000000", @ANYRES32=r1, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="04000000040000000200"/28], 0x50) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x810, &(0x7f0000000180)={[{@nobh}, {@init_itable}, {@minixdf}]}, 0x0, 0x51a, &(0x7f0000000ac0)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 500.771859ms ago: executing program 0 (id=7070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000001640)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000480)=@l2tp={0x2, 0x0, @loopback, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000500)="f23efbc98ed925122ccdfaee240b5c36299528a65ca6906df50e1b3772d89c46edaa3655ee46bafb27227ee0023496b175eb40a4fb1e3ee1ba0bf22c598719261c39115874e2fc8af58c399321877ce0c42b434c9dc28b9a35fd", 0x5a}, {&(0x7f0000000580)="cbdf21c8b3c41ef337662892051d3b9528e44f25179d9e9677d3bf5118283020de461fb3381af1354f03ee754f82edce9f20c8a809c82870865a5bfc456c485e86880b6719e75750232b47da4ba81d3b5d3624ec3eead43a21176e900577749c5bda24682740a0c6175fd54a5194f3d56b0fe220", 0x74}, {&(0x7f0000001cc0)="6dd9c6d288579370bcaa17d505a74fda3897fe2ca6e16d50c3716c6bb5e98d719e140fe7bcde4f0b613bd9de73f9c8f48a1b3c6538ee2c4aca3013a3f7edcbe01cd4d9386dc370be99be8e4a0510c605da5046db61f50cfe2c1756879f6c3d859595514e3abf750eb5454b3976b214367f4c9b5daefb46835db5b249e8a6a3c39a36f2be17fc41dc121821e3340de3d2cf6e98684a1c80b3d8ad5423eeb28de957ac612d34d4381193b9b3d64fbb462c216283884169e2f281a91dc922eedfcb025764421518fe4556d6c67c35cdc8f2ec801281722f5d2e2e9887e182ebaa668d15", 0xe2}], 0x3, &(0x7f0000001dc0)=[{0x1010, 0x6, 0x7, "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"}], 0x1010}, 0x20004000) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r8], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r12, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) 388.455642ms ago: executing program 0 (id=7071): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) (fail_nth: 1) 373.285212ms ago: executing program 4 (id=7072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 245.649795ms ago: executing program 3 (id=7073): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x894) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) 140.158006ms ago: executing program 3 (id=7074): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x2000000, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 86.442288ms ago: executing program 0 (id=7075): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e5, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000300)={0x80}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(r3, r2, 0x9, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r1, 0x0, 0x3ffff) sendfile(r4, r1, 0x0, 0x7ffff000) 3.97347ms ago: executing program 4 (id=7076): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r2, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) syz_open_procfs$userns(r0, &(0x7f00000000c0)) syz_open_procfs$userns(r0, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = dup(r5) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 0s ago: executing program 3 (id=7077): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x80000000000000a, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x2, 0x7ffc9ffe}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @mcast2, 0x2}}}, 0x108) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e6"], 0x20}], 0x1, 0x0, 0x0, 0x4008090}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xfffffffc, @mcast2, 0xc}}}, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r2, 0x0, 0x1034}, 0x18) ioprio_set$pid(0x3, 0x0, 0x2007) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) ustat(0x801, &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): _data_blocks=5 [ 321.651192][ T3558] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 321.669572][ T3558] bond0 (unregistering): Released all slaves [ 321.688190][ T3558] bond1 (unregistering): Released all slaves [ 321.748418][T20340] lo speed is unknown, defaulting to 1000 [ 321.776660][T20338] netlink: 'syz.9.6417': attribute type 4 has an invalid length. [ 321.785416][ T3558] tipc: Left network mode [ 321.800918][ T3539] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 321.858768][ T3558] hsr_slave_0: left promiscuous mode [ 321.865943][ T3558] hsr_slave_1: left promiscuous mode [ 321.873832][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.881254][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.906069][ T3558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.913606][ T3558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.932165][ T3558] veth1_macvtap: left promiscuous mode [ 321.945134][ T3558] veth0_macvtap: left promiscuous mode [ 321.982457][ T3539] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.004223][ T3558] veth1_vlan: left promiscuous mode [ 322.009713][ T3558] veth0_vlan: left promiscuous mode [ 322.056788][T20360] loop0: detected capacity change from 0 to 164 [ 322.070942][T20361] netlink: 'syz.6.6422': attribute type 10 has an invalid length. [ 322.182997][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 322.183015][ T29] audit: type=1326 audit(1757818892.150:26551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.184679][T20370] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6426'. [ 322.189356][ T29] audit: type=1326 audit(1757818892.150:26552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.228650][T20370] loop6: detected capacity change from 0 to 128 [ 322.252181][ T29] audit: type=1326 audit(1757818892.150:26553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.275894][ T29] audit: type=1326 audit(1757818892.150:26554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.299514][ T29] audit: type=1326 audit(1757818892.150:26555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.332861][ T29] audit: type=1326 audit(1757818892.220:26556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.357867][ T29] audit: type=1326 audit(1757818892.220:26557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.381792][ T29] audit: type=1326 audit(1757818892.220:26558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.391797][T20377] loop0: detected capacity change from 0 to 128 [ 322.405386][ T29] audit: type=1326 audit(1757818892.220:26559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.435321][ T29] audit: type=1326 audit(1757818892.220:26560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20364 comm="syz.0.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 322.495514][T20380] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6431'. [ 322.536029][T20391] pim6reg1: entered promiscuous mode [ 322.541399][T20391] pim6reg1: entered allmulticast mode [ 322.552992][T20389] vhci_hcd: invalid port number 96 [ 322.558151][T20389] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 322.610682][T20393] loop9: detected capacity change from 0 to 512 [ 322.618418][T20393] ext4: Unknown parameter 'smackfstransmute' [ 322.636370][T20395] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 322.647427][T20393] IPVS: stopping master sync thread 20395 ... [ 322.671781][T20387] lo speed is unknown, defaulting to 1000 [ 322.754010][T20406] netlink: 180 bytes leftover after parsing attributes in process `syz.9.6440'. [ 322.765175][T20406] loop9: detected capacity change from 0 to 128 [ 322.846934][T20411] loop5: detected capacity change from 0 to 2048 [ 322.865299][T20411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.503996][T20430] loop4: detected capacity change from 0 to 1024 [ 323.536543][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.547492][T20430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.619191][T20430] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.671711][T20437] loop0: detected capacity change from 0 to 1024 [ 323.682175][T20437] EXT4-fs: Ignoring removed mblk_io_submit option [ 323.690895][T20430] futex_wake_op: syz.4.6448 tries to shift op by -1; fix this program [ 323.737795][ T3558] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:59: bg 0: block 393: padding at end of block bitmap is not set [ 323.765814][T20437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.795222][ T3558] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 323.807944][ T3558] EXT4-fs (loop4): This should not happen!! Data will be lost [ 323.807944][ T3558] [ 323.862981][T20437] netlink: 'syz.0.6452': attribute type 4 has an invalid length. [ 323.875122][T19674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.924289][T20448] lo speed is unknown, defaulting to 1000 [ 323.990466][T12499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.154065][T20454] loop9: detected capacity change from 0 to 128 [ 324.170272][T20454] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.226834][T20454] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 324.432830][ T10] hid-generic 0000:0000:0000.00C5: unknown main item tag 0x0 [ 324.451745][ T10] hid-generic 0000:0000:0000.00C5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 324.470781][T20464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6461'. [ 324.604097][T20469] loop5: detected capacity change from 0 to 512 [ 324.621576][T20469] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.6461: missing EA_INODE flag [ 324.638102][T20469] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.6461: error while reading EA inode 11 err=-117 [ 324.650614][ T3539] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 324.660198][T20469] EXT4-fs (loop5): 1 orphan inode deleted [ 324.667820][T20469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.700055][T20469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20469 comm=syz.5.6461 [ 325.225720][T20486] loop9: detected capacity change from 0 to 1024 [ 325.235476][T20486] EXT4-fs: Ignoring removed mblk_io_submit option [ 325.254342][T20486] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.275039][T20486] netlink: 'syz.9.6467': attribute type 4 has an invalid length. [ 325.293614][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.414331][T20493] lo speed is unknown, defaulting to 1000 [ 325.454535][T20495] loop6: detected capacity change from 0 to 512 [ 325.499604][T20495] EXT4-fs warning (device loop6): ext4_xattr_inode_get:542: inode #11: comm syz.6.6468: ea_inode file size=0 entry size=6 [ 325.529374][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.546774][T20501] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6471'. [ 325.558226][T20495] EXT4-fs (loop6): 1 orphan inode deleted [ 325.565708][T20495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.756493][T20506] tipc: Enabling of bearer rejected, already enabled [ 325.997308][T20511] tipc: Enabling of bearer rejected, already enabled [ 326.340740][T20525] loop9: detected capacity change from 0 to 128 [ 326.385936][T20531] loop5: detected capacity change from 0 to 512 [ 326.398533][T20525] bio_check_eod: 162 callbacks suppressed [ 326.398551][T20525] syz.9.6480: attempt to access beyond end of device [ 326.398551][T20525] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 326.420825][T20531] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 326.433856][T20531] EXT4-fs (loop5): 1 truncate cleaned up [ 326.439953][T20531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.458208][T20534] loop4: detected capacity change from 0 to 1024 [ 326.458698][T20531] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 326.465960][T20534] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.483801][T20534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.499789][T20534] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 326.501236][T20531] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6483'. [ 326.515218][T20534] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 326.536053][T20534] EXT4-fs (loop4): This should not happen!! Data will be lost [ 326.536053][T20534] [ 326.545788][T20534] EXT4-fs (loop4): Total free blocks count 0 [ 326.551820][T20534] EXT4-fs (loop4): Free/Dirty block details [ 326.557731][T20534] EXT4-fs (loop4): free_blocks=68451041280 [ 326.563593][T20534] EXT4-fs (loop4): dirty_blocks=80 [ 326.564209][T20538] netlink: 'syz.4.6484': attribute type 4 has an invalid length. [ 326.568718][T20534] EXT4-fs (loop4): Block reservation details [ 326.568734][T20534] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 326.604459][ T3539] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 326.620463][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.629958][T20540] loop9: detected capacity change from 0 to 128 [ 326.644254][T20540] syz.9.6485: attempt to access beyond end of device [ 326.644254][T20540] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 326.659994][T20540] syz.9.6485: attempt to access beyond end of device [ 326.659994][T20540] loop9: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 326.688088][T20540] syz.9.6485: attempt to access beyond end of device [ 326.688088][T20540] loop9: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 326.699185][T20547] loop5: detected capacity change from 0 to 1024 [ 326.701566][T20540] buffer_io_error: 71 callbacks suppressed [ 326.701632][T20540] Buffer I/O error on dev loop9, logical block 76, lost async page write [ 326.708474][T20547] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.718405][T20540] syz.9.6485: attempt to access beyond end of device [ 326.718405][T20540] loop9: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 326.743315][T20540] syz.9.6485: attempt to access beyond end of device [ 326.743315][T20540] loop9: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 326.756920][T20540] Buffer I/O error on dev loop9, logical block 88, lost async page write [ 326.765941][T20540] syz.9.6485: attempt to access beyond end of device [ 326.765941][T20540] loop9: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 326.780241][T20540] syz.9.6485: attempt to access beyond end of device [ 326.780241][T20540] loop9: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 326.781559][T20550] netlink: 'syz.4.6489': attribute type 1 has an invalid length. [ 326.793686][T20540] Buffer I/O error on dev loop9, logical block 92, lost async page write [ 326.801390][T20550] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6489'. [ 326.820201][T20540] syz.9.6485: attempt to access beyond end of device [ 326.820201][T20540] loop9: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 326.824222][T20547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.849536][T20547] netlink: 'syz.5.6488': attribute type 4 has an invalid length. [ 326.854120][T20540] syz.9.6485: attempt to access beyond end of device [ 326.854120][T20540] loop9: rw=2049, sector=208, nr_sectors = 2 limit=128 [ 326.870795][T20540] Buffer I/O error on dev loop9, logical block 104, lost async page write [ 326.880438][T20540] Buffer I/O error on dev loop9, logical block 108, lost async page write [ 326.889651][T20540] Buffer I/O error on dev loop9, logical block 120, lost async page write [ 326.901231][T20041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.914941][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.924844][T20540] Buffer I/O error on dev loop9, logical block 124, lost async page write [ 326.965074][T20540] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 326.998545][T20540] Buffer I/O error on dev loop9, logical block 84, lost async page write [ 327.008187][T20540] Buffer I/O error on dev loop9, logical block 112, lost async page write [ 327.069416][T20567] lo speed is unknown, defaulting to 1000 [ 327.114282][T20572] loop4: detected capacity change from 0 to 128 [ 327.134607][T20573] loop0: detected capacity change from 0 to 128 [ 327.150282][T20572] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.165685][T20573] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.178382][T20572] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.189998][T20573] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.218916][ T3471] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 327.236965][ T3471] hid-generic 0000:0000:0000.00C6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 327.316781][T20577] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6498'. [ 327.337671][T20576] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6499'. [ 327.358172][ T3471] hid-generic 0000:0000:0000.00C7: unknown main item tag 0x0 [ 327.401896][ T3471] hid-generic 0000:0000:0000.00C7: hidraw1: HID v0.00 Device [syz1] on syz0 [ 327.433821][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 327.433894][ T29] audit: type=1326 audit(1757818897.400:26780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 327.494730][T20581] loop9: detected capacity change from 0 to 512 [ 327.502406][ T29] audit: type=1326 audit(1757818897.460:26781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 327.526283][ T29] audit: type=1326 audit(1757818897.460:26782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 327.549976][ T29] audit: type=1326 audit(1757818897.460:26783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 327.580187][T20583] pim6reg1: entered promiscuous mode [ 327.580422][T20581] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.6499: missing EA_INODE flag [ 327.585548][T20583] pim6reg1: entered allmulticast mode [ 327.589096][ T29] audit: type=1326 audit(1757818897.530:26784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7869f65b67 code=0x7ffc0000 [ 327.626078][ T29] audit: type=1326 audit(1757818897.530:26785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7869f0ada9 code=0x7ffc0000 [ 327.634144][T20581] EXT4-fs error (device loop9): ext4_xattr_inode_iget:442: comm syz.9.6499: error while reading EA inode 11 err=-117 [ 327.649668][ T29] audit: type=1326 audit(1757818897.530:26786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 327.649710][ T29] audit: type=1326 audit(1757818897.530:26787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7869f65b67 code=0x7ffc0000 [ 327.697137][T20581] EXT4-fs (loop9): 1 orphan inode deleted [ 327.709041][ T29] audit: type=1326 audit(1757818897.530:26788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7869f0ada9 code=0x7ffc0000 [ 327.709122][ T29] audit: type=1326 audit(1757818897.530:26789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20575 comm="syz.6.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 327.720331][T20581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.821732][T20581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20581 comm=syz.9.6499 [ 327.857134][ T3552] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.881187][T20590] loop5: detected capacity change from 0 to 1024 [ 327.888112][T20590] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.892909][T20592] tipc: Enabling of bearer rejected, already enabled [ 327.898170][T20589] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6501'. [ 327.914015][T20590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.934936][T20590] netlink: 'syz.5.6502': attribute type 4 has an invalid length. [ 328.005349][T20603] batadv_slave_1: entered promiscuous mode [ 328.099473][T20602] batadv_slave_1: left promiscuous mode [ 328.355643][T20623] pim6reg1: entered promiscuous mode [ 328.361050][T20623] pim6reg1: entered allmulticast mode [ 328.475203][T20630] loop5: detected capacity change from 0 to 1024 [ 328.496440][T20630] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.536908][T20626] lo speed is unknown, defaulting to 1000 [ 328.542040][T20630] netlink: 'syz.5.6516': attribute type 4 has an invalid length. [ 328.608495][T20641] loop6: detected capacity change from 0 to 2048 [ 328.666601][T20641] Alternate GPT is invalid, using primary GPT. [ 328.673035][T20641] loop6: p2 p3 p7 [ 328.688378][T20641] netlink: 'syz.6.6520': attribute type 3 has an invalid length. [ 328.808965][T20651] tipc: Enabled bearer , priority 0 [ 328.826375][T20650] tipc: Disabling bearer [ 329.300137][T20687] loop4: detected capacity change from 0 to 128 [ 329.430260][T20686] lo speed is unknown, defaulting to 1000 [ 329.752808][T20701] tipc: Enabled bearer , priority 0 [ 329.776272][T20699] tipc: Resetting bearer [ 329.794159][T20699] tipc: Disabling bearer [ 329.890474][T20712] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6549'. [ 329.910819][T20712] loop6: detected capacity change from 0 to 128 [ 329.938317][T20714] loop4: detected capacity change from 0 to 2048 [ 330.031442][T20723] tipc: Enabled bearer , priority 0 [ 330.048220][T20722] tipc: Disabling bearer [ 330.123444][T20727] loop5: detected capacity change from 0 to 512 [ 330.138534][T20734] openvswitch: netlink: Message has 6 unknown bytes. [ 330.173270][T20727] EXT4-fs warning (device loop5): ext4_xattr_inode_get:542: inode #11: comm syz.5.6555: ea_inode file size=0 entry size=6 [ 330.186315][T20727] EXT4-fs (loop5): 1 orphan inode deleted [ 330.196410][T20732] tipc: Enabled bearer , priority 0 [ 330.226375][T20730] tipc: Resetting bearer [ 330.254998][T20730] tipc: Disabling bearer [ 330.348223][T20751] netlink: 288 bytes leftover after parsing attributes in process `syz.9.6563'. [ 330.429335][T20757] netlink: 'syz.9.6566': attribute type 10 has an invalid length. [ 330.500982][T20759] loop9: detected capacity change from 0 to 2048 [ 330.872053][T20778] vhci_hcd: invalid port number 96 [ 330.877253][T20778] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 331.044518][T20782] pim6reg1: entered promiscuous mode [ 331.049899][T20782] pim6reg1: entered allmulticast mode [ 331.123151][T20786] loop4: detected capacity change from 0 to 1024 [ 331.130087][T20786] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.132829][T20776] siw: device registration error -23 [ 331.178932][T20786] netlink: 'syz.4.6577': attribute type 4 has an invalid length. [ 331.253448][T20791] netlink: 'syz.6.6578': attribute type 10 has an invalid length. [ 331.271359][T20798] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6581'. [ 331.298492][T20798] loop4: detected capacity change from 0 to 128 [ 331.404432][T20802] vhci_hcd: invalid port number 96 [ 331.409598][T20802] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 331.500616][T20811] loop4: detected capacity change from 0 to 2048 [ 331.847774][T20831] loop5: detected capacity change from 0 to 128 [ 331.861330][T20831] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.874295][T20833] loop4: detected capacity change from 0 to 128 [ 331.881504][T20833] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.898486][T20831] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.908487][T20833] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.962783][ T3471] hid-generic 0000:0000:0000.00C8: unknown main item tag 0x0 [ 331.981785][ T3471] hid-generic 0000:0000:0000.00C8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 332.029724][ T3470] hid-generic 0000:0000:0000.00C9: unknown main item tag 0x0 [ 332.043174][ T3470] hid-generic 0000:0000:0000.00C9: hidraw1: HID v0.00 Device [syz1] on syz0 [ 332.171231][ T3563] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.242214][T20843] vhci_hcd: invalid port number 96 [ 332.247389][T20843] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 332.311553][T20854] loop4: detected capacity change from 0 to 1024 [ 332.352030][T20854] EXT4-fs: Ignoring removed mblk_io_submit option [ 332.388359][T20859] netlink: 'syz.0.6604': attribute type 10 has an invalid length. [ 332.397147][T20857] loop6: detected capacity change from 0 to 2048 [ 332.397392][ T3513] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.415171][T20854] EXT4-fs mount: 12 callbacks suppressed [ 332.415190][T20854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.452294][T20854] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 332.467671][T20857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.520354][T20868] sd 0:0:1:0: device reset [ 332.532878][T20854] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 332.545329][T20854] EXT4-fs (loop4): This should not happen!! Data will be lost [ 332.545329][T20854] [ 332.545996][T20869] netlink: 'syz.4.6602': attribute type 4 has an invalid length. [ 332.555114][T20854] EXT4-fs (loop4): Total free blocks count 0 [ 332.555137][T20854] EXT4-fs (loop4): Free/Dirty block details [ 332.574828][T20854] EXT4-fs (loop4): free_blocks=68451041280 [ 332.580675][T20854] EXT4-fs (loop4): dirty_blocks=80 [ 332.585918][T20854] EXT4-fs (loop4): Block reservation details [ 332.591960][T20854] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 332.637451][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 332.637469][ T29] audit: type=1326 audit(1757818902.600:27491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20862 comm="syz.5.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 332.706090][ T3563] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 332.731835][T20866] lo speed is unknown, defaulting to 1000 [ 332.754632][ T29] audit: type=1326 audit(1757818902.640:27492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.778341][ T29] audit: type=1326 audit(1757818902.640:27493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.802158][ T29] audit: type=1326 audit(1757818902.640:27494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.825915][ T29] audit: type=1326 audit(1757818902.640:27495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.850087][ T29] audit: type=1326 audit(1757818902.640:27496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.873699][ T29] audit: type=1326 audit(1757818902.640:27497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.897328][ T29] audit: type=1326 audit(1757818902.640:27498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.921060][ T29] audit: type=1326 audit(1757818902.640:27499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.944736][ T29] audit: type=1326 audit(1757818902.650:27500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20872 comm="syz.0.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4473aaeba9 code=0x7ffc0000 [ 332.949859][T20863] siw: device registration error -23 [ 332.992377][T20041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.028243][T20873] siw: device registration error -23 [ 333.088614][T20881] loop5: detected capacity change from 0 to 128 [ 333.117009][T20881] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.149431][T20881] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.230950][T20899] netlink: 'syz.0.6616': attribute type 10 has an invalid length. [ 333.240230][ T3392] hid-generic 0000:0000:0000.00CA: unknown main item tag 0x0 [ 333.252239][ T3392] hid-generic 0000:0000:0000.00CA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.345709][T20901] lo speed is unknown, defaulting to 1000 [ 333.357451][T20902] loop4: detected capacity change from 0 to 128 [ 333.387256][T20904] loop0: detected capacity change from 0 to 1024 [ 333.403321][T20904] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.437311][T20904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.485872][T20902] bio_check_eod: 49 callbacks suppressed [ 333.485907][T20902] syz.4.6617: attempt to access beyond end of device [ 333.485907][T20902] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 333.539951][T20904] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 333.587428][T20904] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 333.599833][T20904] EXT4-fs (loop0): This should not happen!! Data will be lost [ 333.599833][T20904] [ 333.609551][T20904] EXT4-fs (loop0): Total free blocks count 0 [ 333.615651][T20904] EXT4-fs (loop0): Free/Dirty block details [ 333.616300][T20909] netlink: 'syz.0.6618': attribute type 4 has an invalid length. [ 333.621573][T20904] EXT4-fs (loop0): free_blocks=68451041280 [ 333.635228][T20904] EXT4-fs (loop0): dirty_blocks=80 [ 333.640363][T20904] EXT4-fs (loop0): Block reservation details [ 333.646415][T20904] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 333.672129][ T3513] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 333.845377][T20923] netlink: 'syz.9.6623': attribute type 10 has an invalid length. [ 333.959420][T20940] loop9: detected capacity change from 0 to 128 [ 333.976109][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6630'. [ 334.017898][T20934] lo speed is unknown, defaulting to 1000 [ 334.146893][T20940] syz.9.6627: attempt to access beyond end of device [ 334.146893][T20940] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 334.234449][T20955] loop6: detected capacity change from 0 to 2048 [ 334.275072][T20955] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.296338][T20938] netlink: 'syz.4.6628': attribute type 1 has an invalid length. [ 334.356002][T20947] loop5: detected capacity change from 0 to 32768 [ 334.418819][T20947] loop5: p1 p2 p3 < p5 p6 p7 > [ 334.429306][T20947] loop5: p2 size 16775168 extends beyond EOD, truncated [ 334.449585][T20947] loop5: p5 start 4294970168 is beyond EOD, truncated [ 334.754519][T20963] lo speed is unknown, defaulting to 1000 [ 334.842748][T20041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.444698][T20980] loop5: detected capacity change from 0 to 128 [ 335.464624][T20980] syz.5.6641: attempt to access beyond end of device [ 335.464624][T20980] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 335.498992][T20980] syz.5.6641: attempt to access beyond end of device [ 335.498992][T20980] loop5: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 335.534685][T20980] syz.5.6641: attempt to access beyond end of device [ 335.534685][T20980] loop5: rw=0, sector=152, nr_sectors = 2 limit=128 [ 335.587904][T20983] syz.5.6641: attempt to access beyond end of device [ 335.587904][T20983] loop5: rw=0, sector=138, nr_sectors = 2 limit=128 [ 335.592970][T20985] tipc: Enabled bearer , priority 0 [ 335.611295][T20984] tipc: Resetting bearer [ 335.648758][T20984] tipc: Disabling bearer [ 335.899301][T21006] loop5: detected capacity change from 0 to 128 [ 335.914349][T21006] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.933680][T21006] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 335.949364][ T2957] hid-generic 0000:0000:0000.00CB: unknown main item tag 0x0 [ 335.970965][ T2957] hid-generic 0000:0000:0000.00CB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.259034][T21014] lo speed is unknown, defaulting to 1000 [ 336.512789][ T3471] hid-generic 0000:0000:0000.00CC: unknown main item tag 0x0 [ 336.614527][ T3471] hid-generic 0000:0000:0000.00CC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.686364][ T3563] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.730856][T21025] loop6: detected capacity change from 0 to 512 [ 336.759956][T21025] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6657: iget: bad i_size value: 38620345925642 [ 336.781650][T21025] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.6657: couldn't read orphan inode 15 (err -117) [ 336.793645][T21026] tipc: Enabled bearer , priority 0 [ 336.813861][T21024] tipc: Resetting bearer [ 336.830635][T21025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.857763][T21024] tipc: Disabling bearer [ 336.874564][T21033] loop9: detected capacity change from 0 to 128 [ 336.894140][T21033] syz.9.6659: attempt to access beyond end of device [ 336.894140][T21033] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 336.909773][T21033] syz.9.6659: attempt to access beyond end of device [ 336.909773][T21033] loop9: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 336.923547][T21033] syz.9.6659: attempt to access beyond end of device [ 336.923547][T21033] loop9: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 336.937086][T21033] buffer_io_error: 17 callbacks suppressed [ 336.937102][T21033] Buffer I/O error on dev loop9, logical block 76, lost async page write [ 336.952274][T21033] syz.9.6659: attempt to access beyond end of device [ 336.952274][T21033] loop9: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 337.005130][T21045] siw: device registration error -23 [ 337.061898][T21025] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.6657: bg 0: block 5: invalid block bitmap [ 337.074751][T21025] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1748 with error 28 [ 337.087322][T21025] EXT4-fs (loop6): This should not happen!! Data will be lost [ 337.087322][T21025] [ 337.097059][T21025] EXT4-fs (loop6): Total free blocks count 0 [ 337.103102][T21025] EXT4-fs (loop6): Free/Dirty block details [ 337.109014][T21025] EXT4-fs (loop6): free_blocks=0 [ 337.113982][T21025] EXT4-fs (loop6): dirty_blocks=1752 [ 337.119278][T21025] EXT4-fs (loop6): Block reservation details [ 337.125304][T21025] EXT4-fs (loop6): i_reserved_data_blocks=1752 [ 337.148472][T20041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.213953][T21056] vhci_hcd: invalid port number 96 [ 337.219114][T21056] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 337.234513][T21057] loop9: detected capacity change from 0 to 512 [ 337.254584][T21057] EXT4-fs warning (device loop9): ext4_xattr_inode_get:542: inode #11: comm syz.9.6664: ea_inode file size=0 entry size=6 [ 337.271969][T21057] EXT4-fs (loop9): 1 orphan inode deleted [ 337.279298][T21057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.335147][T21060] sd 0:0:1:0: device reset [ 337.457114][T21067] loop6: detected capacity change from 0 to 1024 [ 337.486429][T21067] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.645320][T21070] lo speed is unknown, defaulting to 1000 [ 337.698005][T21074] tipc: Enabled bearer , priority 0 [ 337.774451][T21067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.788763][T21068] tipc: Resetting bearer [ 337.949499][T21068] tipc: Disabling bearer [ 337.993122][T21067] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 338.074750][T21067] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 338.087040][T21067] EXT4-fs (loop6): This should not happen!! Data will be lost [ 338.087040][T21067] [ 338.096743][T21067] EXT4-fs (loop6): Total free blocks count 0 [ 338.102819][T21067] EXT4-fs (loop6): Free/Dirty block details [ 338.108740][T21067] EXT4-fs (loop6): free_blocks=68451041280 [ 338.114586][T21067] EXT4-fs (loop6): dirty_blocks=80 [ 338.119738][T21067] EXT4-fs (loop6): Block reservation details [ 338.125752][T21067] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 338.298645][T21080] netlink: 'syz.6.6670': attribute type 4 has an invalid length. [ 338.369372][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 338.369389][ T29] audit: type=1326 audit(1757818908.330:27960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.399275][ T29] audit: type=1326 audit(1757818908.330:27961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.423008][ T29] audit: type=1326 audit(1757818908.330:27962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.446699][ T29] audit: type=1326 audit(1757818908.330:27963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.511819][ T3563] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 338.554669][T21092] loop4: detected capacity change from 0 to 2048 [ 338.561292][ T29] audit: type=1326 audit(1757818908.450:27964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.585055][ T29] audit: type=1326 audit(1757818908.450:27965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.608730][ T29] audit: type=1326 audit(1757818908.450:27966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.632662][ T29] audit: type=1326 audit(1757818908.450:27967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.656446][ T29] audit: type=1326 audit(1757818908.450:27968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.680122][ T29] audit: type=1326 audit(1757818908.450:27969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21078 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f57f698eba9 code=0x7ffc0000 [ 338.723787][T21092] Alternate GPT is invalid, using primary GPT. [ 338.730154][T21092] loop4: p2 p3 p7 [ 338.743573][T21097] loop6: detected capacity change from 0 to 128 [ 338.769237][T21099] netlink: 'syz.0.6681': attribute type 10 has an invalid length. [ 338.789427][T21092] netlink: 'syz.4.6679': attribute type 3 has an invalid length. [ 338.825335][T21105] loop0: detected capacity change from 0 to 2048 [ 338.831862][T21101] loop6: detected capacity change from 0 to 2048 [ 338.847486][T21107] loop4: detected capacity change from 0 to 128 [ 338.855460][T21105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.870675][T21107] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 338.885654][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.896909][T21101] Alternate GPT is invalid, using primary GPT. [ 338.903384][T21101] loop6: p2 p3 p7 [ 338.907669][T21107] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 338.917513][T12499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.955124][ T3471] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 338.963107][ T3471] hid-generic 0000:0000:0000.00CD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 339.055844][T21101] netlink: 'syz.6.6683': attribute type 3 has an invalid length. [ 339.145734][T21121] loop6: detected capacity change from 0 to 2048 [ 339.204282][T21121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.255417][T21124] lo speed is unknown, defaulting to 1000 [ 339.475683][T21137] tipc: Enabled bearer , priority 0 [ 339.532746][T21132] tipc: Resetting bearer [ 339.548101][T21132] tipc: Disabling bearer [ 339.564265][T20041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.630525][ T3513] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.659403][T21144] tipc: Enabled bearer , priority 0 [ 339.676146][T21143] tipc: Disabling bearer [ 339.802307][T21154] vhci_hcd: invalid port number 96 [ 339.807481][T21154] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 339.860840][T21159] loop6: detected capacity change from 0 to 128 [ 339.969043][T21167] loop6: detected capacity change from 0 to 2048 [ 339.997946][T21167] Alternate GPT is invalid, using primary GPT. [ 340.004542][T21167] loop6: p2 p3 p7 [ 340.013798][T21172] netlink: 'syz.9.6707': attribute type 10 has an invalid length. [ 340.036551][T21167] netlink: 'syz.6.6706': attribute type 3 has an invalid length. [ 340.229678][ T3471] hid-generic 0000:0000:0000.00CE: unknown main item tag 0x0 [ 340.237957][ T3471] hid-generic 0000:0000:0000.00CE: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.238596][T21187] loop9: detected capacity change from 0 to 128 [ 340.273741][T21187] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.289668][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6713'. [ 340.368428][T21193] loop5: detected capacity change from 0 to 1024 [ 340.394624][T21193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.464699][ T3533] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.502581][ T3471] hid-generic 0000:0000:0000.00CF: unknown main item tag 0x0 [ 340.510872][ T3471] hid-generic 0000:0000:0000.00CF: hidraw1: HID v0.00 Device [syz1] on syz0 [ 340.522833][T21202] veth0_to_team: entered promiscuous mode [ 340.536670][T21204] loop6: detected capacity change from 0 to 1024 [ 340.549286][T21202] loop9: detected capacity change from 0 to 512 [ 340.578131][T21204] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.594401][T21204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.611057][T21204] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 340.628338][T21204] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 340.640903][T21204] EXT4-fs (loop6): This should not happen!! Data will be lost [ 340.640903][T21204] [ 340.650670][T21204] EXT4-fs (loop6): Total free blocks count 0 [ 340.656743][T21204] EXT4-fs (loop6): Free/Dirty block details [ 340.662682][T21204] EXT4-fs (loop6): free_blocks=68451041280 [ 340.668591][T21204] EXT4-fs (loop6): dirty_blocks=80 [ 340.669290][T21208] netlink: 'syz.6.6719': attribute type 4 has an invalid length. [ 340.673850][T21204] EXT4-fs (loop6): Block reservation details [ 340.687597][T21204] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 340.724162][T21185] siw: device registration error -23 [ 340.747114][T21207] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.6715: Allocating blocks 449-513 which overlap fs metadata [ 340.767441][ T3563] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 340.909626][T21192] EXT4-fs (loop5): pa ffff888107069ee0: logic 48, phys. 177, len 21 [ 340.917789][T21192] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 340.952242][T21227] atomic_op ffff88812020c128 conn xmit_atomic 0000000000000000 [ 341.071860][T11836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.127058][T21234] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 341.132288][T21241] pim6reg1: entered promiscuous mode [ 341.133686][T21234] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.138989][T21241] pim6reg1: entered allmulticast mode [ 341.146496][T21234] vhci_hcd vhci_hcd.0: Device attached [ 341.171061][T21242] vhci_hcd: unknown pdu 1 [ 341.175682][ T3525] vhci_hcd: stop threads [ 341.180047][ T3525] vhci_hcd: release socket [ 341.184600][ T3525] vhci_hcd: disconnect device [ 341.215575][T21236] lo speed is unknown, defaulting to 1000 [ 341.321288][T21245] loop9: detected capacity change from 0 to 512 [ 341.363017][T21250] loop0: detected capacity change from 0 to 128 [ 341.413958][T21249] bio_check_eod: 2 callbacks suppressed [ 341.413976][T21249] syz.0.6733: attempt to access beyond end of device [ 341.413976][T21249] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 341.617523][T21253] netlink: 'syz.0.6734': attribute type 10 has an invalid length. [ 341.732076][T21257] netlink: 'syz.0.6736': attribute type 10 has an invalid length. [ 341.750106][T21261] loop4: detected capacity change from 0 to 2048 [ 341.784236][T21265] loop0: detected capacity change from 0 to 1024 [ 341.793700][T21265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.810596][ T3470] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 341.820970][T21261] Alternate GPT is invalid, using primary GPT. [ 341.827511][T21261] loop4: p2 p3 p7 [ 341.840409][ T3470] hid-generic 0000:0000:0000.00D0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.884285][T21261] netlink: 'syz.4.6738': attribute type 3 has an invalid length. [ 341.917207][T21269] loop9: detected capacity change from 0 to 2048 [ 341.991924][T21269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.007519][T21274] pim6reg1: entered promiscuous mode [ 342.013019][T21274] pim6reg1: entered allmulticast mode [ 342.104904][T12499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.119295][T21283] sd 0:0:1:0: device reset [ 342.188468][T21289] tipc: Enabling of bearer rejected, already enabled [ 342.269900][T21292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.281533][T21292] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 342.302559][T21300] loop0: detected capacity change from 0 to 128 [ 342.345233][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.368532][T21296] lo speed is unknown, defaulting to 1000 [ 342.416406][T21300] syz.0.6751: attempt to access beyond end of device [ 342.416406][T21300] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 342.435735][T21306] loop9: detected capacity change from 0 to 2048 [ 342.474762][T21306] Alternate GPT is invalid, using primary GPT. [ 342.481105][T21306] loop9: p2 p3 p7 [ 342.567251][T21293] lo speed is unknown, defaulting to 1000 [ 342.651034][T21293] chnl_net:caif_netlink_parms(): no params data found [ 342.684023][T21323] loop0: detected capacity change from 0 to 1024 [ 342.706940][T21323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.747111][T21293] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.754293][T21293] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.761840][T21293] bridge_slave_0: entered allmulticast mode [ 342.768446][T21293] bridge_slave_0: entered promiscuous mode [ 342.775665][T21293] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.782869][T21293] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.792438][T21293] bridge_slave_1: entered allmulticast mode [ 342.799039][T21293] bridge_slave_1: entered promiscuous mode [ 342.802523][ T10] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 342.828942][ T10] hid-generic 0000:0000:0000.00D1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.856093][T21293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.867760][T21293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.882977][T21332] loop9: detected capacity change from 0 to 1024 [ 342.893000][T21332] EXT4-fs: Ignoring removed mblk_io_submit option [ 342.916220][T21293] team0: Port device team_slave_0 added [ 342.952071][T21293] team0: Port device team_slave_1 added [ 342.988976][T21332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.003567][T21330] lo speed is unknown, defaulting to 1000 [ 343.014201][T21332] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 343.022863][T21336] vhci_hcd: invalid port number 96 [ 343.034256][T21336] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 343.051728][T21332] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 343.063978][T21332] EXT4-fs (loop9): This should not happen!! Data will be lost [ 343.063978][T21332] [ 343.073654][T21332] EXT4-fs (loop9): Total free blocks count 0 [ 343.079649][T21332] EXT4-fs (loop9): Free/Dirty block details [ 343.085674][T21332] EXT4-fs (loop9): free_blocks=68451041280 [ 343.091489][T21332] EXT4-fs (loop9): dirty_blocks=80 [ 343.096738][T21332] EXT4-fs (loop9): Block reservation details [ 343.102764][T21332] EXT4-fs (loop9): i_reserved_data_blocks=5 [ 343.177643][T21340] FAULT_INJECTION: forcing a failure. [ 343.177643][T21340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.190858][T21340] CPU: 1 UID: 0 PID: 21340 Comm: syz.6.6761 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 343.190903][T21340] Tainted: [W]=WARN [ 343.190910][T21340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.190923][T21340] Call Trace: [ 343.190931][T21340] [ 343.190999][T21340] __dump_stack+0x1d/0x30 [ 343.191025][T21340] dump_stack_lvl+0xe8/0x140 [ 343.191045][T21340] dump_stack+0x15/0x1b [ 343.191062][T21340] should_fail_ex+0x265/0x280 [ 343.191094][T21340] should_fail+0xb/0x20 [ 343.191192][T21340] should_fail_usercopy+0x1a/0x20 [ 343.191264][T21340] strncpy_from_user+0x25/0x230 [ 343.191307][T21340] ? kmem_cache_alloc_noprof+0x186/0x310 [ 343.191341][T21340] ? getname_flags+0x80/0x3b0 [ 343.191375][T21340] getname_flags+0xae/0x3b0 [ 343.191407][T21340] path_listxattrat+0x7e/0x2a0 [ 343.191446][T21340] ? __secure_computing+0x82/0x150 [ 343.191507][T21340] __x64_sys_listxattr+0x4a/0x60 [ 343.191609][T21340] x64_sys_call+0x2df7/0x2ff0 [ 343.191635][T21340] do_syscall_64+0xd2/0x200 [ 343.191668][T21340] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 343.191742][T21340] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 343.191854][T21340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.191883][T21340] RIP: 0033:0x7f7869f6eba9 [ 343.191903][T21340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.191952][T21340] RSP: 002b:00007f78689cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 343.191971][T21340] RAX: ffffffffffffffda RBX: 00007f786a1b5fa0 RCX: 00007f7869f6eba9 [ 343.191986][T21340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.192003][T21340] RBP: 00007f78689cf090 R08: 0000000000000000 R09: 0000000000000000 [ 343.192020][T21340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.192037][T21340] R13: 00007f786a1b6038 R14: 00007f786a1b5fa0 R15: 00007fff353cc028 [ 343.192060][T21340] [ 343.362751][T21293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.372473][T21341] validate_nla: 2 callbacks suppressed [ 343.372560][T21341] netlink: 'syz.9.6758': attribute type 4 has an invalid length. [ 343.376303][T21293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.433609][T21293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.455075][T12499] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.489618][T21293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.496728][T21293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.522749][T21293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.544397][T21346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6760'. [ 343.557765][ T3513] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 343.586106][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 343.586149][ T29] audit: type=1326 audit(1757818913.550:28536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 343.620634][ T29] audit: type=1326 audit(1757818913.550:28537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 343.644339][ T29] audit: type=1326 audit(1757818913.590:28538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 343.668046][ T29] audit: type=1326 audit(1757818913.590:28539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 343.691702][ T29] audit: type=1326 audit(1757818913.590:28540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7869f6eba9 code=0x7ffc0000 [ 343.715418][ T29] audit: type=1326 audit(1757818913.590:28541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7869f70ac7 code=0x7ffc0000 [ 343.750829][T21293] hsr_slave_0: entered promiscuous mode [ 343.757893][T21293] hsr_slave_1: entered promiscuous mode [ 343.766293][T21293] debugfs: 'hsr0' already exists in 'hsr' [ 343.772113][T21293] Cannot create hsr debugfs directory [ 343.779219][ T29] audit: type=1326 audit(1757818913.690:28542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7869f70a3c code=0x7ffc0000 [ 343.802794][ T29] audit: type=1326 audit(1757818913.690:28543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7869f70974 code=0x7ffc0000 [ 343.803043][T21351] loop4: detected capacity change from 0 to 2048 [ 343.826659][ T29] audit: type=1326 audit(1757818913.690:28544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7869f70974 code=0x7ffc0000 [ 343.856512][ T29] audit: type=1326 audit(1757818913.690:28545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.6.6764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7869f6d80a code=0x7ffc0000 [ 343.915742][T21351] Alternate GPT is invalid, using primary GPT. [ 343.922309][T21351] loop4: p2 p3 p7 [ 343.951184][T21366] loop0: detected capacity change from 0 to 128 [ 343.965451][T21351] netlink: 'syz.4.6765': attribute type 3 has an invalid length. [ 344.035225][T21366] syz.0.6766: attempt to access beyond end of device [ 344.035225][T21366] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 344.088286][T21293] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.105546][T21363] lo speed is unknown, defaulting to 1000 [ 344.128759][T21293] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.188679][T21293] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.308745][T21293] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.399965][T21293] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.413230][T21293] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.435003][T21293] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.443835][T21411] vhci_hcd: invalid port number 96 [ 344.449175][T21411] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 344.463012][T21293] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.552022][T21440] loop0: detected capacity change from 0 to 1024 [ 344.564279][T21440] EXT4-fs: Ignoring removed mblk_io_submit option [ 344.572697][T21293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.580833][T21440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.589347][T21293] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.610094][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.617377][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.630120][T21427] syzkaller1: entered promiscuous mode [ 344.635930][T21427] syzkaller1: entered allmulticast mode [ 344.643888][T21440] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 344.664143][T21440] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 344.676395][T21440] EXT4-fs (loop0): This should not happen!! Data will be lost [ 344.676395][T21440] [ 344.686086][T21440] EXT4-fs (loop0): Total free blocks count 0 [ 344.687189][T21482] netlink: 'syz.0.6773': attribute type 4 has an invalid length. [ 344.692325][T21440] EXT4-fs (loop0): Free/Dirty block details [ 344.706044][T21440] EXT4-fs (loop0): free_blocks=68451041280 [ 344.711985][T21440] EXT4-fs (loop0): dirty_blocks=80 [ 344.717113][T21440] EXT4-fs (loop0): Block reservation details [ 344.723199][T21440] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 344.733764][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.740877][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.820127][T21502] tipc: Enabled bearer , priority 0 [ 344.829922][T21499] tipc: Disabling bearer [ 344.838398][ T3560] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 344.896336][T21293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.962653][T21518] loop4: detected capacity change from 0 to 2048 [ 344.996813][T21518] Alternate GPT is invalid, using primary GPT. [ 345.003363][T21518] loop4: p2 p3 p7 [ 345.025262][T21518] netlink: 'syz.4.6776': attribute type 3 has an invalid length. [ 345.117860][T21543] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 345.123157][T21293] veth0_vlan: entered promiscuous mode [ 345.124450][T21543] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.132961][T21293] veth1_vlan: entered promiscuous mode [ 345.137479][T21543] vhci_hcd vhci_hcd.0: Device attached [ 345.175251][T21293] veth0_macvtap: entered promiscuous mode [ 345.181382][T21545] vhci_hcd: connection closed [ 345.181647][ T3513] vhci_hcd: stop threads [ 345.186939][T21293] veth1_macvtap: entered promiscuous mode [ 345.190605][ T3513] vhci_hcd: release socket [ 345.200988][ T3513] vhci_hcd: disconnect device [ 345.207652][T21293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.219060][T21293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.231488][ T3513] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.240698][T21551] unsupported nla_type 52263 [ 345.250597][ T3513] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.276809][ T3513] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.306817][ T3513] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.471222][T21563] lo speed is unknown, defaulting to 1000 [ 345.745499][ T10] hid-generic 0000:0000:0000.00D2: unknown main item tag 0x0 [ 345.772374][ T10] hid-generic 0000:0000:0000.00D2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 345.861253][T21571] lo speed is unknown, defaulting to 1000 [ 346.028013][T21571] chnl_net:caif_netlink_parms(): no params data found [ 346.069075][T21606] FAULT_INJECTION: forcing a failure. [ 346.069075][T21606] name failslab, interval 1, probability 0, space 0, times 0 [ 346.081801][T21606] CPU: 0 UID: 0 PID: 21606 Comm: syz.4.6797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 346.081853][T21606] Tainted: [W]=WARN [ 346.081880][T21606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.081897][T21606] Call Trace: [ 346.081905][T21606] [ 346.081914][T21606] __dump_stack+0x1d/0x30 [ 346.081942][T21606] dump_stack_lvl+0xe8/0x140 [ 346.082003][T21606] dump_stack+0x15/0x1b [ 346.082066][T21606] should_fail_ex+0x265/0x280 [ 346.082092][T21606] should_failslab+0x8c/0xb0 [ 346.082130][T21606] kmem_cache_alloc_node_noprof+0x57/0x320 [ 346.082164][T21606] ? __alloc_skb+0x101/0x320 [ 346.082187][T21606] __alloc_skb+0x101/0x320 [ 346.082213][T21606] alloc_skb_with_frags+0x7d/0x470 [ 346.082246][T21606] ? __rcu_read_unlock+0x4f/0x70 [ 346.082300][T21606] ? ref_tracker_alloc+0x1f2/0x2f0 [ 346.082330][T21606] sock_alloc_send_pskb+0x43a/0x4f0 [ 346.082369][T21606] ? __rcu_read_unlock+0x4f/0x70 [ 346.082402][T21606] raw_sendmsg+0x1ac/0x510 [ 346.082429][T21606] ieee802154_sock_sendmsg+0x51/0x60 [ 346.082464][T21606] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 346.082499][T21606] __sock_sendmsg+0x145/0x180 [ 346.082553][T21606] ____sys_sendmsg+0x31e/0x4e0 [ 346.082593][T21606] ___sys_sendmsg+0x17b/0x1d0 [ 346.082675][T21606] __x64_sys_sendmsg+0xd4/0x160 [ 346.082716][T21606] x64_sys_call+0x191e/0x2ff0 [ 346.082746][T21606] do_syscall_64+0xd2/0x200 [ 346.082787][T21606] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 346.082877][T21606] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 346.082972][T21606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.083000][T21606] RIP: 0033:0x7f9adfd3eba9 [ 346.083020][T21606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.083043][T21606] RSP: 002b:00007f9ade79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.083065][T21606] RAX: ffffffffffffffda RBX: 00007f9adff85fa0 RCX: 00007f9adfd3eba9 [ 346.083078][T21606] RDX: 00000000040408c0 RSI: 0000200000000100 RDI: 0000000000000004 [ 346.083156][T21606] RBP: 00007f9ade79f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.083173][T21606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.083189][T21606] R13: 00007f9adff86038 R14: 00007f9adff85fa0 R15: 00007fffad9d2de8 [ 346.083215][T21606] [ 346.086947][T21608] loop6: detected capacity change from 0 to 128 [ 346.326456][T21608] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.364208][T21608] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 346.381514][T21571] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.388689][T21571] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.415766][ T3471] hid-generic 0000:0000:0000.00D3: unknown main item tag 0x0 [ 346.431802][T21571] bridge_slave_0: entered allmulticast mode [ 346.432394][ T3471] hid-generic 0000:0000:0000.00D3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 346.445003][T21571] bridge_slave_0: entered promiscuous mode [ 346.545256][T21571] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.552506][T21571] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.583979][T21571] bridge_slave_1: entered allmulticast mode [ 346.592592][T21571] bridge_slave_1: entered promiscuous mode [ 346.628367][T21624] tipc: Started in network mode [ 346.633346][T21624] tipc: Node identity 624ab1f4a593, cluster identity 4711 [ 346.640571][T21624] tipc: Enabled bearer , priority 0 [ 346.660837][T21623] tipc: Resetting bearer [ 346.674057][T21639] loop9: detected capacity change from 0 to 128 [ 346.680914][T21639] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.695331][T21639] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 346.726924][ T2957] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 346.745442][T21623] tipc: Disabling bearer [ 346.764250][ T2957] hid-generic 0000:0000:0000.00D4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 346.847809][T21571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.989319][T21571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.098420][T21571] team0: Port device team_slave_0 added [ 347.106562][T21571] team0: Port device team_slave_1 added [ 347.153766][T21571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.160816][T21571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.186847][T21571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.255502][T21571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.262555][T21571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.288597][T21571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.354799][T21651] lo speed is unknown, defaulting to 1000 [ 347.408481][ T3531] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.444511][T21571] hsr_slave_0: entered promiscuous mode [ 347.450803][T21571] hsr_slave_1: entered promiscuous mode [ 347.465436][T21571] debugfs: 'hsr0' already exists in 'hsr' [ 347.471190][T21571] Cannot create hsr debugfs directory [ 347.518974][T21667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21667 comm=syz.9.6819 [ 347.595270][T21671] openvswitch: netlink: Message has 6 unknown bytes. [ 347.603347][T21571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.665890][T21571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.715127][T21676] loop4: detected capacity change from 0 to 128 [ 347.731348][T21676] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.733131][T21571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.754360][T21676] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.772700][T21678] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.797365][ T3471] hid-generic 0000:0000:0000.00D5: unknown main item tag 0x0 [ 347.807363][ T3471] hid-generic 0000:0000:0000.00D5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.807450][T21571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.828309][T21679] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6823'. [ 347.931203][T21571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.942873][T21571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.963908][T21571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.979825][T21571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.025718][T21571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.038384][T21571] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.054168][ T3552] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.061249][ T3552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.079617][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.086913][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.220107][T21571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.347278][T21709] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 348.369792][T21705] IPVS: stopping master sync thread 21709 ... [ 348.430956][T21713] netlink: 'syz.9.6829': attribute type 10 has an invalid length. [ 348.434635][T21571] veth0_vlan: entered promiscuous mode [ 348.438851][T21713] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6829'. [ 348.465245][T21571] veth1_vlan: entered promiscuous mode [ 348.486475][T21713] dummy0: entered promiscuous mode [ 348.497440][T21713] bridge0: port 1(dummy0) entered blocking state [ 348.504139][T21713] bridge0: port 1(dummy0) entered disabled state [ 348.516089][T21713] dummy0: entered allmulticast mode [ 348.523891][T21713] bridge0: port 1(dummy0) entered blocking state [ 348.530383][T21713] bridge0: port 1(dummy0) entered forwarding state [ 348.569649][T21571] veth0_macvtap: entered promiscuous mode [ 348.594946][T21571] veth1_macvtap: entered promiscuous mode [ 348.610251][ T29] kauditd_printk_skb: 1144 callbacks suppressed [ 348.610269][ T29] audit: type=1326 audit(1757818918.570:29690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b72a15b67 code=0x7ffc0000 [ 348.637967][T21571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.656729][ T29] audit: type=1326 audit(1757818918.600:29691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b729bada9 code=0x7ffc0000 [ 348.669953][T21571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.680457][ T29] audit: type=1326 audit(1757818918.600:29692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b72a15b67 code=0x7ffc0000 [ 348.680505][ T29] audit: type=1326 audit(1757818918.600:29693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b729bada9 code=0x7ffc0000 [ 348.734987][ T29] audit: type=1326 audit(1757818918.600:29694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 348.758649][ T29] audit: type=1326 audit(1757818918.600:29695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 348.782264][ T29] audit: type=1326 audit(1757818918.600:29696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 348.805882][ T29] audit: type=1326 audit(1757818918.600:29697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 348.829529][ T29] audit: type=1326 audit(1757818918.600:29698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 348.853294][ T29] audit: type=1326 audit(1757818918.600:29699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21715 comm="syz.9.6830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 348.933641][ T3503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.009038][ T3503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.046063][ T3503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.061967][ T3562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.115445][T21728] loop0: detected capacity change from 0 to 2048 [ 349.166842][T21728] Alternate GPT is invalid, using primary GPT. [ 349.173571][T21728] loop0: p2 p3 p7 [ 349.269306][T21731] tipc: Enabled bearer , priority 0 [ 349.280504][T21728] netlink: 'syz.0.6788': attribute type 3 has an invalid length. [ 349.329486][T21730] tipc: Resetting bearer [ 349.356804][T21730] tipc: Disabling bearer [ 349.371895][T21705] Set syz1 is full, maxelem 65536 reached [ 349.395683][T21734] loop0: detected capacity change from 0 to 2048 [ 349.434342][T21736] loop4: detected capacity change from 0 to 1024 [ 349.464379][T21736] EXT4-fs: Ignoring removed bh option [ 349.469830][T21736] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.510741][T21736] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 349.521213][T21734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.602628][T21736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.634025][T21744] loop9: detected capacity change from 0 to 128 [ 349.640777][T21744] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.657639][T21678] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.679693][T21736] 9pnet_fd: Insufficient options for proto=fd [ 349.708050][T21744] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.720529][T21736] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.6837: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 349.758006][T21571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.774118][T21678] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.790727][T19674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.803493][ T3392] hid-generic 0000:0000:0000.00D6: unknown main item tag 0x0 [ 349.821677][T21678] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.832206][ T3392] hid-generic 0000:0000:0000.00D6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 349.931119][ T3562] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.957670][ T3562] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.966013][ T3562] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.980226][ T3562] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.169310][T21763] loop6: detected capacity change from 0 to 1024 [ 350.187023][T21763] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 350.198459][ T12] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.226997][T21763] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6846: Invalid block bitmap block 0 in block_group 0 [ 350.253108][T21763] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6846: Failed to acquire dquot type 0 [ 350.253977][T21767] sd 0:0:1:0: device reset [ 350.300834][T21763] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.6846: Freeing blocks not in datazone - block = 0, count = 4096 [ 350.319550][T21763] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6846: Invalid inode bitmap blk 0 in block_group 0 [ 350.334391][ T3530] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:33: Failed to release dquot type 0 [ 350.367350][T21763] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 350.387122][ T2957] hid-generic 0000:0000:0000.00D7: unknown main item tag 0x0 [ 350.398720][T21763] EXT4-fs (loop6): 1 orphan inode deleted [ 350.409818][T21763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.429184][ T2957] hid-generic 0000:0000:0000.00D7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 350.515938][T20041] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.555114][T21778] netlink: 'syz.6.6852': attribute type 10 has an invalid length. [ 350.563059][T21778] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6852'. [ 350.584345][T21778] dummy0: entered promiscuous mode [ 350.597440][T21778] bridge0: port 3(dummy0) entered blocking state [ 350.604035][T21778] bridge0: port 3(dummy0) entered disabled state [ 350.613954][T21778] dummy0: entered allmulticast mode [ 350.621134][T21778] bridge0: port 3(dummy0) entered blocking state [ 350.627617][T21778] bridge0: port 3(dummy0) entered forwarding state [ 350.808752][T21795] sd 0:0:1:0: device reset [ 350.842626][T21797] loop9: detected capacity change from 0 to 128 [ 350.856015][T21798] loop6: detected capacity change from 0 to 128 [ 350.880146][T21797] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.911014][T21800] loop0: detected capacity change from 0 to 2048 [ 350.960441][T21797] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.986593][T21793] lo speed is unknown, defaulting to 1000 [ 350.999368][T21800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.004158][T21798] syz.6.6857: attempt to access beyond end of device [ 351.004158][T21798] loop6: rw=0, sector=121, nr_sectors = 920 limit=128 [ 351.035420][ T3471] hid-generic 0000:0000:0000.00D8: unknown main item tag 0x0 [ 351.057305][ T3471] hid-generic 0000:0000:0000.00D8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.222331][T21571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.283791][ T3561] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.321751][T21816] loop6: detected capacity change from 0 to 764 [ 351.334660][T21825] loop0: detected capacity change from 0 to 128 [ 351.335087][ T36] hid-generic 0000:0000:0000.00D9: unknown main item tag 0x0 [ 351.354351][ T36] hid-generic 0000:0000:0000.00D9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.438241][T21818] lo speed is unknown, defaulting to 1000 [ 351.596912][T21836] netlink: 'syz.5.6872': attribute type 6 has an invalid length. [ 351.618005][T21836] loop5: detected capacity change from 0 to 1024 [ 351.633379][T21836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.663890][T21293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.684668][T21840] loop0: detected capacity change from 0 to 2048 [ 351.704386][T21840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.778706][T21850] loop5: detected capacity change from 0 to 2048 [ 351.792262][T21853] loop9: detected capacity change from 0 to 128 [ 351.799142][T21853] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.818837][T21853] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.835996][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.843238][T21850] Alternate GPT is invalid, using primary GPT. [ 351.852734][T21850] loop5: p2 p3 p7 [ 351.884341][ T3470] hid-generic 0000:0000:0000.00DA: unknown main item tag 0x0 [ 351.902202][ T3470] hid-generic 0000:0000:0000.00DA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 351.907756][T21571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.930212][T21850] netlink: 'syz.5.6876': attribute type 3 has an invalid length. [ 351.946851][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.029360][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.080954][T21869] loop5: detected capacity change from 0 to 1024 [ 352.090341][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.103746][T21868] loop0: detected capacity change from 0 to 128 [ 352.116257][T21869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.139791][T21862] lo speed is unknown, defaulting to 1000 [ 352.187644][T21878] loop4: detected capacity change from 0 to 128 [ 352.218896][T21872] lo speed is unknown, defaulting to 1000 [ 352.235690][T21868] syz.0.6882: attempt to access beyond end of device [ 352.235690][T21868] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 352.270470][T21878] syz.4.6884: attempt to access beyond end of device [ 352.270470][T21878] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 352.272765][T21293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.298211][ T37] dummy0: left allmulticast mode [ 352.312875][ T37] bridge0: port 3(dummy0) entered disabled state [ 352.325448][ T37] bridge_slave_1: left allmulticast mode [ 352.331298][ T37] bridge_slave_1: left promiscuous mode [ 352.337463][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.345301][ T3561] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.355149][ T37] bridge_slave_0: left allmulticast mode [ 352.360828][ T37] bridge_slave_0: left promiscuous mode [ 352.366699][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.448608][T21888] netlink: 'syz.5.6888': attribute type 2 has an invalid length. [ 352.456415][T21888] netlink: 'syz.5.6888': attribute type 1 has an invalid length. [ 352.464196][T21888] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.6888'. [ 352.475872][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.487086][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.497994][ T37] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 352.507053][ T37] bond0 (unregistering): Released all slaves [ 352.519982][T21855] lo speed is unknown, defaulting to 1000 [ 352.591364][ T37] tipc: Left network mode [ 352.648493][T21901] loop5: detected capacity change from 0 to 2048 [ 352.662649][ T37] hsr_slave_0: left promiscuous mode [ 352.668459][ T37] hsr_slave_1: left promiscuous mode [ 352.674277][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.681854][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.690041][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.694484][T21901] Alternate GPT is invalid, using primary GPT. [ 352.697550][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.703903][T21901] loop5: p2 p3 p7 [ 352.726400][ T37] veth1_macvtap: left promiscuous mode [ 352.735077][ T37] veth0_macvtap: left promiscuous mode [ 352.740722][ T37] veth1_vlan: left promiscuous mode [ 352.746339][ T37] veth0_vlan: left promiscuous mode [ 352.751892][T21901] netlink: 'syz.5.6891': attribute type 3 has an invalid length. [ 352.780609][T21909] loop4: detected capacity change from 0 to 1024 [ 352.803638][T21909] EXT4-fs: Ignoring removed mblk_io_submit option [ 352.829415][T21909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.841674][T21918] sd 0:0:1:0: device reset [ 352.857483][T21909] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 352.873116][ T37] team0 (unregistering): Port device team_slave_1 removed [ 352.873113][T21909] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 352.892658][T21909] EXT4-fs (loop4): This should not happen!! Data will be lost [ 352.892658][T21909] [ 352.902508][T21909] EXT4-fs (loop4): Total free blocks count 0 [ 352.908639][T21909] EXT4-fs (loop4): Free/Dirty block details [ 352.914607][T21909] EXT4-fs (loop4): free_blocks=68451041280 [ 352.920525][T21909] EXT4-fs (loop4): dirty_blocks=80 [ 352.925694][T21909] EXT4-fs (loop4): Block reservation details [ 352.931816][T21909] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 352.938572][ T37] team0 (unregistering): Port device team_slave_0 removed [ 352.956585][T21920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21920 comm=syz.5.6897 [ 352.972471][T21920] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=21920 comm=syz.5.6897 [ 352.997466][T21910] pim6reg1: entered promiscuous mode [ 353.002826][T21910] pim6reg1: entered allmulticast mode [ 353.023767][T21923] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6898'. [ 353.035780][T21909] netlink: 'syz.4.6894': attribute type 4 has an invalid length. [ 353.059996][T21855] chnl_net:caif_netlink_parms(): no params data found [ 353.070167][ T3507] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 353.106087][T21932] loop4: detected capacity change from 0 to 128 [ 353.113515][T21932] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.132748][T21932] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.144921][T21930] tipc: Started in network mode [ 353.149843][T21930] tipc: Node identity 7aa5f09473ba, cluster identity 4711 [ 353.157214][T21930] tipc: Enabled bearer , priority 0 [ 353.160840][T21937] loop5: detected capacity change from 0 to 128 [ 353.183042][T21927] tipc: Disabling bearer [ 353.196341][T21939] loop9: detected capacity change from 0 to 2048 [ 353.204061][ T1034] hid-generic 0000:0000:0000.00DB: unknown main item tag 0x0 [ 353.223993][T21937] syz.5.6901: attempt to access beyond end of device [ 353.223993][T21937] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 353.232262][ T1034] hid-generic 0000:0000:0000.00DB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 353.253156][T21939] Alternate GPT is invalid, using primary GPT. [ 353.259560][T21939] loop9: p2 p3 p7 [ 353.270087][T21939] netlink: 'syz.9.6904': attribute type 3 has an invalid length. [ 353.302288][T21855] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.309377][T21855] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.321830][T21855] bridge_slave_0: entered allmulticast mode [ 353.330342][T21855] bridge_slave_0: entered promiscuous mode [ 353.337483][T21855] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.344692][T21855] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.352127][T21855] bridge_slave_1: entered allmulticast mode [ 353.358758][T21855] bridge_slave_1: entered promiscuous mode [ 353.380300][T21929] lo speed is unknown, defaulting to 1000 [ 353.457510][T21855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.483288][T21855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.593045][T21855] team0: Port device team_slave_0 added [ 353.593846][ T3561] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.600042][T21855] team0: Port device team_slave_1 added [ 353.640012][T21956] loop4: detected capacity change from 0 to 1024 [ 353.647132][T21956] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.668871][T21956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.688819][T21956] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 353.705886][T21956] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 353.718213][T21956] EXT4-fs (loop4): This should not happen!! Data will be lost [ 353.718213][T21956] [ 353.727948][T21956] EXT4-fs (loop4): Total free blocks count 0 [ 353.734128][T21956] EXT4-fs (loop4): Free/Dirty block details [ 353.740153][T21956] EXT4-fs (loop4): free_blocks=68451041280 [ 353.746027][T21956] EXT4-fs (loop4): dirty_blocks=80 [ 353.751153][T21956] EXT4-fs (loop4): Block reservation details [ 353.757189][T21956] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 353.790103][T21855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.797177][T21855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.823396][T21855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.850471][T21855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.857557][T21855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.883682][T21855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.895769][T21956] netlink: 'syz.4.6909': attribute type 4 has an invalid length. [ 353.924453][ T3535] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 353.957955][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 353.957973][ T29] audit: type=1400 audit(1757818923.920:30488): avc: denied { getopt } for pid=21965 comm="syz.5.6911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 353.987157][T21855] hsr_slave_0: entered promiscuous mode [ 353.993364][T21855] hsr_slave_1: entered promiscuous mode [ 353.999396][T21855] debugfs: 'hsr0' already exists in 'hsr' [ 354.005190][T21855] Cannot create hsr debugfs directory [ 354.011467][T21966] pim6reg1: entered promiscuous mode [ 354.016930][T21966] pim6reg1: entered allmulticast mode [ 354.057522][T21973] tipc: Enabled bearer , priority 0 [ 354.087421][T21975] loop4: detected capacity change from 0 to 2048 [ 354.095396][ T29] audit: type=1326 audit(1757818924.070:30489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.095738][T21972] tipc: Disabling bearer [ 354.119083][ T29] audit: type=1326 audit(1757818924.070:30490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.149676][ T29] audit: type=1326 audit(1757818924.100:30491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.173411][ T29] audit: type=1326 audit(1757818924.100:30492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.197030][ T29] audit: type=1326 audit(1757818924.100:30493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.220977][ T29] audit: type=1326 audit(1757818924.100:30494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.239893][T21975] Alternate GPT is invalid, using primary GPT. [ 354.244817][ T29] audit: type=1326 audit(1757818924.100:30495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.251009][T21975] loop4: p2 p3 p7 [ 354.274494][ T29] audit: type=1326 audit(1757818924.100:30496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.274533][ T29] audit: type=1326 audit(1757818924.100:30497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21977 comm="syz.9.6916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b72a1eba9 code=0x7ffc0000 [ 354.334481][T21975] netlink: 'syz.4.6915': attribute type 3 has an invalid length. [ 354.379246][T21983] loop4: detected capacity change from 0 to 128 [ 354.386210][T21983] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 354.424826][T21983] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 354.440324][T21992] loop5: detected capacity change from 0 to 1024 [ 354.449811][ T1034] hid-generic 0000:0000:0000.00DC: unknown main item tag 0x0 [ 354.459137][T21992] EXT4-fs: Ignoring removed mblk_io_submit option [ 354.467916][ T1034] hid-generic 0000:0000:0000.00DC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 354.511333][T21995] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6923'. [ 354.525193][T21992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.565229][T21995] loop0: detected capacity change from 0 to 1024 [ 354.583808][T21992] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 354.601125][T21995] EXT4-fs: Ignoring removed orlov option [ 354.629693][T21992] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 354.641983][T21992] EXT4-fs (loop5): This should not happen!! Data will be lost [ 354.641983][T21992] [ 354.651932][T21992] EXT4-fs (loop5): Total free blocks count 0 [ 354.657975][T21992] EXT4-fs (loop5): Free/Dirty block details [ 354.663934][T21992] EXT4-fs (loop5): free_blocks=68451041280 [ 354.669793][T21992] EXT4-fs (loop5): dirty_blocks=80 [ 354.674978][T21992] EXT4-fs (loop5): Block reservation details [ 354.681031][T21992] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 354.703044][T21995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 354.704949][T22000] netlink: 'syz.5.6922': attribute type 4 has an invalid length. [ 354.715352][T21995] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.756637][T21571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 354.797670][ T3535] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 354.835096][T21855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 354.858760][T21855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 354.875383][T21855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 354.894978][T21855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.985463][ T3507] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 355.054319][T21855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.097749][T21855] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.140467][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.147791][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.196155][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.203422][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.236756][T22020] tipc: Enabled bearer , priority 0 [ 355.257086][T22019] tipc: Disabling bearer [ 355.434254][T21855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.498482][T22047] netlink: 'syz.0.6938': attribute type 6 has an invalid length. [ 355.595613][T22058] tipc: Enabled bearer , priority 0 [ 355.614300][T22057] tipc: Disabling bearer [ 355.626813][T22056] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 355.651907][T22056] SELinux: failed to load policy [ 355.680044][T21855] veth0_vlan: entered promiscuous mode [ 355.697397][T21855] veth1_vlan: entered promiscuous mode [ 355.728174][T21855] veth0_macvtap: entered promiscuous mode [ 355.751593][T21855] veth1_macvtap: entered promiscuous mode [ 355.758413][T22067] loop9: detected capacity change from 0 to 1024 [ 355.770894][T21855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.779631][T22067] EXT4-fs: Ignoring removed mblk_io_submit option [ 355.787948][T21855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.799850][ T3555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.810825][ T3555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.825530][ T3535] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.834644][T22071] Invalid logical block size (2) [ 355.848257][T22067] /dev/loop9: Can't open blockdev [ 355.858423][ T3535] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.873333][T22067] netlink: 'syz.9.6945': attribute type 4 has an invalid length. [ 355.892453][T22075] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 355.966199][T22081] loop0: detected capacity change from 0 to 8192 [ 355.982058][T22075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6948'. [ 355.995345][T22075] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6948'. [ 356.014946][T22075] loop4: detected capacity change from 0 to 1024 [ 356.042249][T22075] EXT4-fs (loop4): invalid first ino: 10 [ 356.117351][T22089] loop3: detected capacity change from 0 to 2048 [ 356.127791][T22092] loop4: detected capacity change from 0 to 2048 [ 356.180775][T22089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.203184][T22092] Alternate GPT is invalid, using primary GPT. [ 356.209610][T22092] loop4: p2 p3 p7 [ 356.228568][T22102] netlink: 456 bytes leftover after parsing attributes in process `syz.9.6958'. [ 356.281914][T22102] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6958'. [ 356.291025][T22102] dummy0: left allmulticast mode [ 356.296320][T22102] bridge0: port 1(dummy0) entered disabled state [ 356.313456][T22092] netlink: 'syz.4.6955': attribute type 3 has an invalid length. [ 356.347762][T22105] loop9: detected capacity change from 0 to 1024 [ 356.367352][T22105] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.6958: Failed to acquire dquot type 0 [ 356.421152][T22105] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 356.437762][T22105] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.6958: corrupted inode contents [ 356.454236][T22105] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #13: comm syz.9.6958: mark_inode_dirty error [ 356.478150][T21855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.544262][T22105] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.6958: corrupted inode contents [ 356.567348][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6961'. [ 356.599469][T22117] loop0: detected capacity change from 0 to 1024 [ 356.609304][T22117] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 356.632332][T22105] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.6958: mark_inode_dirty error [ 356.633462][T22117] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6960: Invalid block bitmap block 0 in block_group 0 [ 356.676820][T22105] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.6958: corrupted inode contents [ 356.720510][T22105] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 356.751680][T22105] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.6958: corrupted inode contents [ 356.767800][T22117] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6960: Failed to acquire dquot type 0 [ 356.791992][T22117] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.6960: Freeing blocks not in datazone - block = 0, count = 4096 [ 356.826570][T22105] EXT4-fs error (device loop9): ext4_truncate:4666: inode #13: comm syz.9.6958: mark_inode_dirty error [ 356.838379][T22117] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.6960: Invalid inode bitmap blk 0 in block_group 0 [ 356.861251][T22105] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 356.877815][T22127] program syz.4.6965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.883549][T22117] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 356.898884][ T3507] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 356.910863][T22105] EXT4-fs (loop9): 1 truncate cleaned up [ 356.918888][T22105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.928827][T22117] EXT4-fs (loop0): 1 orphan inode deleted [ 356.947945][T22117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.028333][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.055191][T21571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.207798][ T3412] hid-generic 0000:0000:0000.00DD: unknown main item tag 0x0 [ 357.219980][ T3412] hid-generic 0000:0000:0000.00DD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.388353][T22175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6981'. [ 357.451773][T22175] netlink: 'syz.4.6981': attribute type 12 has an invalid length. [ 357.476077][T22182] loop0: detected capacity change from 0 to 1024 [ 357.484241][T22182] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 357.510417][T22182] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.6984: Invalid block bitmap block 0 in block_group 0 [ 357.526081][T22182] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6984: Failed to acquire dquot type 0 [ 357.537841][T22182] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.6984: Freeing blocks not in datazone - block = 0, count = 4096 [ 357.562461][T22182] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.6984: Invalid inode bitmap blk 0 in block_group 0 [ 357.577604][T22182] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 357.586671][ T3507] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 0 [ 357.586788][T22182] EXT4-fs (loop0): 1 orphan inode deleted [ 357.604671][T22193] loop5: detected capacity change from 0 to 512 [ 357.604844][T22182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.618276][T22196] loop4: detected capacity change from 0 to 128 [ 357.625550][T22193] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 357.634197][T22196] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 357.656520][T22193] EXT4-fs (loop5): 1 orphan inode deleted [ 357.662327][T22193] EXT4-fs (loop5): 1 truncate cleaned up [ 357.668758][T22193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.683841][T22196] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 357.713054][T22193] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.5.6988: path /50/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 357.736120][T22193] EXT4-fs (loop5): Remounting filesystem read-only [ 357.752728][ T3471] hid-generic 0000:0000:0000.00DE: unknown main item tag 0x0 [ 357.761872][T21571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.771546][ T3471] hid-generic 0000:0000:0000.00DE: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.934030][T21293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.008946][T22217] loop9: detected capacity change from 0 to 128 [ 358.086896][T22211] lo speed is unknown, defaulting to 1000 [ 358.100772][T22217] syz.9.6995: attempt to access beyond end of device [ 358.100772][T22217] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 358.169682][T22227] loop3: detected capacity change from 0 to 128 [ 358.180011][ T3555] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 358.184778][ T36] hid-generic 0000:0000:0000.00DF: unknown main item tag 0x0 [ 358.192080][T22227] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 358.216458][ T36] hid-generic 0000:0000:0000.00DF: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.243701][T22227] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 358.352838][ T36] hid-generic 0000:0000:0000.00E0: unknown main item tag 0x0 [ 358.370982][ T36] hid-generic 0000:0000:0000.00E0: hidraw1: HID v0.00 Device [syz1] on syz0 [ 358.493074][T22244] loop9: detected capacity change from 0 to 512 [ 358.506777][T22244] EXT4-fs warning (device loop9): ext4_xattr_inode_get:542: inode #11: comm syz.9.7005: ea_inode file size=0 entry size=6 [ 358.520146][T22244] EXT4-fs (loop9): 1 orphan inode deleted [ 358.539754][T22225] siw: device registration error -23 [ 358.624732][ T3561] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 358.635053][T22250] FAULT_INJECTION: forcing a failure. [ 358.635053][T22250] name failslab, interval 1, probability 0, space 0, times 0 [ 358.647766][T22250] CPU: 0 UID: 0 PID: 22250 Comm: syz.5.7008 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.647867][T22250] Tainted: [W]=WARN [ 358.647910][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.647928][T22250] Call Trace: [ 358.648007][T22250] [ 358.648017][T22250] __dump_stack+0x1d/0x30 [ 358.648045][T22250] dump_stack_lvl+0xe8/0x140 [ 358.648071][T22250] dump_stack+0x15/0x1b [ 358.648093][T22250] should_fail_ex+0x265/0x280 [ 358.648125][T22250] ? nft_netdev_hook_alloc+0x1a2/0x3a0 [ 358.648211][T22250] should_failslab+0x8c/0xb0 [ 358.648239][T22250] __kmalloc_cache_noprof+0x4c/0x320 [ 358.648281][T22250] nft_netdev_hook_alloc+0x1a2/0x3a0 [ 358.648317][T22250] nf_tables_parse_netdev_hooks+0xe7/0x580 [ 358.648363][T22250] nft_flowtable_parse_hook+0x2c6/0x450 [ 358.648398][T22250] ? nla_strcmp+0xc3/0xe0 [ 358.648456][T22250] nf_tables_delflowtable+0x71c/0xb50 [ 358.648504][T22250] nfnetlink_rcv+0xb96/0x1690 [ 358.648562][T22250] netlink_unicast+0x5bd/0x690 [ 358.648670][T22250] netlink_sendmsg+0x58b/0x6b0 [ 358.648702][T22250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.648729][T22250] __sock_sendmsg+0x145/0x180 [ 358.648844][T22250] ____sys_sendmsg+0x31e/0x4e0 [ 358.648875][T22250] ___sys_sendmsg+0x17b/0x1d0 [ 358.648922][T22250] __x64_sys_sendmsg+0xd4/0x160 [ 358.649002][T22250] x64_sys_call+0x191e/0x2ff0 [ 358.649028][T22250] do_syscall_64+0xd2/0x200 [ 358.649070][T22250] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 358.649119][T22250] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 358.649159][T22250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.649241][T22250] RIP: 0033:0x7f8190d8eba9 [ 358.649261][T22250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.649332][T22250] RSP: 002b:00007f818f7ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.649357][T22250] RAX: ffffffffffffffda RBX: 00007f8190fd5fa0 RCX: 00007f8190d8eba9 [ 358.649374][T22250] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 358.649417][T22250] RBP: 00007f818f7ef090 R08: 0000000000000000 R09: 0000000000000000 [ 358.649465][T22250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.649481][T22250] R13: 00007f8190fd6038 R14: 00007f8190fd5fa0 R15: 00007ffe3a6e9c18 [ 358.649506][T22250] [ 358.682513][T22252] tipc: Enabled bearer , priority 0 [ 358.893296][T22251] tipc: Resetting bearer [ 358.920558][T22251] tipc: Disabling bearer [ 359.016719][T22265] loop5: detected capacity change from 0 to 2048 [ 359.075620][ T29] kauditd_printk_skb: 721 callbacks suppressed [ 359.075638][ T29] audit: type=1326 audit(1757818929.040:31211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.087800][T22265] Alternate GPT is invalid, using primary GPT. [ 359.105750][ T29] audit: type=1326 audit(1757818929.050:31212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.112173][T22265] loop5: p2 p3 p7 [ 359.135562][ T29] audit: type=1326 audit(1757818929.050:31213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.162994][ T29] audit: type=1326 audit(1757818929.050:31214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.175427][T22265] netlink: 'syz.5.7013': attribute type 3 has an invalid length. [ 359.186700][ T29] audit: type=1326 audit(1757818929.050:31215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.218194][ T29] audit: type=1326 audit(1757818929.050:31216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.218291][ T29] audit: type=1326 audit(1757818929.050:31217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.218326][ T29] audit: type=1326 audit(1757818929.050:31218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.218470][ T29] audit: type=1326 audit(1757818929.180:31219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.313481][ T29] audit: type=1326 audit(1757818929.180:31220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22262 comm="syz.0.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcfcc6ceba9 code=0x7ffc0000 [ 359.414516][T22271] lo speed is unknown, defaulting to 1000 [ 359.425257][T22277] loop0: detected capacity change from 0 to 128 [ 359.430366][T22278] loop5: detected capacity change from 0 to 128 [ 359.458376][T22277] syz.0.7015: attempt to access beyond end of device [ 359.458376][T22277] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 359.473827][T22278] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.485918][T22278] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.527179][ T3471] hid-generic 0000:0000:0000.00E1: unknown main item tag 0x0 [ 359.551873][ T3471] hid-generic 0000:0000:0000.00E1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.701211][T22286] tipc: Enabled bearer , priority 0 [ 359.708631][T22285] tipc: Resetting bearer [ 359.725412][T22285] tipc: Disabling bearer [ 359.758761][ T3555] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.017462][T22312] lo speed is unknown, defaulting to 1000 [ 360.042322][T22315] loop3: detected capacity change from 0 to 128 [ 360.083220][T22316] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.123241][T22315] syz.3.7031: attempt to access beyond end of device [ 360.123241][T22315] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 360.168622][T22316] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.180392][T22320] tipc: Enabled bearer , priority 0 [ 360.223437][T22319] tipc: Resetting bearer [ 360.238907][T22319] tipc: Disabling bearer [ 360.259985][T22316] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.340368][T22316] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.422881][ T3507] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.439317][ T3507] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.453798][ T3507] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.477807][ T3507] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.625536][T22374] tipc: Enabled bearer , priority 0 [ 360.643959][T22362] tipc: Resetting bearer [ 360.669887][T22362] tipc: Disabling bearer [ 360.797709][T22387] loop4: detected capacity change from 0 to 2048 [ 360.865114][T22387] Alternate GPT is invalid, using primary GPT. [ 360.871633][T22387] loop4: p2 p3 p7 [ 360.902496][T22387] netlink: 'syz.4.7055': attribute type 3 has an invalid length. [ 360.919064][T22397] loop5: detected capacity change from 0 to 512 [ 360.949628][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7060'. [ 360.959731][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7060'. [ 360.969975][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7060'. [ 360.985942][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7060'. [ 361.000960][T22397] netlink: 400 bytes leftover after parsing attributes in process `syz.5.7060'. [ 361.011025][T22397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7060'. [ 361.034255][T22397] loop5: detected capacity change from 0 to 512 [ 361.044360][T22397] EXT4-fs (loop5): orphan cleanup on readonly fs [ 361.051491][T22397] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7060: bg 0: block 248: padding at end of block bitmap is not set [ 361.088825][T22404] FAULT_INJECTION: forcing a failure. [ 361.088825][T22404] name failslab, interval 1, probability 0, space 0, times 0 [ 361.101511][T22404] CPU: 1 UID: 0 PID: 22404 Comm: syz.0.7062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.101552][T22404] Tainted: [W]=WARN [ 361.101565][T22404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.101582][T22404] Call Trace: [ 361.101591][T22404] [ 361.101601][T22404] __dump_stack+0x1d/0x30 [ 361.101661][T22404] dump_stack_lvl+0xe8/0x140 [ 361.101680][T22404] dump_stack+0x15/0x1b [ 361.101773][T22404] should_fail_ex+0x265/0x280 [ 361.101805][T22404] should_failslab+0x8c/0xb0 [ 361.101835][T22404] kmem_cache_alloc_noprof+0x50/0x310 [ 361.101918][T22404] ? audit_log_start+0x365/0x6c0 [ 361.102101][T22404] audit_log_start+0x365/0x6c0 [ 361.102135][T22404] audit_seccomp+0x48/0x100 [ 361.102162][T22404] ? __seccomp_filter+0x68c/0x10d0 [ 361.102192][T22404] __seccomp_filter+0x69d/0x10d0 [ 361.102233][T22404] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 361.102288][T22404] ? vfs_write+0x7e8/0x960 [ 361.102319][T22404] __secure_computing+0x82/0x150 [ 361.102342][T22404] syscall_trace_enter+0xcf/0x1e0 [ 361.102436][T22404] do_syscall_64+0xac/0x200 [ 361.102507][T22404] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 361.102614][T22404] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 361.102674][T22404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.102707][T22404] RIP: 0033:0x7fcfcc6ceba9 [ 361.102726][T22404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.102749][T22404] RSP: 002b:00007fcfcb12f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 361.102773][T22404] RAX: ffffffffffffffda RBX: 00007fcfcc915fa0 RCX: 00007fcfcc6ceba9 [ 361.102787][T22404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 361.102799][T22404] RBP: 00007fcfcb12f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.102889][T22404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.102904][T22404] R13: 00007fcfcc916038 R14: 00007fcfcc915fa0 R15: 00007ffeea4a6258 [ 361.102923][T22404] [ 361.403975][T22397] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7060: Failed to acquire dquot type 1 [ 361.422835][T22397] EXT4-fs (loop5): 1 truncate cleaned up [ 361.532197][T22410] loop4: detected capacity change from 0 to 128 [ 361.539073][T22410] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.577152][T22410] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.604139][T22413] tipc: Enabled bearer , priority 0 [ 361.614949][T22412] tipc: Resetting bearer [ 361.647933][ T3470] hid-generic 0000:0000:0000.00E2: unknown main item tag 0x0 [ 361.652690][T22412] tipc: Disabling bearer [ 361.667466][ T3470] hid-generic 0000:0000:0000.00E2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.823899][T22421] loop5: detected capacity change from 0 to 512 [ 361.850952][T22421] EXT4-fs: Ignoring removed nobh option [ 361.859514][T22421] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 361.968688][ T3507] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.982617][T22428] FAULT_INJECTION: forcing a failure. [ 361.982617][T22428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.995765][T22428] CPU: 0 UID: 0 PID: 22428 Comm: syz.0.7071 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.995832][T22428] Tainted: [W]=WARN [ 361.995841][T22428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.995857][T22428] Call Trace: [ 361.995865][T22428] [ 361.995887][T22428] __dump_stack+0x1d/0x30 [ 361.995913][T22428] dump_stack_lvl+0xe8/0x140 [ 361.995946][T22428] dump_stack+0x15/0x1b [ 361.995968][T22428] should_fail_ex+0x265/0x280 [ 361.995999][T22428] should_fail+0xb/0x20 [ 361.996026][T22428] should_fail_usercopy+0x1a/0x20 [ 361.996070][T22428] _copy_from_user+0x1c/0xb0 [ 361.996117][T22428] io_submit_one+0x52/0x11d0 [ 361.996162][T22428] __se_sys_io_submit+0xfb/0x280 [ 361.996262][T22428] __x64_sys_io_submit+0x43/0x50 [ 361.996295][T22428] x64_sys_call+0x2d5d/0x2ff0 [ 361.996328][T22428] do_syscall_64+0xd2/0x200 [ 361.996373][T22428] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 361.996453][T22428] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 361.996535][T22428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.996564][T22428] RIP: 0033:0x7fcfcc6ceba9 [ 361.996611][T22428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.996635][T22428] RSP: 002b:00007fcfcb12f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 361.996713][T22428] RAX: ffffffffffffffda RBX: 00007fcfcc915fa0 RCX: 00007fcfcc6ceba9 [ 361.996726][T22428] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fcfcb0eb000 [ 361.996739][T22428] RBP: 00007fcfcb12f090 R08: 0000000000000000 R09: 0000000000000000 [ 361.996751][T22428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.996767][T22428] R13: 00007fcfcc916038 R14: 00007fcfcc915fa0 R15: 00007ffeea4a6258 [ 361.996859][T22428] [ 362.204306][T22432] tipc: Enabled bearer , priority 0 [ 362.224975][T22431] tipc: Disabling bearer [ 362.270347][T22437] loop0: detected capacity change from 0 to 1024 [ 362.278051][T22437] EXT4-fs: Ignoring removed orlov option [ 362.380598][T22445] ================================================================== [ 362.388733][T22445] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 362.397976][T22445] [ 362.400320][T22445] write to 0xffff888100792460 of 4 bytes by task 22437 on cpu 1: [ 362.408040][T22445] writeback_single_inode+0x14a/0x3e0 [ 362.413438][T22445] sync_inode_metadata+0x5b/0x90 [ 362.418393][T22445] generic_buffers_fsync_noflush+0xd9/0x120 [ 362.424301][T22445] ext4_sync_file+0x1ab/0x690 [ 362.428985][T22445] vfs_fsync_range+0x10d/0x130 [ 362.433759][T22445] ext4_buffered_write_iter+0x34f/0x3c0 [ 362.439337][T22445] ext4_file_write_iter+0x383/0xf00 [ 362.444557][T22445] iter_file_splice_write+0x663/0xa60 [ 362.449940][T22445] direct_splice_actor+0x153/0x2a0 [ 362.455066][T22445] splice_direct_to_actor+0x30f/0x680 [ 362.460467][T22445] do_splice_direct+0xda/0x150 [ 362.465250][T22445] do_sendfile+0x380/0x650 [ 362.469717][T22445] __x64_sys_sendfile64+0x105/0x150 [ 362.474937][T22445] x64_sys_call+0x2bb0/0x2ff0 [ 362.479626][T22445] do_syscall_64+0xd2/0x200 [ 362.484248][T22445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.490159][T22445] [ 362.492500][T22445] read to 0xffff888100792460 of 4 bytes by task 22445 on cpu 0: [ 362.500153][T22445] generic_buffers_fsync_noflush+0x80/0x120 [ 362.506082][T22445] ext4_sync_file+0x1ab/0x690 [ 362.510784][T22445] vfs_fsync_range+0x10d/0x130 [ 362.515566][T22445] ext4_buffered_write_iter+0x34f/0x3c0 [ 362.521137][T22445] ext4_file_write_iter+0x383/0xf00 [ 362.526368][T22445] iter_file_splice_write+0x663/0xa60 [ 362.531755][T22445] direct_splice_actor+0x153/0x2a0 [ 362.536893][T22445] splice_direct_to_actor+0x30f/0x680 [ 362.542286][T22445] do_splice_direct+0xda/0x150 [ 362.547071][T22445] do_sendfile+0x380/0x650 [ 362.551518][T22445] __x64_sys_sendfile64+0x105/0x150 [ 362.556739][T22445] x64_sys_call+0x2bb0/0x2ff0 [ 362.561428][T22445] do_syscall_64+0xd2/0x200 [ 362.565959][T22445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.571870][T22445] [ 362.574201][T22445] value changed: 0x00000038 -> 0x00000002 [ 362.579922][T22445] [ 362.582253][T22445] Reported by Kernel Concurrency Sanitizer on: [ 362.588406][T22445] CPU: 0 UID: 0 PID: 22445 Comm: syz.0.7075 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.599791][T22445] Tainted: [W]=WARN [ 362.603597][T22445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.613659][T22445] ================================================================== [ 362.670049][T21293] EXT4-fs unmount: 6 callbacks suppressed [ 362.670069][T21293] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.791760][T21571] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.