last executing test programs: 53.148872764s ago: executing program 1 (id=1407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) 53.146381374s ago: executing program 1 (id=1408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 53.101258326s ago: executing program 1 (id=1409): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000040)={0x9, 0x6, 0x5}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r3}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r4 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) 53.082943417s ago: executing program 1 (id=1411): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$tun(r0, 0x0, 0x110d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580"], 0x5c}}, 0x0) 52.928967753s ago: executing program 1 (id=1416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, 0x0}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 52.858726007s ago: executing program 1 (id=1417): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x20e4, 0x800, 0x0, 0x39e}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r7 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1, 0x0, 0x0, 0x1, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005c00), r9) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005c40)=ANY=[@ANYBLOB="20170000", @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf25230000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x84c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x2, &(0x7f00000000c0)=0x7, 0xfffffffffffffedd) bind$inet(r11, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) lseek(r8, 0x2, 0x0) getdents64(r8, 0x0, 0x22) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0xb5, 0x0, 0x3, 0x3, 0x5, 0x3}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={r12, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x1c732b64}]}, &(0x7f0000000240)=0x10) 52.858526397s ago: executing program 32 (id=1417): r0 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x20e4, 0x800, 0x0, 0x39e}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r7 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1, 0x0, 0x0, 0x1, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005c00), r9) sendmsg$IEEE802154_SET_MACPARAMS(r9, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005c40)=ANY=[@ANYBLOB="20170000", @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf25230000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x84c) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x2, &(0x7f00000000c0)=0x7, 0xfffffffffffffedd) bind$inet(r11, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r11, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) lseek(r8, 0x2, 0x0) getdents64(r8, 0x0, 0x22) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0xb5, 0x0, 0x3, 0x3, 0x5, 0x3}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={r12, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x1c732b64}]}, &(0x7f0000000240)=0x10) 45.983573531s ago: executing program 2 (id=1514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) 45.963531152s ago: executing program 2 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) getpgid(0xffffffffffffffff) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0x8000000}) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 45.056157021s ago: executing program 2 (id=1527): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) 44.993854914s ago: executing program 2 (id=1531): io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x400, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x8, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x4, 0x0, 0xa78}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001cc0), 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000015c0)=ANY=[@ANYBLOB="140000002900010000d194dd92fe4dcddd38be4812000000fcdbdf250400f280d4e979976256353d69d121d06797e32e1ec658ef832313dd1696f0b6286c9fb181a411a9fd0cf5427197242eae277a78bc89991595580630d3b8aa20952cd9a296fcd097c19244238c628f8e27316fe6d3e62a5f48179e89ef2dae3fabead90900997468c59811800c42451d36332752de5d1fd6ec725501e308ce8c6ec52561868db965f165ac00de390a22257cbdae3f316036e67f79df64212833cad21f6a7c58"], 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff}, 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000002, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564"], 0xfc, 0x1b8, &(0x7f0000001400)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) read(r5, &(0x7f0000000400)=""/4096, 0x1000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) 44.264276695s ago: executing program 2 (id=1538): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x78e7, &(0x7f0000000000)={0x0, 0x3, 0x2}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300081000"}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="150000000400000008000000ffffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000aa577506797b000000004300000000000000f5af7ccadddb4f183dad3f4cac095296c7de63b90365bf89e87a4b1a00a68123d9aa4f6acc4ec969f23c107ad885ad3df3a85c505bfc0a5abf89f546eda28d668656f6231501db3e79b37d1617c0c501f4ea8490616a0c9400241a0fe305616eecb48ec50a2f71e3eed7fb2d7538e72c74666dc9cad947d3d1a61a086344eca92eed339566f4d4d7095d3c55344d907f2d88f39f2ab3b6fd680786ca01b848250e897ce560e330e1c37857da5e9bf1459ef9e5002eada23874"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sigaltstack(0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x400002, 0x74, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x8000, 0x3e, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x3, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x0, 0x0, 0xa, 0xc0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f00000006c0)={0x5, 0x80, 0xfa, 0x0, 0x6, 0x6, 0x0, 0x0, 0x858a, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x7}, 0x1068e, 0xa0e3, 0x67, 0x8, 0x60, 0x8, 0x5, 0x0, 0x5a4c, 0x0, 0x200}, r8, 0x0, r5, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setfsgid(0xee00) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000000000000000bbff0200000000000000000000000000018800907800000000000000000000881e09d4bf0d0000"], 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x800, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000580)={@mcast2, 0x9, 0x1, 0x0, 0x2, 0x3, 0x9}, &(0x7f00000005c0)=0x20) unlinkat(r9, &(0x7f0000000540)='./file0\x00', 0x0) 44.078577843s ago: executing program 2 (id=1542): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 44.065913184s ago: executing program 33 (id=1542): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 30.239863674s ago: executing program 5 (id=1705): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0xfa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 30.196762126s ago: executing program 5 (id=1706): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_delroute={0x2c, 0x19, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x80, 0x80, 0x6, 0xff, 0x0, 0xfe, 0x4, 0x3c00}, [@RTA_FLOW={0x8, 0xb, 0xfffffff4}, @RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd29, 0x100000, {0x0, 0x0, 0x74, r6, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040840}, 0x240000c0) 29.970146315s ago: executing program 5 (id=1709): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) 29.915711707s ago: executing program 5 (id=1711): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000000c0)={[], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000002000)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x2e, 0x30, 0x30, 0x0, 0x30, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000004040)=""/4096, 0x3c, 0x1000, 0x0, 0x0, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1830000000000000ec005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 29.530337974s ago: executing program 5 (id=1713): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) fsmount(0xffffffffffffffff, 0x0, 0xfa) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 29.198222828s ago: executing program 5 (id=1722): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89e0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r3, &(0x7f0000000380)={@void, @val={0x4, 0x1, 0x0, 0xd2ad, 0x3, 0x8}, @ipv6=@gre_packet={0x0, 0x6, "02fb98", 0x217, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x16, 0x8, 0x2, 0xfa, 0x0, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x39}]}, @dstopts={0x29, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}]}, @srh={0x3a, 0xa, 0x4, 0x5, 0x5, 0x0, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x2e, 0x7, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x0, [0x9689, 0xa]}}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x200}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x17, 0x1, [0x9], "08e80fab988a234de35e6f110c2ddee9d35565750cb881"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5], "d43a268ebaec92f6dda7a2e28fbd59"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x80d, 0x1], "e7b6f38f62f6e61b6a00f15672f950045213b950493d8fa33ff443e0b69050b77b3b434cb7f8e91c13414ac88a491b0524"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x8a, 0x2, 0x0, 0x2, 0x7, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x7e, 0x2, 0x1, 0x0, 0x7, 0xa5}, 0x2, {0x7, 0x2, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "ecb50d13e6369f8f2c0abcbad4977e52c230440f275f3fe287ac73f1348893c59e997417bb0ba4e94115116808ebed54572fb2aa65378a49483a2cee0103ae06bf010b4fefdd5c4c388019b734e8ae51d3c74423fd485537d2a48cf0fac114073aa939ba919bf4bbf84c82546eff8dff45ab339e"}}}}}, 0x249) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000640)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) io_uring_enter(r7, 0x29ab, 0xd480, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x10000000, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 29.175747239s ago: executing program 34 (id=1722): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89e0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r3, &(0x7f0000000380)={@void, @val={0x4, 0x1, 0x0, 0xd2ad, 0x3, 0x8}, @ipv6=@gre_packet={0x0, 0x6, "02fb98", 0x217, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x1f}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x16, 0x8, 0x2, 0xfa, 0x0, [@local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x39}]}, @dstopts={0x29, 0x1, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x800}]}, @srh={0x3a, 0xa, 0x4, 0x5, 0x5, 0x0, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x2e, 0x7, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x1, 0x4, 0x5, 0x0, [0x9689, 0xa]}}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x200}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x17, 0x1, [0x9], "08e80fab988a234de35e6f110c2ddee9d35565750cb881"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x5], "d43a268ebaec92f6dda7a2e28fbd59"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x80d, 0x1], "e7b6f38f62f6e61b6a00f15672f950045213b950493d8fa33ff443e0b69050b77b3b434cb7f8e91c13414ac88a491b0524"}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x8a, 0x2, 0x0, 0x2, 0x7, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x2, 0x2, 0x7e, 0x2, 0x1, 0x0, 0x7, 0xa5}, 0x2, {0x7, 0x2, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3, "ecb50d13e6369f8f2c0abcbad4977e52c230440f275f3fe287ac73f1348893c59e997417bb0ba4e94115116808ebed54572fb2aa65378a49483a2cee0103ae06bf010b4fefdd5c4c388019b734e8ae51d3c74423fd485537d2a48cf0fac114073aa939ba919bf4bbf84c82546eff8dff45ab339e"}}}}}, 0x249) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000600)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000640)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) io_uring_enter(r7, 0x29ab, 0xd480, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x10000000, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) 25.86529253s ago: executing program 3 (id=1765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xb, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000640)=0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x14, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r0, @ANYBLOB="2000000002000000b7080000000000007b8af8ff00005e979c39911aa4096fd3a216930b31d70000bfa200000000000007020000f8ffffffb703008008000000b7040000f66f63bb85000003000000009546ef3ce3de15c5a81c268b3fc7dedb73f9e35d021c95bc2e5c6d3d199970dd53d436235bda61491e2e723efbbf94f118f5663c0019934730398ad4f049"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) 25.598110791s ago: executing program 3 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, 0x0, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x33) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) close(0xffffffffffffffff) r2 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x140, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0xe0, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4423}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x55c}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1ff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xe}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10001}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x140}}, 0x20000040) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r8, @ANYBLOB="030027bd7000fbcbdf251300000005001a000100000005001a00000000000c0006000200000002000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000040}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40903, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x5) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="4024040102cd42"], 0x7) 24.71376529s ago: executing program 3 (id=1780): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x80000000}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) 24.70182032s ago: executing program 3 (id=1782): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000000c0)={[], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000002000)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@typedef={0x1, 0x0, 0x0, 0x8, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x2e, 0x30, 0x30, 0x0, 0x30, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000004040)=""/4096, 0x3c, 0x1000, 0x0, 0x0, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1830000000000000ec005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) 24.543256417s ago: executing program 3 (id=1784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7eba07d4d7c2df8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 24.338067056s ago: executing program 3 (id=1787): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000000)='syz0\x00', 0x800, 0x20, &(0x7f0000000040)={0x3, 0x5, 0x34800000, 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000049ee65431115b76a0000000000010000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) r3 = socket(0x1d, 0x3, 0xfffffffd) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000010000b24ac1d00800000200000000b4ebff66fc1e756534fb0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f041f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a00)="59aa6fb8ec7b2ea9c0b38df30155cd1a272db2a2b728d636ad0865dce77a4bf99ea402eda935ab2b0d1e281917fe526ee933318cd3236bc64645fef40530371afe8e05601912921392884fdd67352d1a390794f31d03bf3bfe0eff7c8c11a54ae32bb762d7c66bc0d506959f", 0x6c}, {&(0x7f0000000ac0)="9423f4d0fc3a88c115785d78ff57d839e325379851e978", 0x17}, {&(0x7f0000002380)="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", 0x536}], 0x3, &(0x7f0000007240)=ANY=[@ANYBLOB="180000000010000000f10000070000000194040000000000"], 0x18}}], 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0x2, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0xfa}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9, 0x3}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0x9c11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0xa, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x80000000, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x2}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x2008, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0x7fff, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9}, {0x162, 0x8, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2002, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x40000004, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x40101, 0x0, 0x7f, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x5, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x7fd}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x3ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0xfff, 0x40, 0xffff22b2, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x3fd, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x80, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x3ff, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffffd, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x7, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x9, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x0, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x5fd, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) connect$unix(r3, &(0x7f0000000080)=@abs={0xa}, 0x6e) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 24.25600285s ago: executing program 35 (id=1787): socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000000)='syz0\x00', 0x800, 0x20, &(0x7f0000000040)={0x3, 0x5, 0x34800000, 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000049ee65431115b76a0000000000010000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$eJzs3V1oXGkZAOD3TH5q29hUEcFepVgwaJ00P5YGFFuvhFqpraCoWGMy+SGTTEwm0ASkahEKCu2FqCAWcqGCKAQU7wT1yp8L/9iLdpdCFxZ2C6FLt7AXe5HlTGbS6WaaNJs0Z+k8D5z2+76Zk+898/Y9nfP1dCaAptWV/pKL+EhE3EgiOusea43qg11rz1vqXx5PtyRWVy/eTyJJ9+lfHq89P6n+frC6W3dE/O2HEWfbN847t7A4OVQsFmar/Z7y1EzP3MLiJyemhsYKY4XpvoETg4ODA/2DJ3btWH/2u1+//vGvfO5/V39w9vcr/7j6zSROR0f1sfrj2C1d0VV9TdridP0DScTJ3Z4sY7msA2DbTvYcO95SrfO2SM8BndFSrfrSL7/xoDP+eftJ+y6/efO1vYwV2H1XImIVaFKJ+ocmVXsfkF7/1ra9eu/xmx/v1Uw8ycqZtQvAG9W1naX1/LeurQ3F+yrXhgfeSKpXhmuS2trRDtzKpz/j/gf/k//zn9ItntE6DO9Nyy9nHQFZah/IOgKydORLWUdAlv59LesIyNL/V7KOgCxduJh1BGTpi8/bP4KzLb+4n3UE/OVMRBxvtP6XW1//iQbrPwcjYqd35vzxSERXvPDz+rGN6z+5ezuchk2snIn4dN29XUt1+a863FLtvT/tRFsyOlEspLk/FBHd0bYv7fduMseLx/7++UbjX72b5v/mhdr6X7ql89fWAqtx3Gvd9/h+I0PloZ0eN2tWvh9xpLVR/pP1+k8a1H/65+H8U85Rul663mj80K00/7+6unn+eZZWlyI+1rD+k/XnJJvfn9lTOR/01M4KG1347ytzjcZPHU3z/+BT8p+dtP4PbJ7/yvl//X7dhpnc3GfHOm80Gr/7ozT/b3373Zz/25MvVwKs3Vp8eahcnu2NaE++sHG8b/sxP69qr0ft9Urz3/3Rxn//b3b+3x8R33rKOf/63buvNhr/2mSa/399Xf1nJ83/yBb1nzxW/9tvnP/M0SuN5v7waJr/U/u3rv+BSjDd1RHv/7b2tAnKOk4AAAAAAAAAAAAAAAAAAAAAAIBmk4uIjkhy+fV2LpfPr32+74fiQK5Ymit/YrQ0Pz0Sle/KPhxtudonPXbWfR5sb6X9qN/3jn5/RHwgIq617K/088Ol4kjWBw9NqiPizh++M9zgm/kBAAAAAAAAAAAAAAAAAICsHHzC//9PvdSSdXTAs9ARcWf0Jy3fS9sP1Tk0lbT+f/tw6myof2g66h+al/qH5qX+oXmpf2he6h+al/qH5qX+oXmpf2he9fUPAAAAADyfzp87l26rS/3L42l/ujQ2MTk+M9h3Ij81P5wfLs3O5MdKpbHKN/ZPbf3ziqXSTG9fzF/uKRfmyj1zC4uXpkrz0+VLE1NDY4VLhbY9OCZga7d/OjCedQwAAAAAAAAAAAAAAAAAAMAjcwuLk0PFYmFWQ0NDY72R9ZkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB55OwAA//8t2VDh") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) r3 = socket(0x1d, 0x3, 0xfffffffd) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="180000010000b24ac1d00800000200000000b4ebff66fc1e756534fb0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f041f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a00)="59aa6fb8ec7b2ea9c0b38df30155cd1a272db2a2b728d636ad0865dce77a4bf99ea402eda935ab2b0d1e281917fe526ee933318cd3236bc64645fef40530371afe8e05601912921392884fdd67352d1a390794f31d03bf3bfe0eff7c8c11a54ae32bb762d7c66bc0d506959f", 0x6c}, {&(0x7f0000000ac0)="9423f4d0fc3a88c115785d78ff57d839e325379851e978", 0x17}, {&(0x7f0000002380)="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", 0x536}], 0x3, &(0x7f0000007240)=ANY=[@ANYBLOB="180000000010000000f10000070000000194040000000000"], 0x18}}], 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0x2, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0xfa}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9, 0x3}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0x9c11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0x9, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0xa, 0xffffff7f, 0x9, 0x7}, {0x10, 0x6, 0x80000000, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0xa9, 0xfffffffc}, {0x0, 0x80000000, 0x2, 0xce6, 0x1ff, 0x2}, {0x1400, 0x8, 0x5, 0x3ff, 0xfffffffe, 0x2}, {0xa177, 0x8, 0x1, 0x7, 0x9, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x2008, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0x7fff, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x4, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9}, {0x162, 0x8, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2002, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x8, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x6, 0x0, 0x2, 0x5, 0x742}, {0x40000004, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x40101, 0x0, 0x7f, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x3, 0x3, 0xff36}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0x8, 0x9, 0xd32, 0xd4, 0x5, 0x1d}, {0x0, 0xb, 0xec36, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff7fff, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x7fd}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x3ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0xfff, 0x40, 0xffff22b2, 0x1}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x7}, {0x9, 0x9, 0x3fd, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x6, 0x7, 0x7e27a179}, {0x3134, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x80, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb13, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x3ff, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x0, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffffd, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x7, 0x3, 0x1, 0x8, 0x400, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda2, 0x0, 0x2, 0x6}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x9, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0x1, 0x7, 0x8, 0xfffffffb}, {0x6, 0x0, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffd, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x800, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0xf, 0x3, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x5fd, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x4, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x5}, {0x4}, {}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {}, {0x2, 0x1}, {}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8}, {0x3}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) connect$unix(r3, &(0x7f0000000080)=@abs={0xa}, 0x6e) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 8.493757226s ago: executing program 8 (id=1954): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000000805000000000000000000070000070900010073797a3100000000050003000600000004000480060002"], 0x34}, 0x1, 0x0, 0x0, 0x48054}, 0xa000) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x2f00, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) flistxattr(r6, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$userns(0x0, &(0x7f0000000380)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 7.706631279s ago: executing program 8 (id=1967): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f00000000c0)={0x80, 0xa, 0x303, 0x0, 0x0, 0x6e9, 0x0}) 7.620960233s ago: executing program 8 (id=1968): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4000000}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 7.603808184s ago: executing program 8 (id=1969): socket$packet(0x11, 0x3, 0x300) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40a781) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0xa, 0x3f, 0xabe, 0x2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x20, 0x327, 0x1}}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x48) openat(0xffffffffffffff9c, &(0x7f0000000640)='./file7/file0\x00', 0x200000, 0x49) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) r1 = syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) get_robust_list(r1, &(0x7f00000008c0)=&(0x7f0000000880)={&(0x7f00000007c0)={&(0x7f0000000780)}, 0x0, &(0x7f0000000840)={&(0x7f0000000800)}}, &(0x7f0000000900)=0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008", @ANYRES8=r2], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r3 = syz_clone(0x2100a400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x85) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r3, 0x12) r6 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000005c0)=r6, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000100)='cpu.pressure\x00') write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12) 7.414760932s ago: executing program 8 (id=1972): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000002040)={&(0x7f0000000cc0)=@generic={0x8, "c47161dbf817cb2eb6b7c479216fa50696b64449998a451d77a9848e167bfd43562dc21dce6e1713782fea5cbfc93c56f1b7c6a3f891413a6be155fae36fef4bd0b96136b47936c9fc66f468555b5e2cf3ea8eda9bfae53422425407943c6ce7f9a17e2dc40c1cdb4e1650f8aaf32ea051a2d98d80b88a7fe23d98dd1fae"}, 0x80, 0x0}, 0x20000800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000180)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r8, @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRES64=r7], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r2, 0x0, r1, 0x0, 0x7ffff000, 0x6) 7.142697544s ago: executing program 8 (id=1979): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4000000}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 7.142416784s ago: executing program 36 (id=1979): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4000000}, 0x18) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 4.462489538s ago: executing program 9 (id=1980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b80)={'mangle\x00', 0x0, [0x6, 0x3, 0x81e0, 0x4, 0x2]}, &(0x7f0000000c00)=0x54) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0xb, 0x4690, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x97}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x9}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f0000000580), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020602500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000009517eba7e09d4ddc5e5607ea0670aa799d6a03692e221e105d30fb89be2a93503e4558067839d33f703cd8de12e9328c968fd3804905cec962e5c1368c5ca0f8318d56cf4ae5e553d7e4343533fbffcedb49ab256ccbeb4b9329e28b42afb5fc35c99306c070aafaf4927d07ba838577451f077b2be0a474137494a32de820"], &(0x7f0000000000)='GPL\x00', 0x200000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r8 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) unshare(0x8040600) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000000ac0)=0xfe) wait4(r10, 0x0, 0x40000000, 0x0) finit_module(r8, 0x0, 0x7) 3.282466239s ago: executing program 7 (id=2029): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) mq_open(&(0x7f0000000740)='#!**}\x00', 0x2, 0xc7, &(0x7f0000000780)={0x100000000, 0x7f, 0xc, 0xd43}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="1f91c9f74f0ab591747d83c7baceea6e17018f7d1eb6a4f46a1ef8503b6c545f552794119f6dca95a56cd8f06e78f71ef9769daf0bdcbfaa42870d4535d42fe2a9e54c5069a8b0cda324f724af8a0240e2735291937e1319e5ad", 0x5a, 0xfac2, 0x0) 3.26262413s ago: executing program 9 (id=2030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900000700000000000000000000000500"], 0x38}}, 0x20000004) 3.02880637s ago: executing program 7 (id=2040): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x6, 0x4, 0x61706, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x3, 0x6, 0x4, 0x61706, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$key(0xf, 0x3, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x1, 0x3, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0xff, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x0, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x2, 0x5, 0x5, 0xe, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0x8c, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x3, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x9, 0x9, 0x401, 0xb, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x78, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0x2, 0x2, 0x2, 0x80000001, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x7, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x4, 0x6, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xffff, 0x5, 0x2, 0xfffffffd, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0x9, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x10, 0x1, 0x720a, 0xffff, 0xfff, 0x9, 0x7fff, 0x8, 0x1ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff801, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0xc, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x8d, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0x10001, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x9, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83b, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0x3, 0x2, 0x6, 0x7f, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x81, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0x700f, 0x0, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x46, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0xfffffffc, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x7, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0x6, 0xffff, 0x7fff, 0x5, 0x8, 0x3c0, 0x9, 0x8, 0x6d5, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0xc9, 0x8, 0x0, 0x1000, 0x800, 0x0, 0x2, 0xf2, 0x0, 0x3, 0xffff, 0x3, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe00000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x9, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x8, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9, 0x5, 0x1, 0x7, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) setresgid(0x0, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') set_mempolicy(0x3, &(0x7f0000000040)=0x10000000001, 0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@errors_remount}, {@oldalloc}, {@usrquota}, {@barrier}, {@auto_da_alloc}, {@grpquota}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8a) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000f2ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.764379861s ago: executing program 7 (id=2041): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init1(0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x20001c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r2, r3, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4, 0x0, 0xfffffffffffffffa}, 0x18) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) clock_nanosleep(0x9, 0x1, 0x0, 0x0) 2.763301401s ago: executing program 0 (id=2042): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init1(0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000280)={r3, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x20001c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r2, r3, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4, 0x0, 0xfffffffffffffffa}, 0x18) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) clock_nanosleep(0x9, 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 2.749446242s ago: executing program 9 (id=2044): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)="c00e02003c000b05d25a806f8c6394f9019400600c05000f90c60100053582c137153e370a48018004f01700d1bd2835d06b74c5bbb6af6d3caea5aabbe78d27e780b460778b329283990b20bde63a213c19016ae6a5faa53e5a9172701141d84382d038fe534c40f4943c76a032ba0413ae16bbc857806903cc559df1ea2e45dd558935a1ee1d7dbe5e184c3c75b5f31e2ac7a9b3d14c7f8b050592ba2229d1def7fe94d49357", 0xa7}], 0x1, 0x0, 0x0, 0x5}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000280), 0x1, 0x57b, &(0x7f0000000c00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x58f4ef2b, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x408, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0xc0008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x4a, 0x46, &(0x7f0000000300)="bed42a9f85ebee4d5bd5e50eeefff00932e89447b7a2db185cf9d5bd1de62fa5423e83765e1991ab5eaf8bde210af64e5a89fde22a9d8a50a2cab55a44287d4753b3993ccc20b429c52a", &(0x7f0000000380)=""/70, 0xb, 0x0, 0xae, 0x13e, &(0x7f0000000400)="c366dbeea1a8ee31d6e1c86e7156104f0b5bbe056a0369a838549e0d29f45a709a9193201d1dff7cac6113f88dd5dfba866a9dd6c624f107b5883143af6dc0d71b05550c6c306769b1e42c71063a5f9f860469917b4c4074a4ecae8e8a3fa95505e26c9d8c992425695adea8fd91844c69f230a02a36e34b204b8a584a8fb101a838c24e6a94fdffa66bfa07f6f1e66da6f04557d8b8bfd3c8a814ece75fd76fd4ddeb33bf80675ec2bc2af28593", &(0x7f00000007c0)="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", 0x5, 0x0, 0x3358afdd}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x4, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0xf, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccffffffff00000000b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0xfffffe51) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)) 2.360618209s ago: executing program 9 (id=2045): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 1.499900686s ago: executing program 4 (id=2048): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.473835336s ago: executing program 4 (id=2049): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") 1.298147564s ago: executing program 4 (id=2050): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) mq_open(&(0x7f0000000740)='#!**}\x00', 0x2, 0xc7, &(0x7f0000000780)={0x100000000, 0x7f, 0xc, 0xd43}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="1f91c9f74f0ab591747d83c7baceea6e17018f7d1eb6a4f46a1ef8503b6c545f552794119f6dca95a56cd8f06e78f71ef9769daf0bdcbfaa42870d4535d42fe2a9e54c5069a8b0cda324f724af8a0240e2735291937e1319e5ad", 0x5a, 0xfac2, 0x0) 1.167858379s ago: executing program 7 (id=2051): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3, 0x0, 0x8000000000000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) process_mrelease(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chroot(0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r8, 0x102, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.027829026s ago: executing program 0 (id=2052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xffffffffffffffff]}, 0x8, 0x800) 995.473797ms ago: executing program 4 (id=2053): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002b000000000002907800000000e0000001110090f800000000"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, 0x7114, 0x4100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TOS={0x5, 0x9, 0xb}]}}}]}, 0x44}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x36) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x400c040) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x100000000) 957.309589ms ago: executing program 0 (id=2054): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x2000000000000201, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x80100, 0x32, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (rerun: 32) lseek(r4, 0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES16=r3, @ANYRES32, @ANYRESDEC=r2, @ANYRESHEX=r3, @ANYRES8=0x0, @ANYRES64=r2], 0x48) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES64=r4, @ANYBLOB="0000000000000000b7080000000000109a8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x100, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) (async) unshare(0x28000600) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x181100, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) unshare(0x22020600) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x3}}, 0x0, 0x0, 0x1, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async) r10 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000300000195"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00', r5}, 0x2d) r11 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async) close(r11) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x82, &(0x7f00000003c0)={r12, 0xcb}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000040)={r12, 0xc}, 0x8) (async, rerun: 32) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000200)={r12, 0x4, 0x10}, 0xc) (rerun: 32) 853.826383ms ago: executing program 0 (id=2055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@empty, 0x4e22, 0x0, 0x4e24, 0x8, 0x2, 0x0, 0x0, 0x1}, {0x7, 0x0, 0x6, 0x4, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0xffff, 0x0, 0x7, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4d5, 0x6c}, 0x2, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x7, 0x0, 0x200000}}, 0xe8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x80, 0x700, 0x0, 0x9, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @broadcast, {[@generic={0x7, 0xe, "58fb95b3502342ec325c6033"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r2, 0x26, 0x1, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) connect$inet6(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) creat(&(0x7f00000002c0)='./file1\x00', 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbf3, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) r8 = socket$netlink(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$sock_bt_hci(r9, 0x400448cb, &(0x7f0000000340)="304e04351e6f02971efc8eb347adbad392c13c9102c33e5099156219029acdc884e8589a176a1cc6fca6bb7707e13479522e96818ba68064bd0b32d597d98255640050268f58ac9e4f29d778ad076d16bb57331516db769492e6b901dd00487bdfaec98f1b0f8423c55b9994e951241aebc00054df61af2110d9967498e2b1f63c80a73181924c113039475914b49cb7cf634af0c18973ddc2adb6dde72265ca1dcf0ee7a1c99ec1b05754f34cddf5342a20e5fd887cc2da9888105267536db8407085e2ed0f5401aca5b4910d11da4288086faf46614e1cd73089c1c189") r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464653673696d0000000f0002fe6e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 722.404619ms ago: executing program 4 (id=2057): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 646.504242ms ago: executing program 6 (id=2058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) 645.845342ms ago: executing program 7 (id=2059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000001002020f8ff00000000bfa100000000000007010000f8ffffffb7020000000000e15b03000000000000850000007000000095000000", @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000840)={[{@max_batch_time}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@debug}, {@minixdf}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5dd, &(0x7f0000000e00)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='bcache_alloc_fail\x00', r4, 0x0, 0x7ffffffffffffffe}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x3, 0x3, 0x7, 0x6, 0x80, 0x0, 0x7f}, 0x9c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/44, 0x2c}], 0x1, &(0x7f00000005c0)=""/40, 0x28}, 0x1000}], 0x1, 0x10000, &(0x7f0000000640)) madvise(&(0x7f0000e84000/0x3000)=nil, 0x3000, 0x65) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000300)=0xf) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x5) open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee00) 640.149892ms ago: executing program 4 (id=2060): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x3e8, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) (fail_nth: 3) 467.396289ms ago: executing program 7 (id=2061): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x200484, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f0000001c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) link(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='./file1/file0\x00') syz_usb_disconnect(0xffffffffffffffff) 389.116563ms ago: executing program 6 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e000100"/20, @ANYRES32, @ANYBLOB="000002"], 0x28}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_submit(0x0, 0x2, &(0x7f0000000880)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x6, r3, &(0x7f0000000680)="0c1d190974afa11a49ba8b86", 0xc, 0x10001, 0x0, 0x2, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000800)="cc791a717b8c2c3de32d5fc3350a49d3b06480eccc5d71ef648bbc2e4f9e398c3a5303af4a2eaa4262ff8c75ebae115b71521c6c91a41111b8fe890449d7dc24a6", 0x41, 0x100, 0x0, 0x0, r3}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x40c0) timer_create(0x3, 0x0, &(0x7f0000044000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000340), &(0x7f0000000300)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) mq_open(0x0, 0x42, 0x1f0, 0x0) 290.683777ms ago: executing program 6 (id=2063): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) mq_open(&(0x7f0000000740)='#!**}\x00', 0x2, 0xc7, &(0x7f0000000780)={0x100000000, 0x7f, 0xc, 0xd43}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0x2, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140)="1f91c9f74f0ab591747d83c7baceea6e17018f7d1eb6a4f46a1ef8503b6c545f552794119f6dca95a56cd8f06e78f71ef9769daf0bdcbfaa42870d4535d42fe2a9e54c5069a8b0cda324f724af8a0240e2735291937e1319e5ad", 0x5a, 0xfac2, 0x0) 159.669463ms ago: executing program 6 (id=2064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="01000000c00000005a90f57f07703aefe7364ebbee07022c2277ae2a00"/42, 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 125.206184ms ago: executing program 6 (id=2065): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3c, 0x8, 0x4, 0x3e6}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 107.113475ms ago: executing program 6 (id=2066): syz_read_part_table(0x104c, &(0x7f00000002c0)="$eJzsz7GpAkEUhtF/HrtPQZApQWOrGFNNjWzCEgRrMdAeRVkNNDEUFM7JhrnfhRu+yDXJ+N3n5PWxuuxGyX42z6H93aMyhK3muFxkWpPtMLYuObX/lNqne4T9c0eXzflztwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA77gFAAD///krCKU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000bf04000002010000800000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x11, 0xc, &(0x7f0000001340)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400280000000b000002", @ANYRES32=r5], 0x20, 0x2400e044}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800100005705000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x2, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9}, 0x18) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="020700050200000010267000ffdbdf25"], 0x10}}, 0x4040014) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r10 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r10}, &(0x7f00000000c0)) 44.436967ms ago: executing program 9 (id=2067): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000008c0)="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", 0x189}], 0x1}], 0x1, 0x0) fdatasync(r0) 43.016108ms ago: executing program 0 (id=2068): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 21.362339ms ago: executing program 37 (id=2067): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000008c0)="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", 0x189}], 0x1}], 0x1, 0x0) fdatasync(r0) 0s ago: executing program 0 (id=2070): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x78e7, &(0x7f0000000000)={0x0, 0x3, 0x2}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000000)={'dummy0\x00', @random="e80300081000"}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = socket(0x2b, 0x80801, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc0400000000000000000000000000007257630cff02000000f8e2261a9f5afd8000000100000000ff2faf19cf8c727a5984067af8deed98369e745295f405a7bfef941cde46011404bcd7ca4360c351071086f1931e55b786b339a750b97ea55418d27ccf3f89044d94c4ce8c044dc2b3b2a69745bf9b43d12614e851a5c1daae8632960a1e3598739d83de2519c5a7dfd2d68e22e960c7427711d1a0cddd95f37a436faa4d44edb5beed4ce5d673fff3f0339861bad27742a6e67e9a037222e01e7a5fb4eacd6b6a3d0a3bce611c86b552c5c3d4820efe2313738c424d66afccc9e58c90c68585b533f173ada7cf41315c8c5a0848a482565d068af0598c0e93b9cfb5f606a552e20ea2429424d20be2bc141e22f8b156c7a5c1f522bd24318b574840ef917045cc7cedc87129980981208933e24edeaec4df447f6418a3dd6c180cbc3afb30303e370c2b9c99c5e12d0b9b819aa430e227dbe51f727a2b222fb82574d694ccc24dc22c2f0179b01aad1e10c1538bf6359d643706a40b9049abeee57cd18ab93b7cc425487249184673cb3b88cc39559444f7fd6cab9a5789a57b67f37928af2540b0be62d3f2888e812b9e1c7bfd150e0cb2e10cd81254c30e6af42d00914042943a361cdc05d575e99376ab075abbe478e8ed7e295fbfc623169e8ed826699bb4ce89cff621ffc6c21594e111c23393c0ab5086eea17ac5aabda8580f61c23a3ac2196af40e6f61c6da944d9b6bad61a4c3bdfc5e6d0e2f7f9d849f0ecf4192896939e4418de9956905b546e58df12df294f1bfd5c0d5435c7b360a95389c883d2beecf73ba5a8360a181966eb694fefbfd32159b47b41399dfc593a0ac28f2f0f9818d61837edd87763a82d009da9121f20f8073fde5fd75a2c0c36dd359e5056b400eed7eb245fe8116869820d441c7e1eda112fe60b273bcba5e45ebcd2da08da09e151e67aeffddfbaedc6398d36e348778f0f10963fcda8774bf93780767ab28165014ea4db434af9b5e406bd380b37cbc23d7ca97e9cee87935442cd3bbea949c344499a27d1c7f10dde15d0b774f430c09029177b168c714f857942d5f8411b5ee52ec0b0e08db2b8fc7ca899eefa94161d57482648ecdc73abcad0b627fb4cb14ba6ff711ada18911477f6fde36239b8bd8fe29"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sigaltstack(0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x400002, 0x74, @rand_addr=' \x01\x00', @mcast2, 0x80, 0x8000, 0x3e, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r7, 0x0, 0x0, 0x3, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x0, 0x0, 0xa, 0xc0}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) perf_event_open(0x0, r8, 0x0, r5, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setfsgid(0xee00) syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200103afffe8000000000000000000000000000bbff0200000000000000000000000000018800907800000000000000000000881e09d4bf0d0000"], 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x800, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000580)={@mcast2, 0x9, 0x1, 0x0, 0x2, 0x3, 0x9}, &(0x7f00000005c0)=0x20) unlinkat(r9, &(0x7f0000000540)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): T8644] EXT4-fs (loop5): free_blocks=20480 [ 143.719400][ T8644] EXT4-fs (loop5): dirty_blocks=80 [ 143.724560][ T8644] EXT4-fs (loop5): Block reservation details [ 143.730535][ T8644] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 143.737080][ T8636] loop0: detected capacity change from 0 to 2048 [ 143.743039][ T8661] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.744125][ T8648] bridge0: port 3(gretap0) entered blocking state [ 143.760514][ T8648] bridge0: port 3(gretap0) entered disabled state [ 143.820663][ T8128] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 143.833091][ T8128] EXT4-fs (loop5): This should not happen!! Data will be lost [ 143.833091][ T8128] [ 143.851251][ T8648] gretap0: entered allmulticast mode [ 143.864625][ T8636] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.1677: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 143.911805][ T8648] gretap0: entered promiscuous mode [ 143.924561][ T8648] bridge0: port 3(gretap0) entered blocking state [ 143.931253][ T8648] bridge0: port 3(gretap0) entered forwarding state [ 143.964247][ T8636] EXT4-fs (loop0): get root inode failed [ 143.969914][ T8636] EXT4-fs (loop0): mount failed [ 143.998350][ T8673] wg2: entered promiscuous mode [ 144.003423][ T8673] wg2: entered allmulticast mode [ 144.054502][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 144.063497][ T8677] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1689'. [ 144.072500][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1689'. [ 144.075033][ T8680] loop6: detected capacity change from 0 to 512 [ 144.096440][ T8675] loop5: detected capacity change from 0 to 4096 [ 144.110755][ T8680] EXT4-fs (loop6): orphan cleanup on readonly fs [ 144.212591][ T8680] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1690: bad orphan inode 13 [ 144.230142][ T8680] ext4_test_bit(bit=12, block=18) = 1 [ 144.235575][ T8680] is_bad_inode(inode)=0 [ 144.239732][ T8680] NEXT_ORPHAN(inode)=2130706432 [ 144.244650][ T8680] max_ino=32 [ 144.247892][ T8680] i_nlink=1 [ 144.280899][ T8680] FAULT_INJECTION: forcing a failure. [ 144.280899][ T8680] name failslab, interval 1, probability 0, space 0, times 0 [ 144.293606][ T8680] CPU: 1 UID: 0 PID: 8680 Comm: syz.6.1690 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.293667][ T8680] Tainted: [W]=WARN [ 144.293673][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.293684][ T8680] Call Trace: [ 144.293690][ T8680] [ 144.293698][ T8680] __dump_stack+0x1d/0x30 [ 144.293724][ T8680] dump_stack_lvl+0xe8/0x140 [ 144.293742][ T8680] dump_stack+0x15/0x1b [ 144.293814][ T8680] should_fail_ex+0x265/0x280 [ 144.293849][ T8680] should_failslab+0x8c/0xb0 [ 144.293911][ T8680] kmem_cache_alloc_noprof+0x50/0x480 [ 144.293990][ T8680] ? audit_log_start+0x342/0x720 [ 144.294014][ T8680] audit_log_start+0x342/0x720 [ 144.294083][ T8680] ? kstrtouint+0x76/0xc0 [ 144.294113][ T8680] audit_seccomp+0x48/0x100 [ 144.294230][ T8680] ? __seccomp_filter+0x82d/0x1250 [ 144.294255][ T8680] __seccomp_filter+0x83e/0x1250 [ 144.294282][ T8680] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.294353][ T8680] ? vfs_write+0x7e8/0x960 [ 144.294448][ T8680] ? __rcu_read_unlock+0x4f/0x70 [ 144.294470][ T8680] ? __fget_files+0x184/0x1c0 [ 144.294619][ T8680] __secure_computing+0x82/0x150 [ 144.294642][ T8680] syscall_trace_enter+0xcf/0x1e0 [ 144.294670][ T8680] do_syscall_64+0xac/0x200 [ 144.294693][ T8680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.294751][ T8680] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.294786][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.294810][ T8680] RIP: 0033:0x7fcdc024f749 [ 144.294840][ T8680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.294856][ T8680] RSP: 002b:00007fcdbecb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 144.294878][ T8680] RAX: ffffffffffffffda RBX: 00007fcdc04a5fa0 RCX: 00007fcdc024f749 [ 144.294893][ T8680] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 144.294906][ T8680] RBP: 00007fcdbecb7090 R08: 0000000000000000 R09: 0000000000000000 [ 144.294963][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.294976][ T8680] R13: 00007fcdc04a6038 R14: 00007fcdc04a5fa0 R15: 00007ffed3a7e668 [ 144.294995][ T8680] [ 144.684882][ T8701] loop6: detected capacity change from 0 to 1024 [ 144.701780][ T8701] EXT4-fs: Ignoring removed orlov option [ 144.714418][ T8703] loop5: detected capacity change from 0 to 512 [ 144.732026][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 144.732041][ T29] audit: type=1326 audit(2000000084.280:15481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.812050][ T8703] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1692: corrupted in-inode xattr: invalid ea_ino [ 144.826337][ T29] audit: type=1326 audit(2000000084.320:15482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.849869][ T29] audit: type=1326 audit(2000000084.330:15483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.873499][ T29] audit: type=1326 audit(2000000084.340:15484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.897035][ T29] audit: type=1326 audit(2000000084.350:15485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.920516][ T29] audit: type=1326 audit(2000000084.350:15486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.944153][ T29] audit: type=1326 audit(2000000084.350:15487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.967777][ T29] audit: type=1326 audit(2000000084.350:15488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 144.991324][ T29] audit: type=1326 audit(2000000084.350:15489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 145.005740][ T8703] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1692: couldn't read orphan inode 15 (err -117) [ 145.014801][ T29] audit: type=1326 audit(2000000084.350:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8676 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 145.112796][ T8703] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz.5.1692: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.159158][ T8713] loop6: detected capacity change from 0 to 1024 [ 145.166009][ T8703] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1692: error -117 reading directory block [ 145.185947][ T8703] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz.5.1692: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.200370][ T8703] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1692: error -117 reading directory block [ 145.234891][ T7603] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.254994][ T8713] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 145.280126][ T8718] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 145.304568][ T8713] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 145.316817][ T8713] EXT4-fs (loop6): This should not happen!! Data will be lost [ 145.316817][ T8713] [ 145.326526][ T8713] EXT4-fs (loop6): Total free blocks count 0 [ 145.332698][ T8713] EXT4-fs (loop6): Free/Dirty block details [ 145.332767][ T7603] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 145.338583][ T8713] EXT4-fs (loop6): free_blocks=20480 [ 145.338598][ T8713] EXT4-fs (loop6): dirty_blocks=80 [ 145.361724][ T8713] EXT4-fs (loop6): Block reservation details [ 145.367699][ T8713] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 145.388491][ T8718] 9pnet_fd: Insufficient options for proto=fd [ 145.668010][ T42] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 145.680505][ T42] EXT4-fs (loop6): This should not happen!! Data will be lost [ 145.680505][ T42] [ 145.718871][ T8739] loop6: detected capacity change from 0 to 128 [ 145.768026][ T8739] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.833120][ T8746] loop5: detected capacity change from 0 to 512 [ 145.860437][ T8746] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.1711: corrupted in-inode xattr: invalid ea_ino [ 145.899371][ T8746] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1711: couldn't read orphan inode 15 (err -117) [ 145.923557][ T8746] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz.5.1711: lblock 0 mapped to illegal pblock 3 (length 1) [ 145.952075][ T8746] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1711: error -117 reading directory block [ 146.049117][ T8757] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz.5.1711: lblock 0 mapped to illegal pblock 3 (length 1) [ 146.086171][ T8757] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz.5.1711: error -117 reading directory block [ 146.172359][ T7603] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 146.194038][ T7603] EXT4-fs warning (device loop5): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 146.467903][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.575414][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.654251][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.710390][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.733821][ T8800] lo speed is unknown, defaulting to 1000 [ 146.842631][ T31] gretap0: left allmulticast mode [ 146.847701][ T31] gretap0: left promiscuous mode [ 146.852876][ T31] bridge0: port 3(gretap0) entered disabled state [ 146.870896][ T31] bridge_slave_1: left allmulticast mode [ 146.876649][ T31] bridge_slave_1: left promiscuous mode [ 146.882437][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.893774][ T8825] loop4: detected capacity change from 0 to 512 [ 146.902741][ T8825] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.1731: corrupted in-inode xattr: invalid ea_ino [ 146.916301][ T31] bridge_slave_0: left allmulticast mode [ 146.922008][ T31] bridge_slave_0: left promiscuous mode [ 146.927667][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.934258][ T8825] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1731: couldn't read orphan inode 15 (err -117) [ 146.948955][ T8825] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 3: comm syz.4.1731: lblock 0 mapped to illegal pblock 3 (length 1) [ 146.976320][ T8828] loop6: detected capacity change from 0 to 1024 [ 146.983790][ T8825] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1731: error -117 reading directory block [ 147.007131][ T8825] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 3: comm syz.4.1731: lblock 0 mapped to illegal pblock 3 (length 1) [ 147.023101][ T8825] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1731: error -117 reading directory block [ 147.088540][ T8832] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 3: comm syz.4.1731: lblock 0 mapped to illegal pblock 3 (length 1) [ 147.103409][ T8832] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1731: error -117 reading directory block [ 147.118481][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.129023][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.142346][ T31] bond0 (unregistering): Released all slaves [ 147.151885][ T31] bond1 (unregistering): Released all slaves [ 147.197232][ T3312] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 147.254663][ T3312] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 147.300653][ T31] hsr_slave_0: left promiscuous mode [ 147.328218][ T31] hsr_slave_1: left promiscuous mode [ 147.346980][ T8857] loop3: detected capacity change from 0 to 512 [ 147.358531][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.366045][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.408480][ T8857] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.419798][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.427258][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.455039][ T31] veth1_macvtap: left promiscuous mode [ 147.467077][ T31] veth0_macvtap: left promiscuous mode [ 147.478920][ T31] veth1_vlan: left promiscuous mode [ 147.490927][ T31] veth0_vlan: left promiscuous mode [ 147.497763][ T8867] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 147.548648][ T8869] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 147.574423][ T8866] loop4: detected capacity change from 0 to 2048 [ 147.608092][ T31] team0 (unregistering): Port device team_slave_1 removed [ 147.623474][ T31] team0 (unregistering): Port device team_slave_0 removed [ 147.635273][ T8866] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.1735: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 147.684251][ T8866] EXT4-fs (loop4): get root inode failed [ 147.689935][ T8866] EXT4-fs (loop4): mount failed [ 147.692265][ T8800] chnl_net:caif_netlink_parms(): no params data found [ 147.865235][ T8128] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.873829][ T8891] loop6: detected capacity change from 0 to 512 [ 147.874206][ T8128] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.921734][ T8128] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.930669][ T8128] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.939758][ T8894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8894 comm=syz.3.1740 [ 147.959731][ T8891] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.977207][ T8890] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1739: corrupted inode contents [ 147.990419][ T8890] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.1739: mark_inode_dirty error [ 148.002312][ T8890] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.1739: corrupted inode contents [ 148.005546][ T8800] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.021536][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.028811][ T8890] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1739: mark_inode_dirty error [ 148.034055][ T8800] bridge_slave_0: entered allmulticast mode [ 148.046430][ T8800] bridge_slave_0: entered promiscuous mode [ 148.054644][ T8128] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.063668][ T8128] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.083368][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.090467][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.098593][ T8800] bridge_slave_1: entered allmulticast mode [ 148.105654][ T8800] bridge_slave_1: entered promiscuous mode [ 148.164048][ T8128] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.173053][ T8128] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.196390][ T8800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.196836][ T8913] __nla_validate_parse: 19 callbacks suppressed [ 148.196849][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1743'. [ 148.208063][ T8800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.264668][ T8918] netlink: 'syz.6.1743': attribute type 1 has an invalid length. [ 148.293786][ T8800] team0: Port device team_slave_0 added [ 148.300716][ T8800] team0: Port device team_slave_1 added [ 148.314282][ T8923] loop3: detected capacity change from 0 to 512 [ 148.337010][ T8923] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1744: corrupted in-inode xattr: invalid ea_ino [ 148.379989][ T8927] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1745'. [ 148.389765][ T8927] net_ratelimit: 16 callbacks suppressed [ 148.389779][ T8927] netlink: zone id is out of range [ 148.396151][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.400616][ T8927] netlink: zone id is out of range [ 148.407565][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.412772][ T8927] netlink: zone id is out of range [ 148.438653][ T8800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.450516][ T8923] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1744: couldn't read orphan inode 15 (err -117) [ 148.454793][ T8927] netlink: zone id is out of range [ 148.471924][ T8927] netlink: zone id is out of range [ 148.477041][ T8927] netlink: zone id is out of range [ 148.482181][ T8927] netlink: zone id is out of range [ 148.487481][ T8927] netlink: zone id is out of range [ 148.492670][ T8927] netlink: zone id is out of range [ 148.497823][ T8927] netlink: zone id is out of range [ 148.500537][ T8923] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1744: lblock 0 mapped to illegal pblock 3 (length 1) [ 148.504009][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.523820][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.537352][ T8929] loop6: detected capacity change from 0 to 1024 [ 148.550189][ T8800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.569733][ T8923] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1744: error -117 reading directory block [ 148.625453][ T8800] hsr_slave_0: entered promiscuous mode [ 148.627268][ T8927] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 148.649672][ T8927] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 148.662004][ T8927] EXT4-fs (loop6): This should not happen!! Data will be lost [ 148.662004][ T8927] [ 148.671942][ T8927] EXT4-fs (loop6): Total free blocks count 0 [ 148.678405][ T8927] EXT4-fs (loop6): Free/Dirty block details [ 148.679799][ T8800] hsr_slave_1: entered promiscuous mode [ 148.684431][ T8927] EXT4-fs (loop6): free_blocks=20480 [ 148.684445][ T8927] EXT4-fs (loop6): dirty_blocks=80 [ 148.700964][ T8927] EXT4-fs (loop6): Block reservation details [ 148.700981][ T8927] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 148.702361][ T8800] debugfs: 'hsr0' already exists in 'hsr' [ 148.702377][ T8800] Cannot create hsr debugfs directory [ 148.767440][ T8923] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1744: lblock 0 mapped to illegal pblock 3 (length 1) [ 148.767631][ T8923] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1744: error -117 reading directory block [ 148.795315][ T1735] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 148.795342][ T1735] EXT4-fs (loop6): This should not happen!! Data will be lost [ 148.795342][ T1735] [ 148.798950][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1744'. [ 148.799188][ T8923] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1744: lblock 0 mapped to illegal pblock 3 (length 1) [ 148.799410][ T8923] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1744: error -117 reading directory block [ 148.871020][ T8800] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 148.883306][ T8800] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 148.945309][ T8800] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 148.962828][ T8959] loop3: detected capacity change from 0 to 512 [ 148.965717][ T8800] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 148.978442][ T8959] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1749: corrupted in-inode xattr: invalid ea_ino [ 148.982781][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1750'. [ 148.994278][ T8959] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1749: couldn't read orphan inode 15 (err -117) [ 149.000721][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1750'. [ 149.000740][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1750'. [ 149.030646][ T8957] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1750'. [ 149.040012][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1750'. [ 149.050768][ T8959] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1749: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.067291][ T8959] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1749: error -117 reading directory block [ 149.118581][ T8800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.128034][ T8959] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1749: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.131240][ T8800] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.163570][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.170733][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.174663][ T8959] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1749: error -117 reading directory block [ 149.204459][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.211624][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.245075][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 149.261855][ T8959] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1749: lblock 0 mapped to illegal pblock 3 (length 1) [ 149.293113][ T8959] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1749: error -117 reading directory block [ 149.337953][ T8800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.560276][ T9021] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1756'. [ 149.675164][ T8800] veth0_vlan: entered promiscuous mode [ 149.684048][ T8800] veth1_vlan: entered promiscuous mode [ 149.728998][ T8800] veth0_macvtap: entered promiscuous mode [ 149.758115][ T8800] veth1_macvtap: entered promiscuous mode [ 149.796582][ T29] kauditd_printk_skb: 548 callbacks suppressed [ 149.796552][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.796597][ T29] audit: type=1326 audit(2000000089.350:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 149.809181][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.831737][ T29] audit: type=1326 audit(2000000089.370:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 149.851448][ T9053] loop4: detected capacity change from 0 to 256 [ 149.865342][ T29] audit: type=1326 audit(2000000089.370:16041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 149.895515][ T29] audit: type=1326 audit(2000000089.370:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 149.919216][ T29] audit: type=1326 audit(2000000089.370:16043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 149.942987][ T29] audit: type=1326 audit(2000000089.370:16044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 149.966576][ T29] audit: type=1326 audit(2000000089.380:16045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 149.990095][ T29] audit: type=1326 audit(2000000089.380:16046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 150.013776][ T29] audit: type=1326 audit(2000000089.390:16047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 150.014625][ T9053] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.037364][ T29] audit: type=1326 audit(2000000089.390:16048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9044 comm="syz.0.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 150.122929][ T8128] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.149884][ T8128] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.200229][ T8128] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.274053][ T8128] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.285693][ T1735] nci: nci_rsp_packet: unknown rsp opcode 0x24 [ 150.341924][ T9079] 9pnet_fd: Insufficient options for proto=fd [ 150.483403][ T9083] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 150.493593][ T9083] loop4: detected capacity change from 0 to 256 [ 150.500659][ T9083] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.518504][ T9083] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.714696][ T9097] batadv_slave_1: entered promiscuous mode [ 150.722315][ T9097] batadv_slave_1 (unregistering): left promiscuous mode [ 150.729613][ T9097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.952590][ T9092] netlink: 'syz.4.1775': attribute type 1 has an invalid length. [ 151.009816][ T9112] loop3: detected capacity change from 0 to 512 [ 151.019093][ T9112] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1782: corrupted in-inode xattr: invalid ea_ino [ 151.033623][ T9112] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1782: couldn't read orphan inode 15 (err -117) [ 151.033857][ T9109] loop6: detected capacity change from 0 to 2048 [ 151.052452][ T9113] loop4: detected capacity change from 0 to 512 [ 151.059655][ T9112] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1782: lblock 0 mapped to illegal pblock 3 (length 1) [ 151.074418][ T9113] EXT4-fs: Ignoring removed oldalloc option [ 151.080534][ T9112] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1782: error -117 reading directory block [ 151.100166][ T9112] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz.3.1782: lblock 0 mapped to illegal pblock 3 (length 1) [ 151.102344][ T9113] EXT4-fs (loop4): 1 truncate cleaned up [ 151.122591][ T9112] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1782: error -117 reading directory block [ 151.160712][ T3322] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 151.176160][ T3322] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 151.223774][ T9109] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 151.247924][ T9109] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 864 with error 28 [ 151.260419][ T9109] EXT4-fs (loop6): This should not happen!! Data will be lost [ 151.260419][ T9109] [ 151.270430][ T9109] EXT4-fs (loop6): Total free blocks count 0 [ 151.276484][ T9109] EXT4-fs (loop6): Free/Dirty block details [ 151.282472][ T9109] EXT4-fs (loop6): free_blocks=4096 [ 151.287675][ T9109] EXT4-fs (loop6): dirty_blocks=896 [ 151.292920][ T9109] EXT4-fs (loop6): Block reservation details [ 151.298926][ T9109] EXT4-fs (loop6): i_reserved_data_blocks=56 [ 151.329687][ T9108] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 151.342111][ T9108] EXT4-fs (loop6): This should not happen!! Data will be lost [ 151.342111][ T9108] [ 151.649030][ T31] bond0 (unregistering): Released all slaves [ 151.711026][ T9134] lo speed is unknown, defaulting to 1000 [ 151.819899][ T31] hsr_slave_0: left promiscuous mode [ 151.839361][ T31] hsr_slave_1: left promiscuous mode [ 152.093596][ T9134] chnl_net:caif_netlink_parms(): no params data found [ 152.152212][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.159593][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.187295][ T9134] bridge_slave_0: entered allmulticast mode [ 152.210427][ T9134] bridge_slave_0: entered promiscuous mode [ 152.234311][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.241492][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.256263][ T31] IPVS: stop unused estimator thread 0... [ 152.288965][ T9134] bridge_slave_1: entered allmulticast mode [ 152.311402][ T9134] bridge_slave_1: entered promiscuous mode [ 152.355376][ T9134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.366269][ T9134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.394093][ T9210] loop7: detected capacity change from 0 to 256 [ 152.402236][ T9210] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 152.414540][ T9134] team0: Port device team_slave_0 added [ 152.428250][ T9134] team0: Port device team_slave_1 added [ 152.459752][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.466832][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.492952][ T9134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.517629][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.524642][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.550565][ T9134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.563087][ T9218] FAULT_INJECTION: forcing a failure. [ 152.563087][ T9218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.576265][ T9218] CPU: 0 UID: 0 PID: 9218 Comm: syz.6.1804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.576386][ T9218] Tainted: [W]=WARN [ 152.576394][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.576408][ T9218] Call Trace: [ 152.576416][ T9218] [ 152.576424][ T9218] __dump_stack+0x1d/0x30 [ 152.576444][ T9218] dump_stack_lvl+0xe8/0x140 [ 152.576505][ T9218] dump_stack+0x15/0x1b [ 152.576524][ T9218] should_fail_ex+0x265/0x280 [ 152.576624][ T9218] should_fail+0xb/0x20 [ 152.576640][ T9218] should_fail_usercopy+0x1a/0x20 [ 152.576663][ T9218] _copy_from_user+0x1c/0xb0 [ 152.576693][ T9218] __sys_bpf+0x183/0x7c0 [ 152.576721][ T9218] __x64_sys_bpf+0x41/0x50 [ 152.576760][ T9218] x64_sys_call+0x2aee/0x3000 [ 152.576784][ T9218] do_syscall_64+0xd2/0x200 [ 152.576818][ T9218] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.576843][ T9218] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.576874][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.576896][ T9218] RIP: 0033:0x7fcdc024f749 [ 152.576914][ T9218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.576933][ T9218] RSP: 002b:00007fcdbecb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.576952][ T9218] RAX: ffffffffffffffda RBX: 00007fcdc04a5fa0 RCX: 00007fcdc024f749 [ 152.577007][ T9218] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 0000000000000018 [ 152.577021][ T9218] RBP: 00007fcdbecb7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.577034][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.577046][ T9218] R13: 00007fcdc04a6038 R14: 00007fcdc04a5fa0 R15: 00007ffed3a7e668 [ 152.577066][ T9218] [ 152.780960][ T9134] hsr_slave_0: entered promiscuous mode [ 152.787123][ T9134] hsr_slave_1: entered promiscuous mode [ 152.796164][ T9134] debugfs: 'hsr0' already exists in 'hsr' [ 152.801900][ T9134] Cannot create hsr debugfs directory [ 152.818561][ T9234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9234 comm=syz.6.1805 [ 152.831074][ T9234] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9234 comm=syz.6.1805 [ 152.881852][ T9243] FAULT_INJECTION: forcing a failure. [ 152.881852][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 152.894517][ T9243] CPU: 1 UID: 0 PID: 9243 Comm: syz.7.1806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.894558][ T9243] Tainted: [W]=WARN [ 152.894565][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.894577][ T9243] Call Trace: [ 152.894582][ T9243] [ 152.894590][ T9243] __dump_stack+0x1d/0x30 [ 152.894613][ T9243] dump_stack_lvl+0xe8/0x140 [ 152.894631][ T9243] dump_stack+0x15/0x1b [ 152.894682][ T9243] should_fail_ex+0x265/0x280 [ 152.894751][ T9243] ? inet6_rtm_newroute+0x5af/0x1020 [ 152.894774][ T9243] should_failslab+0x8c/0xb0 [ 152.894880][ T9243] __kmalloc_cache_noprof+0x4c/0x4a0 [ 152.894975][ T9243] inet6_rtm_newroute+0x5af/0x1020 [ 152.895038][ T9243] ? __memcg_slab_free_hook+0x135/0x230 [ 152.895132][ T9243] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 152.895158][ T9243] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 152.895188][ T9243] netlink_rcv_skb+0x123/0x220 [ 152.895221][ T9243] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.895251][ T9243] rtnetlink_rcv+0x1c/0x30 [ 152.895269][ T9243] netlink_unicast+0x5c0/0x690 [ 152.895324][ T9243] netlink_sendmsg+0x58b/0x6b0 [ 152.895347][ T9243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.895369][ T9243] __sock_sendmsg+0x145/0x180 [ 152.895395][ T9243] ____sys_sendmsg+0x31e/0x4e0 [ 152.895414][ T9243] ___sys_sendmsg+0x17b/0x1d0 [ 152.895475][ T9243] __x64_sys_sendmsg+0xd4/0x160 [ 152.895499][ T9243] x64_sys_call+0x191e/0x3000 [ 152.895557][ T9243] do_syscall_64+0xd2/0x200 [ 152.895579][ T9243] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.895608][ T9243] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.895653][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.895675][ T9243] RIP: 0033:0x7f33241bf749 [ 152.895691][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.895777][ T9243] RSP: 002b:00007f3322c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.895798][ T9243] RAX: ffffffffffffffda RBX: 00007f3324415fa0 RCX: 00007f33241bf749 [ 152.895813][ T9243] RDX: 0000000020048812 RSI: 00002000000004c0 RDI: 0000000000000003 [ 152.895827][ T9243] RBP: 00007f3322c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 152.895841][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.895854][ T9243] R13: 00007f3324416038 R14: 00007f3324415fa0 R15: 00007ffd7df0b8d8 [ 152.895873][ T9243] [ 153.224147][ T9260] tipc: Enabling of bearer rejected, failed to enable media [ 153.256821][ T9134] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 153.283434][ T9134] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 153.306990][ T9134] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 153.316096][ T9134] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 153.356878][ T9282] loop6: detected capacity change from 0 to 128 [ 153.370382][ T9282] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.414536][ T9282] program syz.6.1810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.470809][ T9293] __nla_validate_parse: 9 callbacks suppressed [ 153.470826][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1811'. [ 153.509701][ T9134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.541047][ T9134] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.550628][ T1735] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.557793][ T1735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.566954][ T9299] sg_write: data in/out 12632188/1 bytes for SCSI command 0x1c-- guessing data in; [ 153.566954][ T9299] program syz.6.1814 not setting count and/or reply_len properly [ 153.598438][ T1735] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.605562][ T1735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.645781][ T9307] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1815'. [ 153.674363][ T9134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 153.684952][ T9134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.761189][ T9307] FAULT_INJECTION: forcing a failure. [ 153.761189][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 153.773920][ T9307] CPU: 1 UID: 0 PID: 9307 Comm: syz.7.1815 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.774075][ T9307] Tainted: [W]=WARN [ 153.774082][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.774095][ T9307] Call Trace: [ 153.774100][ T9307] [ 153.774141][ T9307] __dump_stack+0x1d/0x30 [ 153.774244][ T9307] dump_stack_lvl+0xe8/0x140 [ 153.774264][ T9307] dump_stack+0x15/0x1b [ 153.774283][ T9307] should_fail_ex+0x265/0x280 [ 153.774388][ T9307] ? ip_fib_metrics_init+0x64/0x470 [ 153.774414][ T9307] should_failslab+0x8c/0xb0 [ 153.774453][ T9307] __kmalloc_cache_noprof+0x4c/0x4a0 [ 153.774542][ T9307] ip_fib_metrics_init+0x64/0x470 [ 153.774622][ T9307] ? should_failslab+0x8c/0xb0 [ 153.774650][ T9307] ? __kmalloc_noprof+0x2a2/0x570 [ 153.774748][ T9307] fib_create_info+0xbe8/0x1980 [ 153.774774][ T9307] fib_table_insert+0x60/0xeb0 [ 153.774804][ T9307] ? fib_trie_table+0xd0/0xf0 [ 153.774831][ T9307] ? fib_new_table+0x1ac/0x1c0 [ 153.774853][ T9307] inet_rtm_newroute+0xab/0x140 [ 153.774875][ T9307] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 153.774895][ T9307] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 153.774921][ T9307] netlink_rcv_skb+0x123/0x220 [ 153.775030][ T9307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.775101][ T9307] rtnetlink_rcv+0x1c/0x30 [ 153.775120][ T9307] netlink_unicast+0x5c0/0x690 [ 153.775224][ T9307] netlink_sendmsg+0x58b/0x6b0 [ 153.775244][ T9307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.775263][ T9307] __sock_sendmsg+0x145/0x180 [ 153.775285][ T9307] __sys_sendto+0x268/0x330 [ 153.775359][ T9307] __x64_sys_sendto+0x76/0x90 [ 153.775499][ T9307] x64_sys_call+0x2d14/0x3000 [ 153.775522][ T9307] do_syscall_64+0xd2/0x200 [ 153.775544][ T9307] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.775607][ T9307] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.775680][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.775699][ T9307] RIP: 0033:0x7f33241bf749 [ 153.775715][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.775733][ T9307] RSP: 002b:00007f3322c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 153.775802][ T9307] RAX: ffffffffffffffda RBX: 00007f3324415fa0 RCX: 00007f33241bf749 [ 153.775815][ T9307] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000003 [ 153.775842][ T9307] RBP: 00007f3322c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.775854][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.775865][ T9307] R13: 00007f3324416038 R14: 00007f3324415fa0 R15: 00007ffd7df0b8d8 [ 153.775882][ T9307] [ 153.796366][ T9134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.892486][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1821'. [ 153.900494][ T9319] loop4: detected capacity change from 0 to 256 [ 154.068398][ T9319] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.144974][ T9337] infiniband syz!: set active [ 154.149819][ T9337] infiniband syz!: added team_slave_0 [ 154.166605][ T9337] RDS/IB: syz!: added [ 154.170620][ T9337] smc: adding ib device syz! with port count 1 [ 154.178132][ T9337] smc: ib device syz! port 1 has no pnetid [ 154.204538][ T9134] veth0_vlan: entered promiscuous mode [ 154.213509][ T9134] veth1_vlan: entered promiscuous mode [ 154.230852][ T9134] veth0_macvtap: entered promiscuous mode [ 154.238865][ T9134] veth1_macvtap: entered promiscuous mode [ 154.250678][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.264652][ T9134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.285681][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.306605][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.315750][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.324657][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.771705][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1832'. [ 154.800756][ T9374] loop8: detected capacity change from 0 to 512 [ 154.873162][ T9380] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1835'. [ 154.883074][ T9380] syzkaller0: entered promiscuous mode [ 154.888587][ T9380] syzkaller0: entered allmulticast mode [ 155.061859][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1839'. [ 155.120248][ T9391] syzkaller0: entered promiscuous mode [ 155.224131][ T9396] loop7: detected capacity change from 0 to 512 [ 155.249882][ T9396] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.1840: corrupted in-inode xattr: invalid ea_ino [ 155.277093][ T9396] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1840: couldn't read orphan inode 15 (err -117) [ 155.317968][ T9396] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 3: comm syz.7.1840: lblock 0 mapped to illegal pblock 3 (length 1) [ 155.349970][ T9396] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.1840: error -117 reading directory block [ 155.388005][ T9396] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 3: comm syz.7.1840: lblock 0 mapped to illegal pblock 3 (length 1) [ 155.427024][ T9396] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.1840: error -117 reading directory block [ 155.494953][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1840'. [ 155.512890][ T9396] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 3: comm syz.7.1840: lblock 0 mapped to illegal pblock 3 (length 1) [ 155.543335][ T9396] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.1840: error -117 reading directory block [ 155.663544][ T9405] loop7: detected capacity change from 0 to 512 [ 155.683719][ T9405] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.1843: corrupted in-inode xattr: invalid ea_ino [ 155.701582][ T9405] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1843: couldn't read orphan inode 15 (err -117) [ 155.727784][ T9405] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 3: comm syz.7.1843: lblock 0 mapped to illegal pblock 3 (length 1) [ 155.775795][ T9405] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.1843: error -117 reading directory block [ 155.804941][ T9405] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 3: comm syz.7.1843: lblock 0 mapped to illegal pblock 3 (length 1) [ 155.819354][ T9405] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.1843: error -117 reading directory block [ 155.854057][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1843'. [ 155.904630][ T8800] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 155.940977][ T8800] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 155.994452][ T9413] loop7: detected capacity change from 0 to 512 [ 156.011255][ T9413] EXT4-fs: Invalid want_extra_isize 0 [ 156.084570][ T9416] loop7: detected capacity change from 0 to 512 [ 156.125053][ T9416] EXT4-fs: dax option not supported [ 156.176621][ T9413] loop7: detected capacity change from 0 to 512 [ 156.192479][ T9413] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 156.213318][ T9413] unsupported nla_type 46065 [ 156.591509][ T9424] loop4: detected capacity change from 0 to 164 [ 156.617425][ T9424] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.699938][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 156.699951][ T29] audit: type=1400 audit(2000000096.250:16284): avc: denied { nlmsg_read } for pid=9418 comm="syz.4.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.752469][ T9419] ip6tnl1: entered promiscuous mode [ 156.757721][ T9419] ip6tnl1: entered allmulticast mode [ 157.091588][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1852'. [ 157.100532][ T29] audit: type=1400 audit(2000000096.640:16285): avc: denied { bind } for pid=9433 comm="syz.7.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.121400][ T29] audit: type=1400 audit(2000000096.640:16286): avc: denied { setopt } for pid=9433 comm="syz.7.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 157.135211][ T9436] loop8: detected capacity change from 0 to 512 [ 157.161533][ T9436] EXT4-fs: dax option not supported [ 157.199151][ T9434] sch_fq: defrate 4294967295 ignored. [ 157.378541][ T9424] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1846'. [ 157.511519][ T9446] loop4: detected capacity change from 0 to 2048 [ 157.542957][ T29] audit: type=1326 audit(2000000097.070:16287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 157.567008][ T29] audit: type=1326 audit(2000000097.070:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 157.587328][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.590603][ T29] audit: type=1326 audit(2000000097.070:16289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 157.621554][ T29] audit: type=1326 audit(2000000097.080:16290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 157.645226][ T29] audit: type=1326 audit(2000000097.080:16291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 157.668888][ T29] audit: type=1326 audit(2000000097.080:16292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 157.692592][ T29] audit: type=1326 audit(2000000097.080:16293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9442 comm="syz.7.1854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 157.717346][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.765209][ T9446] EXT4-fs mount: 58 callbacks suppressed [ 157.765230][ T9446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.924341][ T9462] loop8: detected capacity change from 0 to 256 [ 157.954105][ T9462] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.035123][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.481812][ T9476] __nla_validate_parse: 5 callbacks suppressed [ 158.481828][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1862'. [ 158.498720][ T9476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9476 comm=syz.6.1862 [ 158.606766][ T9484] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1866'. [ 158.693350][ T9486] loop7: detected capacity change from 0 to 512 [ 158.702156][ T9490] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.1870'. [ 158.711785][ T9490] net_ratelimit: 8 callbacks suppressed [ 158.711799][ T9490] netlink: zone id is out of range [ 158.722500][ T9490] netlink: zone id is out of range [ 158.731563][ T9490] netlink: zone id is out of range [ 158.736893][ T9490] netlink: zone id is out of range [ 158.748943][ T9486] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.752126][ T9490] netlink: zone id is out of range [ 158.763152][ T9490] netlink: zone id is out of range [ 158.768337][ T9490] netlink: zone id is out of range [ 158.796150][ T9492] loop6: detected capacity change from 0 to 1024 [ 158.831336][ T9490] netlink: set zone limit has 8 unknown bytes [ 158.847345][ T9486] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.863099][ T9492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.895990][ T9486] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1868: bg 0: block 248: padding at end of block bitmap is not set [ 158.919913][ T9486] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1868: Failed to acquire dquot type 1 [ 158.992588][ T9490] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 159.030821][ T9486] EXT4-fs (loop7): 1 truncate cleaned up [ 159.031238][ T9490] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 159.036891][ T9486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 159.048785][ T9490] EXT4-fs (loop6): This should not happen!! Data will be lost [ 159.048785][ T9490] [ 159.048804][ T9490] EXT4-fs (loop6): Total free blocks count 0 [ 159.076917][ T9490] EXT4-fs (loop6): Free/Dirty block details [ 159.082840][ T9490] EXT4-fs (loop6): free_blocks=20480 [ 159.088121][ T9490] EXT4-fs (loop6): dirty_blocks=80 [ 159.093268][ T9490] EXT4-fs (loop6): Block reservation details [ 159.099246][ T9490] EXT4-fs (loop6): i_reserved_data_blocks=5 [ 159.302236][ T9507] FAULT_INJECTION: forcing a failure. [ 159.302236][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 159.314953][ T9507] CPU: 1 UID: 0 PID: 9507 Comm: syz.4.1874 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.314985][ T9507] Tainted: [W]=WARN [ 159.314991][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.315047][ T9507] Call Trace: [ 159.315053][ T9507] [ 159.315061][ T9507] __dump_stack+0x1d/0x30 [ 159.315083][ T9507] dump_stack_lvl+0xe8/0x140 [ 159.315101][ T9507] dump_stack+0x15/0x1b [ 159.315119][ T9507] should_fail_ex+0x265/0x280 [ 159.315215][ T9507] should_failslab+0x8c/0xb0 [ 159.315239][ T9507] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 159.315268][ T9507] ? __alloc_skb+0x101/0x320 [ 159.315355][ T9507] __alloc_skb+0x101/0x320 [ 159.315386][ T9507] netlink_alloc_large_skb+0xbf/0xf0 [ 159.315415][ T9507] netlink_sendmsg+0x3cf/0x6b0 [ 159.315465][ T9507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.315485][ T9507] __sock_sendmsg+0x145/0x180 [ 159.315521][ T9507] ____sys_sendmsg+0x31e/0x4e0 [ 159.315544][ T9507] ___sys_sendmsg+0x17b/0x1d0 [ 159.315570][ T9507] __x64_sys_sendmsg+0xd4/0x160 [ 159.315615][ T9507] x64_sys_call+0x191e/0x3000 [ 159.315637][ T9507] do_syscall_64+0xd2/0x200 [ 159.315675][ T9507] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.315705][ T9507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.315724][ T9507] RIP: 0033:0x7fcfc636f749 [ 159.315806][ T9507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.315822][ T9507] RSP: 002b:00007fcfc4dcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.315840][ T9507] RAX: ffffffffffffffda RBX: 00007fcfc65c5fa0 RCX: 00007fcfc636f749 [ 159.315891][ T9507] RDX: 000000002004c080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 159.315904][ T9507] RBP: 00007fcfc4dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 159.315918][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.315977][ T9507] R13: 00007fcfc65c6038 R14: 00007fcfc65c5fa0 R15: 00007ffd2ffac418 [ 159.315997][ T9507] [ 159.535666][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 159.554065][ T9481] loop8: detected capacity change from 0 to 2048 [ 159.624297][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 159.693334][ T9481] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.1866: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 159.740528][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1875'. [ 159.749664][ T9518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1875'. [ 159.758704][ T9518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 159.767661][ T9518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1875'. [ 159.851573][ T9481] EXT4-fs (loop8): get root inode failed [ 159.857314][ T9481] EXT4-fs (loop8): mount failed [ 160.348797][ T9541] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1883'. [ 160.485289][ T9547] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 160.501705][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.519826][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.538793][ T9550] ALSA: seq fatal error: cannot create timer (-19) [ 160.555855][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1884'. [ 160.703255][ T9571] loop6: detected capacity change from 0 to 512 [ 160.709969][ T9571] EXT4-fs: Ignoring removed nobh option [ 160.722762][ T9571] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.1887: corrupted inode contents [ 160.734951][ T9571] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.1887: mark_inode_dirty error [ 160.746796][ T9571] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.1887: corrupted inode contents [ 160.758822][ T9571] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.1887: mark_inode_dirty error [ 160.771808][ T9571] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1887: Failed to acquire dquot type 0 [ 160.785274][ T9571] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1887: corrupted inode contents [ 160.797595][ T9571] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.1887: mark_inode_dirty error [ 160.809210][ T9571] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1887: corrupted inode contents [ 160.821395][ T9571] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.1887: mark_inode_dirty error [ 160.833556][ T9571] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1887: corrupted inode contents [ 160.845917][ T9571] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 160.854772][ T9571] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.1887: corrupted inode contents [ 160.856017][ T9542] loop8: detected capacity change from 0 to 2048 [ 160.867662][ T9571] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.1887: mark_inode_dirty error [ 160.886731][ T9571] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 160.897260][ T9571] EXT4-fs (loop6): 1 truncate cleaned up [ 160.903329][ T9571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.915816][ T9571] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.926673][ T9571] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.975638][ T9584] FAULT_INJECTION: forcing a failure. [ 160.975638][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 160.988348][ T9584] CPU: 1 UID: 0 PID: 9584 Comm: syz.6.1888 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.988378][ T9584] Tainted: [W]=WARN [ 160.988384][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.988395][ T9584] Call Trace: [ 160.988399][ T9584] [ 160.988406][ T9584] __dump_stack+0x1d/0x30 [ 160.988427][ T9584] dump_stack_lvl+0xe8/0x140 [ 160.988445][ T9584] dump_stack+0x15/0x1b [ 160.988461][ T9584] should_fail_ex+0x265/0x280 [ 160.988490][ T9584] should_failslab+0x8c/0xb0 [ 160.988512][ T9584] kmem_cache_alloc_noprof+0x50/0x480 [ 160.988535][ T9584] ? vm_area_dup+0x33/0x2c0 [ 160.988559][ T9584] vm_area_dup+0x33/0x2c0 [ 160.988583][ T9584] __split_vma+0xe9/0x650 [ 160.988603][ T9584] ? __account_obj_stock+0x211/0x350 [ 160.988627][ T9584] vms_gather_munmap_vmas+0x17a/0x7b0 [ 160.988652][ T9584] ? avc_has_perm_noaudit+0x1b1/0x200 [ 160.988670][ T9584] ? avc_has_perm+0xf7/0x180 [ 160.988685][ T9584] do_vmi_align_munmap+0x1ac/0x3d0 [ 160.988715][ T9584] do_vmi_munmap+0x1db/0x220 [ 160.988733][ T9584] do_munmap+0x79/0xb0 [ 160.988753][ T9584] mremap_to+0x192/0x430 [ 160.988774][ T9584] ? check_prep_vma+0x5d6/0x660 [ 160.988797][ T9584] __se_sys_mremap+0x632/0xb30 [ 160.988823][ T9584] ? fput+0x8f/0xc0 [ 160.988837][ T9584] ? ksys_write+0x192/0x1a0 [ 160.988856][ T9584] __x64_sys_mremap+0x67/0x80 [ 160.988878][ T9584] x64_sys_call+0x2a28/0x3000 [ 160.988895][ T9584] do_syscall_64+0xd2/0x200 [ 160.988913][ T9584] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.988935][ T9584] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.988960][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.988978][ T9584] RIP: 0033:0x7fcdc024f749 [ 160.988990][ T9584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.989005][ T9584] RSP: 002b:00007fcdbecb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 160.989021][ T9584] RAX: ffffffffffffffda RBX: 00007fcdc04a5fa0 RCX: 00007fcdc024f749 [ 160.989032][ T9584] RDX: 0000000005000000 RSI: 0000000000002000 RDI: 0000200000ff5000 [ 160.989042][ T9584] RBP: 00007fcdbecb7090 R08: 0000200000ffd000 R09: 0000000000000000 [ 160.989053][ T9584] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 160.989063][ T9584] R13: 00007fcdc04a6038 R14: 00007fcdc04a5fa0 R15: 00007ffed3a7e668 [ 160.989078][ T9584] [ 161.260550][ T9542] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.1883: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 161.280937][ T9542] EXT4-fs (loop8): get root inode failed [ 161.286779][ T9542] EXT4-fs (loop8): mount failed [ 161.366969][ T9601] netlink: 'syz.6.1890': attribute type 3 has an invalid length. [ 161.633391][ T9618] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 161.653865][ T9618] batadv_slave_1: entered promiscuous mode [ 161.661962][ T9618] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 161.670442][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.679358][ T9612] loop6: detected capacity change from 0 to 2048 [ 161.722391][ T9618] batadv_slave_1 (unregistering): left promiscuous mode [ 161.730912][ T9618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.762326][ T9612] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #2: comm syz.6.1893: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 161.825481][ T9612] EXT4-fs (loop6): get root inode failed [ 161.831267][ T9612] EXT4-fs (loop6): mount failed [ 162.611558][ T9652] netlink: zone id is out of range [ 162.616744][ T9652] netlink: zone id is out of range [ 162.636967][ T9652] loop8: detected capacity change from 0 to 1024 [ 162.685801][ T9652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.700075][ T9652] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 162.715295][ T9652] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 162.727539][ T9652] EXT4-fs (loop8): This should not happen!! Data will be lost [ 162.727539][ T9652] [ 162.737343][ T9652] EXT4-fs (loop8): Total free blocks count 0 [ 162.743366][ T9652] EXT4-fs (loop8): Free/Dirty block details [ 162.749281][ T9652] EXT4-fs (loop8): free_blocks=20480 [ 162.754622][ T9652] EXT4-fs (loop8): dirty_blocks=80 [ 162.759746][ T9652] EXT4-fs (loop8): Block reservation details [ 162.765754][ T9652] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 162.785371][ T9652] bridge0: port 3(gretap0) entered blocking state [ 162.791872][ T9652] bridge0: port 3(gretap0) entered disabled state [ 162.798769][ T9652] gretap0: entered allmulticast mode [ 162.804808][ T9652] gretap0: entered promiscuous mode [ 162.810166][ T9652] bridge0: port 3(gretap0) entered blocking state [ 162.816654][ T9652] bridge0: port 3(gretap0) entered forwarding state [ 162.931206][ T31] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 162.985885][ T9664] loop8: detected capacity change from 0 to 512 [ 163.003847][ T9664] EXT4-fs: Ignoring removed i_version option [ 163.009901][ T9664] EXT4-fs: Ignoring removed bh option [ 163.026780][ T9667] FAULT_INJECTION: forcing a failure. [ 163.026780][ T9667] name failslab, interval 1, probability 0, space 0, times 0 [ 163.039519][ T9667] CPU: 1 UID: 0 PID: 9667 Comm: syz.6.1906 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.039627][ T9667] Tainted: [W]=WARN [ 163.039634][ T9667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.039648][ T9667] Call Trace: [ 163.039654][ T9667] [ 163.039660][ T9667] __dump_stack+0x1d/0x30 [ 163.039684][ T9667] dump_stack_lvl+0xe8/0x140 [ 163.039727][ T9667] dump_stack+0x15/0x1b [ 163.039747][ T9667] should_fail_ex+0x265/0x280 [ 163.039782][ T9667] should_failslab+0x8c/0xb0 [ 163.039864][ T9667] kmem_cache_alloc_noprof+0x50/0x480 [ 163.039895][ T9667] ? skb_clone+0x151/0x1f0 [ 163.039917][ T9667] skb_clone+0x151/0x1f0 [ 163.039937][ T9667] __netlink_deliver_tap+0x2c9/0x500 [ 163.040042][ T9667] netlink_unicast+0x66b/0x690 [ 163.040071][ T9667] netlink_sendmsg+0x58b/0x6b0 [ 163.040157][ T9667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.040179][ T9667] __sock_sendmsg+0x145/0x180 [ 163.040286][ T9667] ____sys_sendmsg+0x31e/0x4e0 [ 163.040309][ T9667] ___sys_sendmsg+0x17b/0x1d0 [ 163.040397][ T9667] __x64_sys_sendmsg+0xd4/0x160 [ 163.040421][ T9667] x64_sys_call+0x191e/0x3000 [ 163.040446][ T9667] do_syscall_64+0xd2/0x200 [ 163.040469][ T9667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.040498][ T9667] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.040534][ T9667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.040603][ T9667] RIP: 0033:0x7fcdc024f749 [ 163.040620][ T9667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.040639][ T9667] RSP: 002b:00007fcdbecb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.040660][ T9667] RAX: ffffffffffffffda RBX: 00007fcdc04a5fa0 RCX: 00007fcdc024f749 [ 163.040674][ T9667] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 163.040688][ T9667] RBP: 00007fcdbecb7090 R08: 0000000000000000 R09: 0000000000000000 [ 163.040702][ T9667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.040716][ T9667] R13: 00007fcdc04a6038 R14: 00007fcdc04a5fa0 R15: 00007ffed3a7e668 [ 163.040748][ T9667] [ 163.255006][ T9664] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.275949][ T9664] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.312246][ T9134] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.370044][ T9674] loop8: detected capacity change from 0 to 2048 [ 163.403313][ T9676] syz2: rxe_newlink: already configured on lo [ 163.419838][ T9676] netlink: 'syz.4.1909': attribute type 4 has an invalid length. [ 163.430880][ T9672] lo speed is unknown, defaulting to 1000 [ 163.431899][ T9676] netlink: 'syz.4.1909': attribute type 4 has an invalid length. [ 163.471629][ T9182] lo speed is unknown, defaulting to 1000 [ 163.477453][ T9182] syz2: Port: 1 Link ACTIVE [ 163.487252][ T1040] lo speed is unknown, defaulting to 1000 [ 163.497983][ T9679] loop4: detected capacity change from 0 to 512 [ 163.516608][ T9679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.530366][ T9674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.543039][ T9679] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1909: bad orphan inode 131083 [ 163.564505][ T9679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.589925][ T9674] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 163.624713][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.651889][ T9674] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 163.664471][ T9674] EXT4-fs (loop8): This should not happen!! Data will be lost [ 163.664471][ T9674] [ 163.674201][ T9674] EXT4-fs (loop8): Total free blocks count 0 [ 163.680232][ T9674] EXT4-fs (loop8): Free/Dirty block details [ 163.686339][ T9674] EXT4-fs (loop8): free_blocks=4096 [ 163.691619][ T9674] EXT4-fs (loop8): dirty_blocks=512 [ 163.696851][ T9674] EXT4-fs (loop8): Block reservation details [ 163.702859][ T9674] EXT4-fs (loop8): i_reserved_data_blocks=32 [ 163.718091][ T31] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 163.721244][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 163.721259][ T29] audit: type=1326 audit(2000000103.200:16766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 163.788537][ T29] audit: type=1326 audit(2000000103.330:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 163.812222][ T29] audit: type=1326 audit(2000000103.330:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 163.835835][ T29] audit: type=1326 audit(2000000103.330:16769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 163.915991][ T29] audit: type=1326 audit(2000000103.470:16770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 163.996922][ T29] audit: type=1326 audit(2000000103.510:16771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 164.020500][ T29] audit: type=1326 audit(2000000103.510:16772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 164.043953][ T29] audit: type=1326 audit(2000000103.510:16773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 164.067573][ T29] audit: type=1326 audit(2000000103.510:16774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 164.091098][ T29] audit: type=1326 audit(2000000103.510:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9682 comm="syz.0.1910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04201f749 code=0x7ffc0000 [ 164.125353][ T9693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.132595][ T9693] IPv6: NLM_F_CREATE should be set when creating new route [ 164.139799][ T9693] IPv6: NLM_F_CREATE should be set when creating new route [ 164.148087][ T9693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.201379][ T9689] loop4: detected capacity change from 0 to 2048 [ 164.288752][ T9689] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #2: comm syz.4.1912: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 164.431483][ T9689] EXT4-fs (loop4): get root inode failed [ 164.437210][ T9689] EXT4-fs (loop4): mount failed [ 164.512904][ T3317] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 164.523872][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.524012][ T3317] Tainted: [W]=WARN [ 164.524020][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.524043][ T3317] Call Trace: [ 164.524051][ T3317] [ 164.524059][ T3317] __dump_stack+0x1d/0x30 [ 164.524083][ T3317] dump_stack_lvl+0xe8/0x140 [ 164.524104][ T3317] dump_stack+0x15/0x1b [ 164.524120][ T3317] dump_header+0x81/0x220 [ 164.524184][ T3317] oom_kill_process+0x342/0x400 [ 164.524217][ T3317] out_of_memory+0x979/0xb80 [ 164.524251][ T3317] try_charge_memcg+0x610/0xa10 [ 164.524375][ T3317] charge_memcg+0x51/0xc0 [ 164.524398][ T3317] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 164.524429][ T3317] __read_swap_cache_async+0x17b/0x2d0 [ 164.524451][ T3317] swap_cluster_readahead+0x362/0x3c0 [ 164.524531][ T3317] swapin_readahead+0xde/0x800 [ 164.524554][ T3317] ? css_rstat_updated+0xb7/0x240 [ 164.524630][ T3317] ? next_uptodate_folio+0x815/0x890 [ 164.524652][ T3317] ? __rcu_read_unlock+0x4f/0x70 [ 164.524741][ T3317] ? __rcu_read_unlock+0x4f/0x70 [ 164.524766][ T3317] ? swap_cache_get_folio+0x277/0x280 [ 164.524858][ T3317] do_swap_page+0x2ae/0x2370 [ 164.524939][ T3317] ? ___perf_sw_event+0x2d6/0x310 [ 164.524965][ T3317] ? _raw_spin_unlock+0x26/0x50 [ 164.524992][ T3317] ? finish_task_switch+0xad/0x2b0 [ 164.525014][ T3317] ? __pfx_default_wake_function+0x10/0x10 [ 164.525107][ T3317] handle_mm_fault+0x9a5/0x2be0 [ 164.525205][ T3317] ? vma_start_read+0x141/0x1f0 [ 164.525241][ T3317] do_user_addr_fault+0x630/0x1080 [ 164.525341][ T3317] ? fpregs_restore_userregs+0xe2/0x1d0 [ 164.525374][ T3317] ? switch_fpu_return+0xe/0x20 [ 164.525467][ T3317] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.525497][ T3317] exc_page_fault+0x62/0xa0 [ 164.525585][ T3317] asm_exc_page_fault+0x26/0x30 [ 164.525608][ T3317] RIP: 0033:0x7fc042051fc5 [ 164.525625][ T3317] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 164.525643][ T3317] RSP: 002b:00007ffc69461d18 EFLAGS: 00010246 [ 164.525658][ T3317] RAX: 0000000000000000 RBX: 00000000000003ad RCX: 00007fc042051fc3 [ 164.525669][ T3317] RDX: 00007ffc69461d30 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.525759][ T3317] RBP: 00007ffc69461d9c R08: 00000000119d21e9 R09: 0000000000000000 [ 164.525773][ T3317] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 164.525786][ T3317] R13: 00000000000927c0 R14: 0000000000028062 R15: 00007ffc69461df0 [ 164.525806][ T3317] [ 164.525813][ T3317] memory: usage 307200kB, limit 307200kB, failcnt 1569 [ 164.788071][ T3317] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 164.796135][ T3317] kmem: usage 307136kB, limit 9007199254740988kB, failcnt 0 [ 164.803530][ T3317] Memory cgroup stats for /syz0: [ 164.830031][ T3317] cache 0 [ 164.837996][ T3317] rss 0 [ 164.840749][ T3317] shmem 0 [ 164.843710][ T3317] mapped_file 0 [ 164.847214][ T3317] dirty 0 [ 164.850174][ T3317] writeback 8192 [ 164.853790][ T3317] workingset_refault_anon 490 [ 164.858457][ T3317] workingset_refault_file 3330 [ 164.863329][ T3317] swap 196608 [ 164.866686][ T3317] swapcached 20480 [ 164.870390][ T3317] pgpgin 169674 [ 164.873945][ T3317] pgpgout 169658 [ 164.877570][ T3317] pgfault 157435 [ 164.881099][ T3317] pgmajfault 294 [ 164.884673][ T3317] inactive_anon 20480 [ 164.888669][ T3317] active_anon 0 [ 164.892209][ T3317] inactive_file 45056 [ 164.896214][ T3317] active_file 0 [ 164.899653][ T3317] unevictable 0 [ 164.903156][ T3317] hierarchical_memory_limit 314572800 [ 164.908526][ T3317] hierarchical_memsw_limit 9223372036854771712 [ 164.914776][ T3317] total_cache 0 [ 164.918235][ T3317] total_rss 0 [ 164.921534][ T3317] total_shmem 0 [ 164.924986][ T3317] total_mapped_file 0 [ 164.928958][ T3317] total_dirty 0 [ 164.932432][ T3317] total_writeback 8192 [ 164.936497][ T3317] total_workingset_refault_anon 490 [ 164.941793][ T3317] total_workingset_refault_file 3330 [ 164.947185][ T3317] total_swap 196608 [ 164.950984][ T3317] total_swapcached 20480 [ 164.955254][ T3317] total_pgpgin 169674 [ 164.959232][ T3317] total_pgpgout 169658 [ 164.963309][ T3317] total_pgfault 157435 [ 164.967371][ T3317] total_pgmajfault 294 [ 164.971454][ T3317] total_inactive_anon 20480 [ 164.975959][ T3317] total_active_anon 0 [ 164.979932][ T3317] total_inactive_file 45056 [ 164.984487][ T3317] total_active_file 0 [ 164.988453][ T3317] total_unevictable 0 [ 164.992447][ T3317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1910,pid=9682,uid=0 [ 165.007125][ T3317] Memory cgroup out of memory: Killed process 9682 (syz.0.1910) total-vm:94100kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 165.097353][ T9719] loop7: detected capacity change from 0 to 1024 [ 165.124626][ T9719] ext4: Unknown parameter 'uid<00000000000000000000' [ 165.393556][ T9736] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 165.506218][ T9744] __nla_validate_parse: 1 callbacks suppressed [ 165.506233][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1920'. [ 165.521445][ T9744] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1920'. [ 165.530381][ T9744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1920'. [ 165.539494][ T9744] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1920'. [ 165.595379][ T9752] rdma_rxe: rxe_newlink: failed to add lo [ 165.616087][ T9752] netlink: 'syz.6.1923': attribute type 4 has an invalid length. [ 165.684077][ T9752] netlink: 'syz.6.1923': attribute type 4 has an invalid length. [ 165.719560][ T9752] loop6: detected capacity change from 0 to 512 [ 165.753967][ T9752] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 165.788066][ T9752] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1923: bad orphan inode 131083 [ 165.839818][ T9752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.907843][ T8080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.001591][ T9794] loop4: detected capacity change from 0 to 128 [ 166.170066][ T9805] lo speed is unknown, defaulting to 1000 [ 166.331809][ T9808] loop4: detected capacity change from 0 to 512 [ 166.338426][ T9808] EXT4-fs: Ignoring removed nobh option [ 166.372661][ T9808] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1934: corrupted inode contents [ 166.448571][ T9816] loop7: detected capacity change from 0 to 512 [ 166.455123][ T9808] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #3: comm syz.4.1934: mark_inode_dirty error [ 166.481931][ T9816] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.7.1936: corrupted xattr block 95: invalid header [ 166.498255][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1938'. [ 166.507797][ T9808] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #3: comm syz.4.1934: corrupted inode contents [ 166.531117][ T9816] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1936: bg 0: block 7: invalid block bitmap [ 166.543624][ T9808] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.1934: mark_inode_dirty error [ 166.545548][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1938'. [ 166.571288][ T9816] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 166.598941][ T9808] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1934: Failed to acquire dquot type 0 [ 166.610541][ T9816] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #11: comm syz.7.1936: corrupted xattr block 95: invalid header [ 166.629054][ T9816] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 166.651236][ T9816] EXT4-fs (loop7): 1 orphan inode deleted [ 166.657323][ T9816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.673388][ T9816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.727566][ T9808] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1934: corrupted inode contents [ 166.739815][ T9808] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #16: comm syz.4.1934: mark_inode_dirty error [ 166.752132][ T9808] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1934: corrupted inode contents [ 166.797476][ T9808] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.1934: mark_inode_dirty error [ 166.844999][ T9808] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1934: corrupted inode contents [ 166.871369][ T9842] tipc: Enabling of bearer rejected, failed to enable media [ 166.892572][ T9808] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 166.910167][ T9808] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.1934: corrupted inode contents [ 166.938647][ T9808] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.1934: mark_inode_dirty error [ 166.957781][ T9849] rdma_rxe: rxe_newlink: failed to add lo [ 166.965138][ T9808] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 166.971904][ T9849] netlink: 'syz.6.1949': attribute type 4 has an invalid length. [ 166.982953][ T9808] EXT4-fs (loop4): 1 truncate cleaned up [ 166.989090][ T9808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.001443][ T9849] netlink: 'syz.6.1949': attribute type 4 has an invalid length. [ 167.004255][ T9808] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.024637][ T9849] loop6: detected capacity change from 0 to 512 [ 167.032396][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.043269][ T9849] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 167.086643][ T9857] tipc: Enabling of bearer rejected, failed to enable media [ 167.099615][ T9849] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1949: bad orphan inode 131083 [ 167.124572][ T9860] rdma_rxe: rxe_newlink: failed to add lo [ 167.130935][ T9860] netlink: 'syz.7.1952': attribute type 4 has an invalid length. [ 167.131344][ T9849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.181791][ T8080] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.186985][ T9861] netlink: 'syz.7.1952': attribute type 4 has an invalid length. [ 167.218172][ T9860] loop7: detected capacity change from 0 to 512 [ 167.219204][ T9863] lo speed is unknown, defaulting to 1000 [ 167.233037][ T9860] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 167.245679][ T9860] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1952: bad orphan inode 131083 [ 167.281303][ T9860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.414520][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.468706][ T9883] tipc: Enabling of bearer rejected, failed to enable media [ 167.504317][ T9874] loop6: detected capacity change from 0 to 512 [ 167.526182][ T9881] syzkaller0: entered promiscuous mode [ 167.531713][ T9881] syzkaller0: entered allmulticast mode [ 167.548014][ T9874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.564746][ T9874] EXT4-fs (loop6): orphan cleanup on readonly fs [ 167.580482][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 167.589458][ T9886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1960'. [ 167.598533][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1960'. [ 167.607506][ T9886] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1960'. [ 167.618509][ T9874] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1953: bg 0: block 248: padding at end of block bitmap is not set [ 167.651367][ T9874] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1953: Failed to acquire dquot type 1 [ 167.687776][ T9874] EXT4-fs (loop6): 1 truncate cleaned up [ 167.695573][ T9874] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.708743][ T9874] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.938916][ T9904] netlink: 'syz.7.1966': attribute type 39 has an invalid length. [ 168.111846][ T9911] loop8: detected capacity change from 0 to 128 [ 168.121722][ T9911] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.142957][ T9911] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.197048][ T9914] tipc: Enabling of bearer rejected, failed to enable media [ 168.286294][ T9134] FAT-fs (loop8): error, invalid access to FAT (entry 0xffff0000) [ 168.294287][ T9134] FAT-fs (loop8): Filesystem has been set read-only [ 168.302217][ T9134] VFS: Lookup of 'file0' in vfat loop8 would have caused loop [ 168.314969][ T9134] VFS: Lookup of 'file0' in vfat loop8 would have caused loop [ 168.362423][ T9915] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.522517][ T31] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.564278][ T31] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.635086][ T31] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.650236][ T9939] lo speed is unknown, defaulting to 1000 [ 168.674724][ T31] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.696219][ T9949] tipc: Enabling of bearer rejected, failed to enable media [ 168.760810][ T31] gretap0: left allmulticast mode [ 168.766011][ T31] gretap0: left promiscuous mode [ 168.771194][ T31] bridge0: port 3(gretap0) entered disabled state [ 168.791600][ T31] bridge_slave_1: left allmulticast mode [ 168.797357][ T9955] FAULT_INJECTION: forcing a failure. [ 168.797357][ T9955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.797446][ T31] bridge_slave_1: left promiscuous mode [ 168.810468][ T9955] CPU: 0 UID: 0 PID: 9955 Comm: syz.4.1983 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.810582][ T9955] Tainted: [W]=WARN [ 168.810589][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 168.810603][ T9955] Call Trace: [ 168.810672][ T9955] [ 168.810681][ T9955] __dump_stack+0x1d/0x30 [ 168.810704][ T9955] dump_stack_lvl+0xe8/0x140 [ 168.810725][ T9955] dump_stack+0x15/0x1b [ 168.810746][ T9955] should_fail_ex+0x265/0x280 [ 168.810792][ T9955] should_fail+0xb/0x20 [ 168.810809][ T9955] should_fail_usercopy+0x1a/0x20 [ 168.810831][ T9955] _copy_from_user+0x1c/0xb0 [ 168.810897][ T9955] kstrtouint_from_user+0x69/0xf0 [ 168.810916][ T9955] ? 0xffffffff81000000 [ 168.810928][ T9955] ? selinux_file_permission+0x1e4/0x320 [ 168.810956][ T9955] proc_fail_nth_write+0x50/0x160 [ 168.810992][ T9955] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.811022][ T9955] vfs_write+0x269/0x960 [ 168.811046][ T9955] ? vfs_read+0x4e6/0x770 [ 168.811074][ T9955] ? __rcu_read_unlock+0x4f/0x70 [ 168.811144][ T9955] ? __fget_files+0x184/0x1c0 [ 168.811207][ T9955] ksys_write+0xda/0x1a0 [ 168.811232][ T9955] __x64_sys_write+0x40/0x50 [ 168.811257][ T9955] x64_sys_call+0x2802/0x3000 [ 168.811284][ T9955] do_syscall_64+0xd2/0x200 [ 168.811305][ T9955] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.811349][ T9955] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.811381][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.811494][ T9955] RIP: 0033:0x7fcfc636e1ff [ 168.811509][ T9955] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 168.811593][ T9955] RSP: 002b:00007fcfc4dcf030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 168.811612][ T9955] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcfc636e1ff [ 168.811625][ T9955] RDX: 0000000000000001 RSI: 00007fcfc4dcf0a0 RDI: 0000000000000004 [ 168.811638][ T9955] RBP: 00007fcfc4dcf090 R08: 0000000000000000 R09: 0000000000000014 [ 168.811651][ T9955] R10: 000000002004c8d5 R11: 0000000000000293 R12: 0000000000000001 [ 168.811663][ T9955] R13: 00007fcfc65c6038 R14: 00007fcfc65c5fa0 R15: 00007ffd2ffac418 [ 168.811681][ T9955] [ 168.982552][ T29] kauditd_printk_skb: 540 callbacks suppressed [ 168.982567][ T29] audit: type=1326 audit(2000000108.520:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 168.984101][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.992486][ T29] audit: type=1326 audit(2000000108.520:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.108452][ T29] audit: type=1326 audit(2000000108.560:17314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.118008][ T9962] net_ratelimit: 10 callbacks suppressed [ 169.118025][ T9962] netlink: zone id is out of range [ 169.132192][ T29] audit: type=1326 audit(2000000108.560:17315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.137734][ T9962] netlink: zone id is out of range [ 169.143037][ T29] audit: type=1326 audit(2000000108.580:17316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.196527][ T29] audit: type=1326 audit(2000000108.580:17317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.220115][ T29] audit: type=1326 audit(2000000108.580:17318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.223211][ T9962] netlink: zone id is out of range [ 169.243607][ T29] audit: type=1326 audit(2000000108.580:17319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.243647][ T29] audit: type=1326 audit(2000000108.580:17320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.296024][ T29] audit: type=1326 audit(2000000108.580:17321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9953 comm="syz.7.1984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33241bf749 code=0x7ffc0000 [ 169.310508][ T9962] netlink: zone id is out of range [ 169.324750][ T9962] netlink: zone id is out of range [ 169.329982][ T9962] netlink: zone id is out of range [ 169.335222][ T9962] netlink: zone id is out of range [ 169.340340][ T9962] netlink: zone id is out of range [ 169.345756][ T9962] netlink: zone id is out of range [ 169.350855][ T9962] netlink: zone id is out of range [ 169.371034][ T31] bridge_slave_0: left allmulticast mode [ 169.376818][ T31] bridge_slave_0: left promiscuous mode [ 169.382500][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.382565][ T9968] loop4: detected capacity change from 0 to 1024 [ 169.440739][ T9968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.462637][ T9962] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 169.479676][ T9962] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.492275][ T9962] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.492275][ T9962] [ 169.502165][ T9962] EXT4-fs (loop4): Total free blocks count 0 [ 169.508144][ T9962] EXT4-fs (loop4): Free/Dirty block details [ 169.514201][ T9962] EXT4-fs (loop4): free_blocks=20480 [ 169.519530][ T9962] EXT4-fs (loop4): dirty_blocks=80 [ 169.524727][ T9962] EXT4-fs (loop4): Block reservation details [ 169.530703][ T9962] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 169.553064][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.562720][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.573553][ T31] bond0 (unregistering): Released all slaves [ 169.582871][ T31] bond1 (unregistering): Released all slaves [ 169.601601][ T9973] hsr_slave_0: left promiscuous mode [ 169.609021][ T9973] hsr_slave_1: left promiscuous mode [ 169.666935][ T9980] 9pnet_fd: Insufficient options for proto=fd [ 169.704421][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 169.736942][ T31] hsr_slave_0: left promiscuous mode [ 169.753887][ T31] hsr_slave_1: left promiscuous mode [ 169.759813][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.767454][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.782747][ T31] veth1_macvtap: left promiscuous mode [ 169.788328][ T31] veth0_macvtap: left promiscuous mode [ 169.794119][ T31] veth1_vlan: left promiscuous mode [ 169.799540][ T31] veth0_vlan: left promiscuous mode [ 169.863937][ T31] team0 (unregistering): Port device team_slave_1 removed [ 169.874194][ T31] team0 (unregistering): Port device team_slave_0 removed [ 169.922103][ T9939] chnl_net:caif_netlink_parms(): no params data found [ 169.956417][T10006] 9pnet_fd: Insufficient options for proto=fd [ 169.974874][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.981984][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.989289][ T9939] bridge_slave_0: entered allmulticast mode [ 169.995981][ T9939] bridge_slave_0: entered promiscuous mode [ 170.003593][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.010660][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.017915][ T9939] bridge_slave_1: entered allmulticast mode [ 170.024580][ T9939] bridge_slave_1: entered promiscuous mode [ 170.053923][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.065082][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.085542][ T9939] team0: Port device team_slave_0 added [ 170.092599][ T9939] team0: Port device team_slave_1 added [ 170.109571][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.116573][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.142610][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.154064][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.161036][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.186954][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.214221][ T9939] hsr_slave_0: entered promiscuous mode [ 170.220276][ T9939] hsr_slave_1: entered promiscuous mode [ 170.226233][ T9939] debugfs: 'hsr0' already exists in 'hsr' [ 170.231979][ T9939] Cannot create hsr debugfs directory [ 170.308057][ T9939] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 170.318489][ T9939] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 170.327641][ T9939] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 170.336964][ T9939] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 170.357028][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.364148][ T9939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.371424][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.378486][ T9939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.410150][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.424980][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.432821][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.443914][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.454252][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.461494][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.474464][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.481609][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.534605][T10053] __nla_validate_parse: 9 callbacks suppressed [ 170.534714][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1993'. [ 170.592345][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.621747][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1996'. [ 170.636943][T10071] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1995'. [ 170.652727][T10071] veth3: entered allmulticast mode [ 170.753174][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1998'. [ 170.762231][T10090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1998'. [ 170.771295][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1998'. [ 170.780541][T10090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1998'. [ 170.853327][ T9939] veth0_vlan: entered promiscuous mode [ 170.875308][ T9939] veth1_vlan: entered promiscuous mode [ 170.883763][T10100] loop4: detected capacity change from 0 to 2048 [ 170.897973][ T9939] veth0_macvtap: entered promiscuous mode [ 170.910096][ T9939] veth1_macvtap: entered promiscuous mode [ 170.935328][T10105] tipc: Enabling of bearer rejected, failed to enable media [ 170.947511][T10100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.980897][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.000392][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.028077][T10100] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 171.048238][ T8128] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.061628][T10100] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 171.074195][T10100] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.074195][T10100] [ 171.084135][T10100] EXT4-fs (loop4): Total free blocks count 0 [ 171.090130][T10100] EXT4-fs (loop4): Free/Dirty block details [ 171.096054][T10100] EXT4-fs (loop4): free_blocks=4096 [ 171.101290][T10100] EXT4-fs (loop4): dirty_blocks=512 [ 171.106573][T10100] EXT4-fs (loop4): Block reservation details [ 171.112590][T10100] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 171.140849][ T8128] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.153173][T10097] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 171.170738][ T8128] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.184856][T10119] tipc: Enabling of bearer rejected, failed to enable media [ 171.198749][ T8128] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.248400][T10126] loop7: detected capacity change from 0 to 512 [ 171.301590][T10126] EXT4-fs: Ignoring removed i_version option [ 171.307641][T10126] EXT4-fs: Ignoring removed bh option [ 171.344197][T10126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.373564][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2011'. [ 171.403833][T10126] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.512624][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.533974][T10153] loop4: detected capacity change from 0 to 256 [ 171.560967][T10153] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.599938][T10159] tipc: Enabling of bearer rejected, failed to enable media [ 171.643109][T10161] loop7: detected capacity change from 0 to 2048 [ 171.678821][T10161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.714412][T10161] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 171.729588][T10161] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 171.742102][T10161] EXT4-fs (loop7): This should not happen!! Data will be lost [ 171.742102][T10161] [ 171.751777][T10161] EXT4-fs (loop7): Total free blocks count 0 [ 171.757881][T10161] EXT4-fs (loop7): Free/Dirty block details [ 171.763845][T10161] EXT4-fs (loop7): free_blocks=4096 [ 171.769047][T10161] EXT4-fs (loop7): dirty_blocks=512 [ 171.774266][T10161] EXT4-fs (loop7): Block reservation details [ 171.780237][T10161] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 171.803567][T10160] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 171.837316][T10171] syz2: rxe_newlink: already configured on lo [ 171.847693][T10171] netlink: 'syz.4.2023': attribute type 4 has an invalid length. [ 171.862440][ T3381] lo speed is unknown, defaulting to 1000 [ 171.868190][ T3381] syz2: Port: 1 Link DOWN [ 171.874170][T10165] lo speed is unknown, defaulting to 1000 [ 171.880319][T10171] netlink: 'syz.4.2023': attribute type 4 has an invalid length. [ 171.891813][ T3381] lo speed is unknown, defaulting to 1000 [ 171.897578][ T3381] syz2: Port: 1 Link ACTIVE [ 171.916824][ T3379] lo speed is unknown, defaulting to 1000 [ 171.922712][T10171] loop4: detected capacity change from 0 to 512 [ 171.929561][T10171] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 171.965544][T10171] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2023: bad orphan inode 131083 [ 171.980712][T10171] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.987695][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2026'. [ 172.020211][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.061539][T10180] FAULT_INJECTION: forcing a failure. [ 172.061539][T10180] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 172.074947][T10180] CPU: 0 UID: 0 PID: 10180 Comm: syz.4.2027 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.074995][T10180] Tainted: [W]=WARN [ 172.075001][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.075014][T10180] Call Trace: [ 172.075020][T10180] [ 172.075027][T10180] __dump_stack+0x1d/0x30 [ 172.075073][T10180] dump_stack_lvl+0xe8/0x140 [ 172.075096][T10180] dump_stack+0x15/0x1b [ 172.075167][T10180] should_fail_ex+0x265/0x280 [ 172.075245][T10180] should_fail_alloc_page+0xf2/0x100 [ 172.075274][T10180] __alloc_frozen_pages_noprof+0xff/0x360 [ 172.075312][T10180] alloc_pages_mpol+0xb3/0x260 [ 172.075384][T10180] alloc_pages_noprof+0x90/0x130 [ 172.075466][T10180] __pmd_alloc+0x47/0x420 [ 172.075488][T10180] handle_mm_fault+0x19d4/0x2be0 [ 172.075571][T10180] ? __rcu_read_unlock+0x4f/0x70 [ 172.075672][T10180] ? mt_find+0x21b/0x330 [ 172.075773][T10180] do_user_addr_fault+0x3fe/0x1080 [ 172.075798][T10180] ? __rcu_read_unlock+0x4f/0x70 [ 172.075842][T10180] exc_page_fault+0x62/0xa0 [ 172.075945][T10180] asm_exc_page_fault+0x26/0x30 [ 172.075967][T10180] RIP: 0010:__put_user_4+0xd/0x20 [ 172.075990][T10180] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 172.076009][T10180] RSP: 0018:ffffc9001017be78 EFLAGS: 00050206 [ 172.076026][T10180] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 172.076107][T10180] RDX: ffff88810333d280 RSI: 0000000000000005 RDI: 0000000000000000 [ 172.076118][T10180] RBP: 0000000000000004 R08: 0001ffff8684810f R09: 0000000000000000 [ 172.076129][T10180] R10: 000188811a9fb260 R11: 000188811a9fb267 R12: 0000200000000000 [ 172.076160][T10180] R13: 0000000000000000 R14: 0000000000000018 R15: 0000000000000000 [ 172.076180][T10180] __sys_socketpair+0xa6/0x430 [ 172.076209][T10180] ? ksys_write+0x192/0x1a0 [ 172.076231][T10180] __x64_sys_socketpair+0x52/0x60 [ 172.076320][T10180] x64_sys_call+0x2bf6/0x3000 [ 172.076340][T10180] do_syscall_64+0xd2/0x200 [ 172.076358][T10180] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.076386][T10180] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.076493][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.076514][T10180] RIP: 0033:0x7fcfc636f749 [ 172.076526][T10180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.076542][T10180] RSP: 002b:00007fcfc4dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 172.076558][T10180] RAX: ffffffffffffffda RBX: 00007fcfc65c5fa0 RCX: 00007fcfc636f749 [ 172.076570][T10180] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000018 [ 172.076667][T10180] RBP: 00007fcfc4dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 172.076680][T10180] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.076693][T10180] R13: 00007fcfc65c6038 R14: 00007fcfc65c5fa0 R15: 00007ffd2ffac418 [ 172.076719][T10180] [ 172.424887][T10185] loop7: detected capacity change from 0 to 256 [ 172.457056][T10185] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.477873][T10188] loop6: detected capacity change from 0 to 128 [ 172.496875][T10190] tipc: Enabling of bearer rejected, failed to enable media [ 172.572096][T10198] rdma_rxe: rxe_newlink: failed to add lo [ 172.588534][T10198] netlink: 'syz.0.2035': attribute type 4 has an invalid length. [ 172.611965][T10198] netlink: 'syz.0.2035': attribute type 4 has an invalid length. [ 172.697933][T10205] lo speed is unknown, defaulting to 1000 [ 172.709015][T10207] loop7: detected capacity change from 0 to 1024 [ 172.752606][T10207] EXT4-fs: Ignoring removed oldalloc option [ 172.820862][T10207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.840938][T10207] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.912380][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.048860][T10224] loop9: detected capacity change from 0 to 1024 [ 173.081669][T10224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.115870][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2044'. [ 173.134244][T10224] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 173.219195][T10228] lo speed is unknown, defaulting to 1000 [ 173.283161][ T9939] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 42: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.311387][ T9939] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 42: comm syz-executor: bad entry in directory: inode out of bounds - offset=10240, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.372003][ T9939] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 42: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.404002][ T9939] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 42: comm syz-executor: bad entry in directory: inode out of bounds - offset=10240, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.458268][ T9939] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 42: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.479881][ T9939] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 42: comm syz-executor: bad entry in directory: inode out of bounds - offset=10240, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.499568][ T9939] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 42: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.499806][ T9939] EXT4-fs error (device loop9): ext4_empty_dir:3120: inode #11: block 42: comm syz-executor: bad entry in directory: inode out of bounds - offset=10240, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.500099][ T9939] EXT4-fs error (device loop9): ext4_readdir:264: inode #11: block 42: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2755, rec_len=1024, size=1024 fake=0 [ 173.699285][T10221] syz.7.2041 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 173.710330][T10221] CPU: 1 UID: 0 PID: 10221 Comm: syz.7.2041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 173.710378][T10221] Tainted: [W]=WARN [ 173.710385][T10221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.710397][T10221] Call Trace: [ 173.710402][T10221] [ 173.710408][T10221] __dump_stack+0x1d/0x30 [ 173.710429][T10221] dump_stack_lvl+0xe8/0x140 [ 173.710519][T10221] dump_stack+0x15/0x1b [ 173.710539][T10221] dump_header+0x81/0x220 [ 173.710558][T10221] oom_kill_process+0x342/0x400 [ 173.710592][T10221] out_of_memory+0x979/0xb80 [ 173.710682][T10221] try_charge_memcg+0x610/0xa10 [ 173.710712][T10221] charge_memcg+0x51/0xc0 [ 173.710769][T10221] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 173.710815][T10221] __read_swap_cache_async+0x17b/0x2d0 [ 173.710917][T10221] swap_cluster_readahead+0x262/0x3c0 [ 173.710945][T10221] swapin_readahead+0xde/0x800 [ 173.710968][T10221] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 173.711003][T10221] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 173.711075][T10221] ? __rcu_read_unlock+0x4f/0x70 [ 173.711103][T10221] ? swap_cache_get_folio+0x277/0x280 [ 173.711155][T10221] do_swap_page+0x2ae/0x2370 [ 173.711181][T10221] ? css_rstat_updated+0xb7/0x240 [ 173.711201][T10221] ? __pfx_default_wake_function+0x10/0x10 [ 173.711232][T10221] handle_mm_fault+0x9a5/0x2be0 [ 173.711262][T10221] ? vma_start_read+0x141/0x1f0 [ 173.711435][T10221] do_user_addr_fault+0x630/0x1080 [ 173.711462][T10221] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 173.711494][T10221] exc_page_fault+0x62/0xa0 [ 173.711597][T10221] asm_exc_page_fault+0x26/0x30 [ 173.711619][T10221] RIP: 0033:0x7f33241bf6a6 [ 173.711636][T10221] Code: fb e8 9e 03 02 00 85 c0 b8 00 00 00 00 48 0f 45 d8 48 89 d8 5b c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 173.711655][T10221] RSP: 002b:00007ffd7df0ba10 EFLAGS: 00010246 [ 173.711672][T10221] RAX: 000000000002a656 RBX: 00007f3324415fa0 RCX: 000000000002a3c8 [ 173.711753][T10221] RDX: 000000000000028e RSI: 0000000000000000 RDI: 00000000000003e8 [ 173.711766][T10221] RBP: 00007f3324417da0 R08: 0000000027016dda R09: 7fffffffffffffff [ 173.711781][T10221] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000002a6c2 [ 173.711793][T10221] R13: 00007f3324416090 R14: ffffffffffffffff R15: 00007ffd7df0bb50 [ 173.711811][T10221] [ 173.940437][T10221] memory: usage 307200kB, limit 307200kB, failcnt 220 [ 173.947435][T10221] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 173.955461][T10221] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 173.962953][T10221] Memory cgroup stats for /syz7: [ 173.963427][T10221] cache 0 [ 173.971302][T10221] rss 0 [ 173.974232][T10221] shmem 0 [ 173.977165][T10221] mapped_file 0 [ 173.980675][T10221] dirty 0 [ 173.983632][T10221] writeback 4096 [ 173.984283][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 173.984295][ T29] audit: type=1326 audit(2000000113.540:17930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc636f749 code=0x7ffc0000 [ 173.987165][T10221] workingset_refault_anon 7 [ 173.996195][ T29] audit: type=1326 audit(2000000113.550:17931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc636f749 code=0x7ffc0000 [ 174.016856][T10221] workingset_refault_file 0 [ 174.021848][T10235] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 174.044899][T10221] swap 188416 [ 174.044909][T10221] swapcached 12288 [ 174.044916][T10221] pgpgin 36824 [ 174.044924][T10221] pgpgout 36820 [ 174.044930][T10221] pgfault 20996 [ 174.044937][T10221] pgmajfault 5 [ 174.044944][T10221] inactive_anon 4096 [ 174.044951][T10221] active_anon 8192 [ 174.049431][T10235] audit: out of memory in audit_log_start [ 174.057140][T10221] inactive_file 0 [ 174.057149][T10221] active_file 4096 [ 174.064404][ T29] audit: type=1326 audit(2000000113.580:17932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc636f749 code=0x7ffc0000 [ 174.064433][ T29] audit: type=1326 audit(2000000113.580:17933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcfc636df90 code=0x7ffc0000 [ 174.064519][ T29] audit: type=1326 audit(2000000113.580:17934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcfc636e1ff code=0x7ffc0000 [ 174.067908][T10221] unevictable 0 [ 174.071937][ T29] audit: type=1326 audit(2000000113.630:17935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc636f749 code=0x7ffc0000 [ 174.074877][T10221] hierarchical_memory_limit 314572800 [ 174.078431][ T29] audit: type=1326 audit(2000000113.630:17936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 174.082136][T10221] hierarchical_memsw_limit 9223372036854771712 [ 174.082146][T10221] total_cache 0 [ 174.082151][T10221] total_rss 0 [ 174.086284][ T29] audit: type=1326 audit(2000000113.640:17937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10234 comm="syz.4.2046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcfc63a2005 code=0x7ffc0000 [ 174.091565][T10221] total_shmem 0 [ 174.091573][T10221] total_mapped_file 0 [ 174.091580][T10221] total_dirty 0 [ 174.091586][T10221] total_writeback 4096 [ 174.091592][T10221] total_workingset_refault_anon 7 [ 174.091601][T10221] total_workingset_refault_file 0 [ 174.274983][T10241] loop4: detected capacity change from 0 to 128 [ 174.277039][T10221] total_swap 188416 [ 174.277077][T10221] total_swapcached 12288 [ 174.293791][T10241] /dev/loop4: Can't open blockdev [ 174.297203][T10221] total_pgpgin 36824 [ 174.297214][T10221] total_pgpgout 36820 [ 174.297222][T10221] total_pgfault 20996 [ 174.297229][T10221] total_pgmajfault 5 [ 174.322425][T10221] total_inactive_anon 4096 [ 174.326850][T10221] total_active_anon 8192 [ 174.331115][T10221] total_inactive_file 0 [ 174.335271][T10221] total_active_file 4096 [ 174.339494][T10221] total_unevictable 0 [ 174.343496][T10221] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2041,pid=10221,uid=0 [ 174.358221][T10221] Memory cgroup out of memory: Killed process 10221 (syz.7.2041) total-vm:93968kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 174.555495][T10246] netlink: 'syz.7.2051': attribute type 4 has an invalid length. [ 174.576632][T10246] .`: renamed from bond0 (while UP) [ 174.645371][T10246] netlink: 'syz.7.2051': attribute type 13 has an invalid length. [ 174.821927][T10246] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.824578][T10211] net_ratelimit: 2 callbacks suppressed [ 174.824591][T10211] Set syz1 is full, maxelem 65536 reached [ 174.829215][T10246] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.854339][T10264] random: crng reseeded on system resumption [ 174.887673][T10246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.898596][T10246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.946724][T10262] gre1: entered promiscuous mode [ 174.957442][T10266] tipc: Enabling of bearer rejected, failed to enable media [ 174.969863][ T8128] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.991232][ T8128] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.000186][ T8128] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.021183][ T8128] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.038050][T10263] infiniband syz0: set active [ 175.042958][T10263] infiniband syz0: added bond0 [ 175.049571][T10274] netlink: 'syz.6.2058': attribute type 1 has an invalid length. [ 175.071843][T10263] RDS/IB: syz0: added [ 175.078679][T10263] smc: adding ib device syz0 with port count 1 [ 175.078764][T10279] loop7: detected capacity change from 0 to 1024 [ 175.094760][T10263] smc: ib device syz0 port 1 has no pnetid [ 175.100216][T10274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.113345][T10274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.127193][T10279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.135318][T10279] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 175.143649][T10279] System zones: 0-1, 3-36 [ 175.149222][T10279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.197588][T10279] Falling back ldisc for ttyS3. [ 175.207023][T10279] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.2059: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 175.236035][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.289239][T10288] loop7: detected capacity change from 0 to 128 [ 175.305513][T10288] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.341517][T10290] tipc: Enabling of bearer rejected, failed to enable media [ 175.351582][T10288] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 175.376473][T10292] loop6: detected capacity change from 0 to 256 [ 175.384447][T10292] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.459103][T10293] lo speed is unknown, defaulting to 1000 [ 175.549590][T10296] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 175.549590][T10296] program syz.6.2064 not setting count and/or reply_len properly [ 175.622126][T10300] loop6: detected capacity change from 0 to 8192 [ 175.626552][ T9939] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.642220][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.672071][ T3303] loop6: p1 p2 p3 p4 [ 175.682926][ T3303] loop6: p3 start 331777 is beyond EOD, truncated [ 175.689384][ T3303] loop6: p4 size 262144 extends beyond EOD, truncated [ 175.697129][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.707616][T10300] ================================================================== [ 175.715785][T10300] BUG: KCSAN: data-race in __filemap_add_folio / invalidate_bdev [ 175.723512][T10300] [ 175.725839][T10300] read-write to 0xffff888100483138 of 8 bytes by task 3303 on cpu 0: [ 175.733908][T10300] __filemap_add_folio+0x5b9/0x7d0 [ 175.739108][T10300] filemap_add_folio+0x1d9/0x360 [ 175.744039][T10300] page_cache_ra_unbounded+0x203/0x450 [ 175.749497][T10300] page_cache_sync_ra+0x26e/0x6a0 [ 175.754513][T10300] filemap_get_pages+0x2d0/0x11b0 [ 175.759537][T10300] filemap_read+0x231/0xa00 [ 175.764038][T10300] blkdev_read_iter+0x22d/0x2e0 [ 175.768879][T10300] vfs_read+0x64c/0x770 [ 175.773021][T10300] ksys_read+0xda/0x1a0 [ 175.777164][T10300] __x64_sys_read+0x40/0x50 [ 175.781695][T10300] x64_sys_call+0x27c0/0x3000 [ 175.786379][T10300] do_syscall_64+0xd2/0x200 [ 175.790876][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.796761][T10300] [ 175.799068][T10300] read to 0xffff888100483138 of 8 bytes by task 10300 on cpu 1: [ 175.806680][T10300] invalidate_bdev+0x25/0x70 [ 175.811255][T10300] bdev_disk_changed+0xeb/0xcb0 [ 175.816106][T10300] loop_set_status+0x5d2/0x6a0 [ 175.820873][T10300] lo_ioctl+0x671/0x12b0 [ 175.825104][T10300] blkdev_ioctl+0x356/0x440 [ 175.829596][T10300] __se_sys_ioctl+0xce/0x140 [ 175.834171][T10300] __x64_sys_ioctl+0x43/0x50 [ 175.838747][T10300] x64_sys_call+0x1816/0x3000 [ 175.843418][T10300] do_syscall_64+0xd2/0x200 [ 175.847908][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.853791][T10300] [ 175.856096][T10300] value changed: 0x000000000000000d -> 0x000000000000000e [ 175.863272][T10300] [ 175.865582][T10300] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 175.871713][T10300] CPU: 1 UID: 0 PID: 10300 Comm: syz.6.2066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.883086][T10300] Tainted: [W]=WARN [ 175.886875][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.896915][T10300] ================================================================== [ 175.982985][T10311] __nla_validate_parse: 3 callbacks suppressed [ 175.983003][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 175.998115][T10311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2070'. [ 176.007079][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2070'. [ 176.016129][T10311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2070'. [ 176.031372][ T8128] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.040671][T10300] loop6: p1 p2 p3 p4 [ 176.046242][T10300] loop6: p3 start 331777 is beyond EOD, truncated [ 176.052874][T10300] loop6: p4 size 262144 extends beyond EOD, truncated [ 176.063597][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.136114][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.240380][ T12] bridge_slave_1: left allmulticast mode [ 176.246085][ T12] bridge_slave_1: left promiscuous mode [ 176.251810][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.259523][ T12] bridge_slave_0: left allmulticast mode [ 176.265202][ T12] bridge_slave_0: left promiscuous mode [ 176.270869][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.343267][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.353971][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.363485][ T12] bond0 (unregistering): Released all slaves [ 176.489871][ T12] hsr_slave_0: left promiscuous mode [ 176.497647][ T12] hsr_slave_1: left promiscuous mode [ 176.503695][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.511069][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.518693][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.526202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.537447][ T12] veth1_macvtap: left promiscuous mode [ 176.544189][ T12] veth0_macvtap: left promiscuous mode [ 176.549700][ T12] veth1_vlan: left promiscuous mode [ 176.555260][ T12] veth0_vlan: left promiscuous mode [ 176.612212][ T12] team0 (unregistering): Port device team_slave_1 removed [ 176.621334][ T12] team0 (unregistering): Port device team_slave_0 removed [ 177.191278][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.245227][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.293724][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.334991][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.406196][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.463744][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.513747][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.553932][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.638993][ T12] gretap0: left allmulticast mode [ 177.644197][ T12] gretap0: left promiscuous mode [ 177.649212][ T12] bridge0: port 3(gretap0) entered disabled state [ 177.656435][ T12] bridge_slave_1: left allmulticast mode [ 177.662097][ T12] bridge_slave_1: left promiscuous mode [ 177.667779][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.676415][ T12] bridge_slave_0: left promiscuous mode [ 177.682156][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.690496][ T12] gretap0: left allmulticast mode [ 177.695546][ T12] gretap0: left promiscuous mode [ 177.700612][ T12] bridge0: port 3(gretap0) entered disabled state [ 177.707602][ T12] bridge_slave_1: left allmulticast mode [ 177.713259][ T12] bridge_slave_1: left promiscuous mode [ 177.718873][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.726834][ T12] bridge_slave_0: left allmulticast mode [ 177.732567][ T12] bridge_slave_0: left promiscuous mode [ 177.738188][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.746368][ T12] gretap0: left allmulticast mode [ 177.751450][ T12] gretap0: left promiscuous mode [ 177.756581][ T12] bridge0: port 3(gretap0) entered disabled state [ 177.763798][ T12] bridge_slave_1: left allmulticast mode [ 177.769513][ T12] bridge_slave_1: left promiscuous mode [ 177.775282][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.783579][ T12] bridge_slave_0: left allmulticast mode [ 177.789213][ T12] bridge_slave_0: left promiscuous mode [ 177.794850][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.848015][ T12] team0: Port device geneve1 removed [ 177.932846][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.942400][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.951516][ T12] bond0 (unregistering): Released all slaves [ 177.972552][ T12] team0: Port device geneve1 removed [ 178.023785][ T8128] smc: removing ib device syz0 [ 178.028860][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.038603][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.048102][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 178.057055][ T12] bond0 (unregistering): Released all slaves [ 178.103754][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.113573][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.122815][ T12] bond0 (unregistering): Released all slaves [ 178.405127][ T12] hsr_slave_0: left promiscuous mode [ 178.410807][ T12] hsr_slave_1: left promiscuous mode [ 178.416340][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.426698][ T12] hsr_slave_0: left promiscuous mode [ 178.432406][ T12] hsr_slave_1: left promiscuous mode [ 178.437994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.446083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.455196][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.462616][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.473713][ T12] veth1_macvtap: left promiscuous mode [ 178.479205][ T12] veth0_macvtap: left promiscuous mode [ 178.484799][ T12] veth1_vlan: left promiscuous mode [ 178.490059][ T12] veth0_vlan: left promiscuous mode [ 178.495594][ T12] veth1_macvtap: left promiscuous mode [ 178.501123][ T12] veth0_macvtap: left promiscuous mode [ 178.506664][ T12] veth1_vlan: left promiscuous mode [ 178.512080][ T12] veth0_vlan: left promiscuous mode [ 178.586080][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.596434][ T12] team0 (unregistering): Port device team_slave_0 removed [ 178.620854][ T1735] smc: removing ib device syz2 [ 178.663167][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.673065][ T12] team0 (unregistering): Port device team_slave_0 removed [ 178.720483][ T12] team0 (unregistering): Port device team_slave_1 removed [ 178.729897][ T12] team0 (unregistering): Port device team_slave_0 removed [ 178.757947][ T36] lo speed is unknown, defaulting to 1000 [ 178.763761][ T36] syz2: Port: 1 Link DOWN [ 179.549483][ T12] bridge_slave_1: left allmulticast mode [ 179.555182][ T12] bridge_slave_1: left promiscuous mode [ 179.560816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.568623][ T12] bridge_slave_0: left allmulticast mode [ 179.574312][ T12] bridge_slave_0: left promiscuous mode [ 179.580041][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.623531][ T12] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.632331][ T12] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.640858][ T12] .` (unregistering): Released all slaves [ 179.700672][ T12] hsr_slave_0: left promiscuous mode [ 179.707828][ T12] hsr_slave_1: left promiscuous mode [ 179.713681][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.721748][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.756649][ T12] team0 (unregistering): Port device team_slave_1 removed [ 179.765948][ T12] team0 (unregistering): Port device team_slave_0 removed [ 179.773650][ T42] smc: removing ib device syz!