last executing test programs: 12m7.315550524s ago: executing program 32 (id=38): bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x6000000000000000) (async, rerun: 64) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) (async, rerun: 32) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4) (rerun: 32) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/184, 0xb8}, 0x9}, {{&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1, &(0x7f0000000380)=""/130, 0x82}, 0x1393938f}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x9295}], 0x3, 0x45833af92e4b399e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xffa1, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x7, 0x20, 0xfffff91b, 0x80000001, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x64, 0x0, 0x6, 0x2b, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x39}, {[@generic={0x88, 0x8, "6b25417e3094"}, @timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @timestamp={0x44, 0x14, 0xc1, 0x0, 0xf, [0x26ab0, 0x6, 0x6, 0xda]}]}}}}}) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000001400)={0x23, 0x20, 0xfc, 0x1}, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000100)={0xd, 0xa3, 0xffff, 0x9, 0x5}) (async, rerun: 64) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x200000ba, 0x41000ff7ff, 0xdc, 0x6d3}) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x1000}) (async) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x16084, 0x7fff, 0x9, 0x1, 0x8, 0x20205, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 10m15.989604059s ago: executing program 1 (id=1770): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10m15.91819547s ago: executing program 1 (id=1773): r0 = getpid() r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000380)={0x240001080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x25}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f0000000100)=""/237, &(0x7f00000002c0)=[r0], 0x1, {r1}}, 0x58) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f0000000240)='I', 0x1, 0x2004c841, &(0x7f0000000200)={0xa, 0x4e23, 0x808001, @loopback, 0xfffffffb}, 0x1c) 10m15.882747921s ago: executing program 1 (id=1774): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500400000002020207b1af8ff00000000bfa100000000000007010011f8ffffffb706000008000000b70300000300000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 10m14.806126522s ago: executing program 1 (id=1788): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) 10m14.805683772s ago: executing program 1 (id=1789): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x50}}, 0x20040054) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r4, 0x0, 0x0, 0xd36) 10m14.716013434s ago: executing program 1 (id=1790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x86) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 9m59.737378681s ago: executing program 33 (id=1790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x86) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 8m3.800032545s ago: executing program 6 (id=3465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x0, 0x10, 0x9, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x1, 0x0, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 8m3.772530495s ago: executing program 6 (id=3466): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRESHEX=r0, @ANYBLOB="000129bd7000fbdbdf25080000000800060008050000000000000000000009240000020002004e220000080008000800000014000100e000000200000000000000000000000008000400c8d00000060002004e210000"], 0x5c}}, 0x4008820) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000300)=0xffb, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000600)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0xa82, 0xff, 0x1, 0x7}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) process_mrelease(0xffffffffffffffff, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000900"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) 8m2.935681821s ago: executing program 6 (id=3486): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 8m2.850323763s ago: executing program 6 (id=3490): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="aeae18b68a7018d1123674fb767c784c742a2ddb5b827d47552ed953beba4a2ef4c85cbaf8bc9f2f4bf9c0696bbd21ac006e4ccf232772e7c4a45d014715e31d8575611c046a1c1c266d36a7f0f3ec547443cb940a4277922586a66091275122abd68b346a81abf731295caea7df2a6eec11763bcf523d89e87dfae36ce80c1f86f09c28dbd04feb8ef5571ecf1408b65a99dc8f1c02781533101ba5ec1d4dfc2f91d358ff7f26fa3bb78f552ca50dd87668c095e2bbfb4bd519608af5293078ea8151874d8e635cb65dcad87388b15dbfdeb075e806102a6cf9e55f2a8b70051dd4f24aaf1ce7cb2be24f4f58"], 0xa8}}, 0x20004011) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010101}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000380)=""/13, 0xd, 0x10741, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000000), 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x7, 0x4, 0xf, 0x5}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000003140)='./bus\x00', 0x1008002, &(0x7f00000002c0)={[{@grpquota}, {@auto_da_alloc}, {@resuid}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@nojournal_checksum}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = getpgrp(0x0) r9 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), 0x120030, 0x0) r10 = dup3(r4, r3, 0x0) kcmp(r8, r9, 0x0, r10, r5) 8m2.688025796s ago: executing program 6 (id=3493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8m2.398890702s ago: executing program 6 (id=3499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 8m2.373699842s ago: executing program 34 (id=3499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 5m51.034110561s ago: executing program 2 (id=5665): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) renameat2(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/bus\x00', 0x1) 5m50.995314281s ago: executing program 2 (id=5667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r1, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0x807, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 5m50.915530383s ago: executing program 2 (id=5669): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5m50.915076163s ago: executing program 2 (id=5670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x20000326, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010843000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000014002b80080003000300000008000100", @ANYRES32=r2, @ANYBLOB="064000000000ee00"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r3 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tmw'], 0xa) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"/364], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x301042, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@bh}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@nodelalloc}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 5m50.340081374s ago: executing program 2 (id=5682): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e74350190400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d", 0x2e) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7fffeffd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xa20, 0x8000c64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) 5m47.777509253s ago: executing program 2 (id=5705): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 5m47.701531514s ago: executing program 35 (id=5705): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 3m53.564543653s ago: executing program 7 (id=7472): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(r0, r1, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) io_uring_setup(0x6bbe, &(0x7f0000000240)={0x0, 0x1f59, 0x40, 0x800103fc, 0x3d, 0x0, r2}) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) timer_create(0x3, &(0x7f0000000b80)={0x0, 0x3e, 0x5, @thr={&(0x7f0000001480)="b297debfb6596848df96f3c7934e5f616ce620771903d3e3583a0a2be0c04819d3bc233caf131b6cc922ad995234688452e534713836cf7aa8d504d710c966d18509296f7b0a61557e93bd40622d304927ba63d7eda729d743e94d9cbe4798224641013aca616eddaf94fcce4d1d9e424f745254c47dfb2ed5aa47ca45ae0cbad5c70250eab3c2170eaebe8e6872b79e425f122dbddca1bb93a7ca2ec5fd56a5e6e7b83c4d7a85d9f3ea3631fdf7b606e98ebe527c6f17256aa19fab409335c401f190c366a84fda94a4b6d9ff376aa1af096dd74dcbe66f48b51d35b4ae6d7e6d701ca48cedd33150d00d45a6d0a7590a49717307231a6b7c735d1c5b58385938763edf51c52923155f49a10d1292f40551c44a7f6e964df2c9bddea3079947bc862a03eca7742b4bb7596d8884a2cf695e02d706e37427faa3b88a51600820adcc73ebd942f7e16cb88df5eecfc3bdf68113afa054e82bb1535e3f3fd848591b515007af944d8cbc3d1968b0fef56a8d31fca9b5cbafec46e6788028b7a23b5f4d38db6f66bff987e0ca407a3952a1540e718f73bd3e03de2a98fcf15f36bda98376113ef6ac844b63b04bb759bf134311ced65d1bfb39921584bef8fc7d3ae4614f3111751f94cd8699fcec88cf2bbac005933d02fcea10cb32f2fe301f7f63d0b937b3bd8c3b5cafe0619bf9dc1daf9f24f56785d7ab66dc1ca553ac3478bef960d617027d48b1b244f3ca49273dc84bd1d877d275aab8b200e3c70237ed3f30660d441b21eb6c1db1c8a57fb93b7ff86fc3b86e0558c2cc4f0e1b81ce2debb8b8dbbcf9690ea6cdf3efbec295040f817e0f40550c8a9ef8f77be575107555d440c908099cc8c1a41af18e9f39b5403bc86a0a8278a6c6c669fa29f818c926b06eacbdd138780ef380cbb5903cf52193bf70113ee068ce8bb8da0ae00ad7aa7e7eed9ad412bd969c6bfa2a22a85d780c5a64b967cef06d99ff6e934f7b0554454c9938cbf9aace8fe4d1db973fcdaf37b614af0da3f53f1451deaaf943a4f2bc11ef4600190b98ce599b65b6ce61de76fd7714557820e327dda55ef29ec30568dc716fed5fcb959d0d1a9d09b31e077d4cdd452e28e8e9505e8587000d282e580f3781c7ad094f6f8bff1a32a3e7f7ac07b3d82a8b6aa18953657713fe26ac9b9cfcb08ba05528d011f5dfc2dbd9775c2cc0fed765e58204e94f48f61bcd7b4e60d0d46a7822e9e89a048e776915c61a1ebf389f568e917f82bef827e6f63c6a3fb4117eaec45d2033f17fcbc881272987748f31f8321bc67ed12cbdb0e9c2957f99b309204d215c80a7aacd9e0158bd2d1e418200c411f5dcabd2737cc3aec91409f907f38a2d8701b06d88ba093751ef0264e7b8409147100c897ed29f1ae713257b6f072bd50955cb18fc9a98b3644c85ac8503f83631cb4bfa9b7477e555883c6dc0d9c383937295ff1d05e2d4d33f398d6b26f2e1195b06171a44987f56af5e5265c2f56e834d4b0d562bc7e934ec4d3a7eb1bed481618a2f39b107b7b0e3bb706465e71981eaef5f5430adc6d090038188370632457665a2133b99d3d83343c37b1f1698c6f8b3986f34e3194c27d8a34a1531d4e9cc6207c665a9462d2763db5a8ac3ab4247273db26366efab2df72317d67090ad2e4f734df9b33ae004436df9409fff0fb63c94c2c2c06b40a4c0eebf93bf4518d7661cba42f3d699873627dd4bc2682ce66a4a0c29bcff77331f8c71adba5197812aa98551e0b9a5fdacd39c5fc6331213c69dc573f432da5824645bd7d6b68ee45fab23d445163151e75abf439995a22bf66da3f9ec8440b941a33bb0475c830105e57b225a28216d77058616f581c5eb379d56e7f3cf366b5e6bf65a020abf62f74451fb1e84fb24334d548a498d2d1dc741fd9b907eb527f810e984480ef72749e1fd173616a24200f1e053cca4405f136f553142171fb57972eb630966f74c80b4a598633c2984a99f505464a060e8e694abad5c554ee0ff8d66c42b4dffa8be3a3bd810018ba7de82c36dff41a1a20e114e27701066a0031bd2dec3a4e85efe33af903e0fcc10792a66e17ca8e01c65de86d0080df558bfd57e6bdc41ebeadf92310265273e2b459d3a350bda858801f67106790a401a8cdecbcf7b8db2e33f834eaf3589b2730b2d84a9f83237358e2c49242c034450936a5a83548f714dfe6ae966a8b59849b24897c5dece5e336e8e9f8459ab1723d15ebec6a83c92d274b570f502dae25ce6cd7321300b5f8b7bf4dfe9ae82d180d1b8504cc07a59781862b57580e506f195b8eaad08dc818c2666e6dfec0a55dccf6c17d234e60046762db3edb199c67d08de34e1d28db3425ad6df6d81972876be28500f28e602ea171f45b3650d39095164f34edead38ee07126be99ee1928f2866baca9f44b70744214de8fa4943a9647f3be8778a9d9cf66d6793a98a36a4b3c43f97b6667442242b432f16363558341a6042171f89132891f597f11055364f5c74abc5b809d4fc4fef25405a0e8488861f6bce8b43ee7701460f1a762e7261cbc143ee100a9e51486f3dfac58a7a7870b51cec8075db980a93a5661fe9b7d624f55116755088dcf4e0803dffa8c3f76ebe84faba4f58703a296428dd3307c042a54ad8beefbe369ec82400e0d4b8da90fceae263a64fe6bb5ba2f9c09f4794d06931098bdd8771a18941080d77cce256820c54fad237e3cd15a6bde80424e9ff3837eb92efab86abd1fdf27dbc5bc313b29a9c5603c92c15bbd5311a3531193be93c5dd5d481cf042aa2004123928009ba876edfa4ca769a538fff1affbc1b4fe3444f6ed61d509c06cbcfd30fe0430418a437164e5ad6cfd9a084641734e59bde8c8f17c7484d646a06997db733b913c974ec675a17e64b766035a7fb12a05a64e210b7ea42212791841ee686a89cc7ac3debcf2d707cd819784bf01e4a50f6dc915ed76b556dca0df8cda44b2e551059012b9bfe517e4efa598a7e1935a2c33d3a12ac9e8fdcbee95eeeda503e3545eb9d7d10f37eeb80c3f527443067233514507953b1a4bacf220458910a52902c96480068bf4c151125e2ec1f31492ba01c2b49e7cc46ed53c31781a044eaf25d2169424b1d6a9f65957f80c3fd8d1413607315f5cf1b2ce18a3cbb370ccaea04e8f118df62fae8b6e416ac551df3fe98dbee6d6e251bf829880528c597079b5031b5d103b030f3300a8763f849ce089413418a3901667a1c823fadbe6d6898d9eabc39c805ce5bb94e08e72b0de09a73dd69b8a46e9f39333371a979515f91db43dc6cad54e1b089bb3b0f558b3a6cdc5f63a36011519cc00830ae80485264b039f4b0e8eb94e66361ff0922db9a8ac9bc1fb93470faa06d733bb39903a1bbc12e0cc5559b159122ce03d51c4db20af688daae87af45c75abdbebab2bfa8d7d85201d1ee2e49af4d7588234149e076857dadbd51f09b40f59163e295e228b8ea2517e6983f3d8116b8ebf5b4a7052c97a7f927320a5409688a9560547cd81e10fe42d6bc45b5d7878484fd5a7fa19b5335f17cf666d49c71f7ec242422004981a530e940a609e80dd046ed2dea8106d4871c47c1ae37dcc52efc051f530de1bb2faf988e032d7c36f2b35ae2ef87a4821547920d4ad5d3855b4e4a0bbd8ee954fa4c485d6ee53a8cc2338ba8366daf741f934a43caa57db6548b0f1e36ce3e84819779f2bbe82176608c94c5b52eed433dc90b783139f8516afa7dc15694ad543ea987144b564517cea9e3aeaba3fc20a33ec4af98bc3d22a7ecea5cc4e97ab73374a9dcf82b1de0d309aed9fc0f9fb46ab1d93c449c13bc46422c6e6f9ef1d086a949bca26fe93b4f1be1fbcb84ebf62437c484271cfc6a75a6c645f3dc4a1835240a1ab0f5d4cc5db1da90bba00d326177958860ff85f98cdc1508ac0fcd319c355a3b427ce5c154e40c556d4da065adee17b687935dab2551e63117dcde273dca68642b4e9d7245aec002ac6721412f44a567aa2f0f0672adeb66add98b8c732d27f408328cb89c08a467febc26c54368bb6e78670ec391ebf823b0d1bee029f196fb74bed5873eb78358ed3e6352c60bd07a583504a3b50d4b022e4e07d700769111468df2475a51258aa1f0088bbdf74df6b4848979897722340e3c7e40fc10ec18904846f95eb642769630c6d91ad7d5bb2d94ec25108189f72b61c0d9a81b99c4d02b0075bb4f640808fa68aef040ddb9b643dd5d7703b4e59d87461a02ea8d5f9ab83eca6e4ac213f7fdd2d3f2e4acb95f7750928b1763993993785f343266c4d10f4dfa81af1d5ee922944bde59864ad783717625367aee7e2637c57d938757f308a915971a068d364474852164fc72b835b62707a5023cdbca781f840600ea1d81b7938a70076a07482dc17ef0248dc8a4a383a5c02dc668473dccf52da861776175de097f19e2a4b6a646fd71b245325083038443d7d766cffa92015e99d3a7d46cf7570ff03a8ad2d01c1f9284dbe61a124e96a45de3188b4503d70554bbdbee114cac152059a2bdb19dd34753b7bd0efe9b846ed57844d5b5477093c990a44f0a4cb2a5473e2519a5fda2b493cbfdc97c6a703811ba9db64ea6577754290ffc5bab065ab2608899a8ea59c699251cd8dbe6b659a687fd72b406479bc0a4e57d58239b39f060a9d948e2100d6faa60e5cc943cae1d8dfddaf21bf4271529bac1bec19106324673691c5cfd4117af73ef721fbc5d60f969815caaaa2c7fad678d0213d9e235bedce8fdd996198e61eaa27a436fa078b479d579caf7d82c6609ae66f768b1159a1408adebba0de32ff5d50d9a30efb030bf83dee31065d6de93cfc3c8b14446833e871129d6a6c64402b7dbdea442759d14165e434a46868d0d72d2ae573a0c5c9f3f50896b9274cc22eab1a338a539d02a609ddb8f6a42c77593963c5208c6c3b7a8277b53410d22c5a9f2c05afda8758d2cf1a57434c5da58f011d6bc95c3b2aba5410b9da46e08ae9976e523298fc09c06d9a4fa45df2a6d62d13a9df9cf3db8c44bcedd1c57ee39d2a368a525301cc269b2f0feaad23fd5605b88e4a0b626876589e25cd1e0cc6d971e35c446eccfcdba841e468aa0b268b2b9e0697f7158f73c544e8e56e6df24b8208d2b3c7b6f525548310bfcde5f71389cfbf28cff61d60e2058237e2203ea7b248b2ee39f93c14cce2b7e4264d6389feaa5b5367ce775330800480dd78e1349f7ca6db480214eb6a6952fd791e3c5b94a664eacad7de542d8dd336fd44f32b1f6776e840174a4dd0b46b614f4ec2e97c9bb225188de86d1a69a4c41af7418f9971a7f2adf2d92b13a29d9ed15b5f731a04acf4b3833485d491137f90facf46a3ea77a1978dc3ef0a81911f1604af7bfe523fa4382317d4ea4adec4efc9c386cfd55a8727114126d0cbc62a7acfb3d441e550eec645636676755a49175cf0951cacbc1f55b53ddd60be05ab0faf0c9c943259076a6746876a4dde5e0b0bc8a4398703a10066ecaab429bea4ffbcb5d7cdcbcc71c9d24489a38593f7aa63e453dccd9a90f1afc3cc92a147f39a8ddc5a83cb692602a13fddda8cb6c96f1d7c6aabea7021630e668d2deb32cc8ba3f1c155dd0aca3735d0a4b903cafbd387b863ffdb907c66026525f0ccfb560d6defd98a95f28841f167d51c8c6539944e9c13b32faaad382486165b5b7ff221f4344dbc1495ec5ad1eb4a3da11cf9f31186cd310448c45e94d49a7a09458be861d1ec61996e28675181b8f7914ac86be8335a9631ec83413", &(0x7f0000000b40)="2933182e167230cfa8505d6f3628bc3ae95ffd70ca72a4300479"}}, &(0x7f0000000cc0)) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0x38, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000f00)='kfree\x00'}, 0x18) syz_usbip_server_init(0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}, {@timeout={'timeout', 0x3d, 0x3}}]}}) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x21081e, &(0x7f0000000b00)={[{@resgid}, {@nogrpid}, {@grpquota}, {@noquota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3m52.754724829s ago: executing program 7 (id=7487): r0 = epoll_create1(0x80000) write(r0, &(0x7f0000000340)="1d0636709816041d17427a621979820696a39d6c13189f4a4644e68feab3a542bf4b5086d9f5afbc117f7651183f9943eae0158bc8d101ddde228e9779d38bfa7b598494ec6115eb45a230f952a6fbcfb2b931751b625663127ea7fee667356b6ee0f016fe0270d4ea0c53a3e9be2d0c2bfb926bb570518dad8bc3ea75e676569bb5cd48e80438b59d778adbd03bd345653fcab2b5b440d6ec24c52df0ae70f41f189e003cae5a28a40a962927f24d4ae9e87d694f67411e03f8b40e762398912ab16bbd17c9b132600ddf989f5870502809f1ec7fc3e1021412cfa7e0856571abbf4223df710962c7397b1e", 0xec) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') pread64(r3, &(0x7f0000000080)=""/88, 0x58, 0x100) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) brk(0x400000ffc000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r3, 0x3, &(0x7f00000002c0)={{r6, r7+60000000}, {r8, r9+10000000}}, &(0x7f0000000300)) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 3m51.534999972s ago: executing program 7 (id=7492): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m51.167374209s ago: executing program 7 (id=7501): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x14, 0x4, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r2 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) r7 = syz_clone(0x1000200, &(0x7f0000000380)="de6a5911c9c334570d538ca1257bfb73d59718e0f4cc3910e4a7ff440e7b2d1b7d015e0873c016dd485e1a1be9e51443", 0x30, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="2409c21e76447508d2ccfce693639ebf0a94392065d097a4f2deea72728bbc062178c56419e94029a39175a1acc4305624e42448e6fbe02033e6761e73d7b50a357e4be8b7a6203af1b286f219dd98260f9f703fac0b01a8861378b40a4cc96c3a10bd9185485d5a965b0a8f813878dc67fdc60195b699d1ebf554c314f8838868f74b18d705ba052e6d014825a07c5a55a35f202f11280c4cb6e78f07de90ed0078cd941067c3afba0f43dc60ea82753a440eb87819d37e5b97e91ea25a9b99bd7d0d95c8f3") r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000ff1f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) sendmsg$nl_route(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@RTM_GETNSID={0x4c, 0x5a, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x200, {0x3}}}}]}, 0x78}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073587a310000000020000780050003001f0000000c00018008000140ffffffff08000840000000e405000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xc0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x13, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2008000) sched_rr_get_interval(0x0, 0x0) 3m50.941608333s ago: executing program 7 (id=7504): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x4}, 0x50) 3m50.671760248s ago: executing program 7 (id=7506): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m50.671425818s ago: executing program 36 (id=7506): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.191539058s ago: executing program 5 (id=8323): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) mbind(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000140)=0x4, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1000000000000}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x400, 0x20, 0x0) 3m2.124739269s ago: executing program 5 (id=8324): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 3m2.07745302s ago: executing program 5 (id=8325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 3m2.024210512s ago: executing program 5 (id=8328): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x11, 0x0, &(0x7f00000004c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='tcp_cong_state_set\x00', r1}, 0x18) rt_sigqueueinfo(0x0, 0x3b, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noload}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) write$binfmt_script(r2, &(0x7f0000001b40)={'#! ', './file1', [{0x20, 'sys_enter\x00'}, {0x20, 'lo\x00'}, {}], 0xa, "6fb2a1da342310052fb0d6a583a6a4745fa74f7e2833444309cab82c5e67fbea2a104fb3aeea7d5480d11fb60a0572a3dad624a6c8d891edde6eda238e866213056be44c6af031d02dc2ba65403045cea9dcf602b4ddfa2736f8570bc62e7d404d86346a9ca00d00a8b5d2206e5e9f82a14370f69173eca64cf6b565d3ca0d275589156b79287607c2f7fb6e9efa41c3acf66b2ab81cefe748d63065116288e06aca1212437d2470f008dbb5e2509ab6b64c90bb711c2e723155ebb8fdbe27d9d30ab1d4441da84ed54d1ef5b4876ea9ae97335ef16b6bad20723d04575a34a05ceadd92779a24097011bc2675e5491f32cfeab1a1f57d56dd1eea4de97d275c7cd8119b724f696efd2837fa69f16ac80a357ee915cfddb9bc873ec0a60477b951d2da84758138761a6fb489d44830a6276fe932f6e3f49b4ddef49dd2e3911ff6f6db57cf33ea7935ce0dff995e0b35eb561c932955239044bb55c1467e7c3f6fa8d93a6fbee2a9007ab9ba6bb200c2f5a1326f098a7df164f526ed8fdded860837af40d79ca3dffbd8174d21c1591a66eef779611c3f0e700c29388e52fba0de38f5af75bf25cf5c2a01d5090a9d82e9bd8692bff65da60d93b31a43538625cb61736ead0703ae7822fc55a78be2ffad9d2d7a3d6e4f783b6dfeb8114220e0cffbaf2c1ecd37d798a2bd2f5c9aa6ebcb7e8279ced6b1e10e2c7d0a8b2b7b0a6ccf8d75beb5945898dc4a0ac5d3991b3e1f05e73f2281f222c66bca3810fd9452d812e06243542f78464bb670530c9b5a2ea82c5af14f2828b4bb1f4482411520b2619f8b95f5cd23773bd487dd903c6aae7e0b2afdcadf2f867ea0c7c18a7be88d3051b63a5a53411a61d867ebf3dbe7be27026eb402eb73b8a71722669c2bd24555e15986dffdc383ac31f20181c85d2dde7718688a814ed6fba6d383d45e854a3a616a92ed6dd02a716a69d421a47cd53aa98c6fe65bc7b435c803864bea091e272233cdf7055be0b42179e3d528693b5804e19aae4fa42e88cf1fb4b23888c208a7a3b476116f37db9cb35306ccd63b2568490eb57faec907ce92e47a11b6dd90c5f6f347a1e9e9e1605a25e13256fd8bfe91ec28c5ad849447c9edad6c26f0f34a04e870563f40bc1f52a7b9ab2c8637034bcdf175a2b54ba210a4f4698637c01fc77ffbbf39e4da31048da273e40b64029508ebd2eb0ec52451af390c157b4af05a946bc7086680e792328995b16776462194f317da7fda08dddfa545aec2439d84a62b1d5b28427c5f520dc49abc784bc44e212cdcb8217e14842077be3885aeab03e1bf4f5bd59505dfb9c0b5a2de64b68e23312925ecb8e8e613914d5610aa686f19e6d6816ea17a0448418c3c8d30adb0bf5bfb82ce43ff666ade5f187b2fa1847aaa27bc7baa9179cf1827803c69c3e2c2e61d99706aefaef3e505ccea9b276edd11aaaf9e10d92f6764ce3c7050bc549955359d0325b3e14bad94ca6b3806959aa0e8a9d93bd2aced5b0a546b31b85460acc33ef9ce62728788a7dbb355d183a58a175fe5a73db790bfe809b08ff5786009ecb7ef655d80980f43718122b7296184ae36198af8ebca782c1b638912db878e8e7431b9f88fc7db6ec347d88976c46c5e26364b5ce97bff7356ef9e8fd3cf53d1174786ffa1672d77fb5c03e1ba1b45a3178ca95ba5c18b263d43afab75e31046cdfc9d568f5aa24ee6f4959e11e1644b8afe54a3dbc2fb4f74597e5f6a5b8d9f7d999108172f1b86e11ee7b78cae83dea7b3c044802ec70b3e9094982b05c88023634e2e66d7546361e1a6fcb15092118f03d93e11536fba4075770b0ecaa5c5df78a196251a7182f65ea31eb359f536e9bf7d098809b4e8edcf4cd2b5e43fce7179f8f085e5751d13fb0ee62e65d0e39fdaad21683f5ec3cd44fd63860353531e2e778cb7c8469c78cea7833d1a4af2cd174a8b3fb2ee0cce70130edfef0e08427de278a658f168206568728331c6cf4a938460b13bf362a5c793a67beb6622a9c847ef505202373475b71d8a930938ac484b14a1144c39dbfef10ccd8c0753683cde5895b1d607702d9e44173dec76c6b58ecfdf240b09c42c15299229bce42693db34482071bd9311dd258a87b6b5e2f9f9e315dbc9d7fe2de336d8b88a3b0025c84565f7ed0091ec3b9779eb552455b9682de8278df741c698341fe279b8fe47ebc052a2a0c6cbeadde624f4a0263481f2a5de66a7ae10260c54dd0e5577042cbee3736769cc641d71d14c5f0cfb4a1b0b71bf9e0cf55a7dbff1a81583695309c95b144e452aad686b6b4198ad03f12e08a7f31b97830cc98afc1d9350e7f6f3ca2bd6ec47b8780676a8a880d8b8e17e508f65016245d3511ebcd230f504c818f5f7e739e2cf16fa98164b0502c6075005fe80103a0be8c46b307e947fc02711a5cbacb158bdbafdb61a6d513a3d6df335c9230dddf26afa4079cba5cb60a77fad1e96bb93cf509db68cedfe87e21a71efc4af4894c7ad31a0b1f4de58cdfc68f89a4b4353c533020f9d511e5ca2c7a9816d06f01e2b444098b17b89312320f20ff8888a7573ebd664a915842d04b652ebc7834df2141f49494842b2941dc0c6890ad5f9ed89ccf7de980261edfc2bc5713e123b73a75cf8b59dd715df2f5e9849714913016ed7007970413b27126c2d47dbaf8409859f25747936e65e8d7b93c42dc2659e8de2b0e73e5512c939a673fc53358bd43488c4d92b8ce84f4931da6ed574db1f7640e2374d21a21495df753a5e3645fdb013135e1f199f5920f57fddbdc7c7adb3d99047a94ac8874dd8729de57e9bbe262dcd0b960a7c597dbb4f6cdb211475fd57d36cc4ab927416f32cdf5f598a1e3896e3443277542030aa61614017b180c83d644e2b44fe160416487d9aaf987c2ec4250edc295972c5dfa601161eddf88f58e285afee6700f8d9afc1ef1d94943aa00100f6d2d1685497918634e8f40b8526fc6fd4cff8677617b9aa9fe69fd1ebb7af2db7518c9cee22f30ad636003b049498902e882c3934e8c7c63199d70a42346f359952baf3255a58ee9a7d4f4ad46f7d0c996ed70d930e6e38a3946a13aeb4ee04c54dab89cd66645770ba9f573951f996268b98e399643c4c2d7380d179f300d3e062a40c689ea9d14eac7b70ab197f7f9fb8c6a24b4efd27d0d95e4aba7d648c643c9aaf7d40a29e74d1c654362da475b416e2343bfc0bdfd2dd8459494f768f3ff5a1973d2fe923c7993c5934332ff98f37791a2881b060e15052bc688ca994ccbfc3be3e16bc142a4c0755372b7a407c2d6497dfb814702523fccf6389995b5055bac8a87786cd58abb063e4d8568deef55ab483c58656367d7cbcb8b6c6ad64b228c664df1053f6e3396505eec64c7fd5ad2f6497a46011c7542b7f442c490bb8ba505a27f8bf4fbb0e4af61999184b1d80beaa77462071e76f64691eb9c54e4b03f5cd5997780e9d81f4dfa6928606263ba7b492d7a26aab2e46b43107966d3b6ac84232adae964175efa87a6d70141b8ab77995e68481d3b50010d08df9b58616531dde132bea3577eb2c6a65a3e27605d455f13df6d3ffa6fbdcfb07d0029c662c65166ae153adfcfa9a2b87c3b0e2093676b36947590d96ec6c47924e132f919a10a85f6e27a8fd0696f8d352df94461197b0b4a193c60a2e830437104af886e2522f25f0923999fa2736f65e07e2c9d0bbd457e626e2c9e8fac81c880442168b5fe527c66ee7fd44f91d05f2f262c82ddcac5daa028e5f67292afca276d948720e0a99ba7feebfe48461cadb3873b8b22909e9e8dce35049eaf7198feb1d85d4563cfe7a0865f3f48b668d8e9546b2790c8604375ead6e6cab8ed349d893c329caa79daed96be632db4cc1351f9a759fb109f9df476d4bb82417af06c3cf0faf12d1848001d01e8a708ddc26678c94aa618c17b6bf544925a01a6f2bf08d00d33aba48adb17257df4dd5912d5b9b800090a2639755d47e76ee9afe672655ef71d51f85b8f4d57d4105ebc63106d9d1dce90dd02f4785f3b784fb85388e7944c3513a4e2872591a415b287aec272d2cc2de5e0ef7cd1793e34a9dc53653a87907ffa4f71f7f623bfe1c29c2acc07e5d3e0d0f450817c1a466d1a3b1d1b1b521074399c187f609e49793a46a79d0da70272b227bbede7cbe226d1ebd1a31f33b612ab0d741948c4734214185078546d1099add9334f78421acab5114f240bd0d17581cdafa1a9712745b72db531f85c227c06e08ae752d9765770796cdeed9ead0c7aac8489b56b842d1bd30fa23438eb92758f1f568713588a82a532b726a816104f9042553404928cb32a175522b35b566125db358dfb90c10546cff69c664c3333e51f9d9cac326f05c0b1383b00d6807bca3068baad68d1292e47cb81d2defbafc39ba65bf711f22e99e67ae944e99b58f3022281954f63c62f97c898e5992d8483f62a4ca122d0ed16176195ddff0bb69ec512c154fa846ae77d5db51186de76c7e6db115c83b5fa5f59066f7c6b8b8f83a544d0137689bcab5b57256bdc25751120df77876e658647dc5fdfbc4f7358296fd245e7541fd3dca894a9bd130eec1a3021cf4c91bc9b043065509eae9c4b6c7dc887aff3b9e5815512d67f8d0325929879d35111bc741e3cf41a78c13dab093a52beb9fa339eb4d1c17a918e4f625d2fa5a5b66c0ee36b8e87225e48ee8083163d2c2adf5b79f7c79091555ff5d04c0361e3f119559d2898b99df6615cc2c1d99672582e73e9f62cee3925f1f3a8b3ca5d7a934471befb94c094cc88e7bd1b3f80faee5113a91148ff4af688953fd3ce29580f8a2ccce905518098ee9353be09536234000c80d3987cc08ceb40f4021e127aa5754930ddf7eafad2d017bb79cc5f2a4cd4c36e4dd840aaabb18f20621adae6842939116b7dde29f199b206648e0248b5bc1841e9bd16d7702c39c2da115605f5c916abfea8b08a8d9de3f33c9bbc3c05a9abe7b82f5bc76112e83853dbee66d1192e009d1e52c9d8f24f3ad1708035c587f3a845b14c27d08b6c3b1f22731721fc0e4bef2d262e8b2b2c1895aca7e7c0811120328f9a67f3c3dabc2034bfbe436086792f39cffcb3c156e65b23664b5a4889cefa0776483af2dc09575b8ef1f6754a56e998612714c87772b80a5160d31dd726e1a2cb78badcc8880f7063958d7b144db0766bb2a64ce9bb1b195c24f8c09f638cdfa1b7cccc1288735b95ffa4a305cd321bc37d970d670b347ad8bfd376ae77889989cdc9de8feb471018464c4ef35d44b8c18584470a7232949c6035f7ef68a92406b3b32f1e460c8edaa36b86a92e594b42e4d67bd2d897ece2bb007a23fe195c5dc2015c14bbea17bd08bfcba40b30be8ed832fc927bdda8bbf1ed5ad5d95be433ce960e77505ba0f807a43b1e4b749581086743e385aaf1685a6b41dfeaf483d6d3418a073658b77be4797d1c156097d03916900f3729f8bc6fa20d5607de42003f79c6e6f97ec506c76d16bc980bee21ef09789dd533aa1a38fc2a13ff28bb1302a5642ad4925db017ccd20132b578c519c1a96d5b9e4c9c8e74d8f50c155107c1029c1d25ce7cfd4d3e4e5dc80c367d9819199ee45209cdee2e288cfbfa2044e97f8aa61ad591e57c0455359a0c593e4646b19bab1ad81b06976fe814a63403b81e1986ee406becabfa52b4d87dfaa49f925672dc4f5ff10ea378177cb6c60bcfd0277fe4e6aa67883049baf1f6044730a229178e78394209dd8329e1d381693a89c22cf486b88f301b166"}, 0x101b) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0xd0f, 0x4, 0x4, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x20}]}}]}, 0x44}}, 0x40c0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) ioctl(r5, 0x71a, &(0x7f0000001480)="3d4bfaa0fefd446d0a04afd943c16260ecd245b554ab3a9feddce4644d711a6e6e8ee786966bd0e00b30f2558b2197bbed8f0c3e986e64f5a21697684a323d20b4005e1a8cfe434b0608df74e12ba4a4f93afa0952bb80adb3df819da3ab3f8e70368b14ab27def196e78006f1a669ef8e24d7d3ca22c8692a32cfed98b19a1b8e9871254d18f8bfdccb6cea814bf257424bb72a22979c3b5f16bc04bc6b4e64b596c04d9cbe8a0c149edb41fe2c2077ea1cf4e2a32dd6a4af3288b3c942933ea60b2a8acedd61792d8551bf89c378afad0824a0dcd552d67bcdf0b1994c6abaad") r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405c77acc6a899caeaa000000006110a0000000000063313800000000009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ptrace$ARCH_MAP_VDSO_64(0x1e, r7, 0x2, 0x2003) ptrace$getregset(0x4204, r7, 0x1, &(0x7f0000000240)={&(0x7f0000000480)=""/4096, 0x1000}) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'sys_enter\x00'}, {0x20, 'sys_enter\x00'}], 0xa, "41846cf125d16ea73fb603bff58950f8096a876c3e1098c8309f7ef3785166432c271de644edc5f7f1a7d7f67a29b12f6c"}, 0x52) 3m1.718298368s ago: executing program 5 (id=8336): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 3m1.413285163s ago: executing program 5 (id=8341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 3m1.413118243s ago: executing program 37 (id=8341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 4.241490599s ago: executing program 3 (id=10071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x10c000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 4.166448771s ago: executing program 3 (id=10073): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000", @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC=r0], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1808009, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@ignoreqv}], [], 0x6b}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) setsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) acct(&(0x7f0000000300)='./file0\x00') munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendfile(r8, r8, 0x0, 0x40000f63c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x400000, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) 3.227934398s ago: executing program 3 (id=10080): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1d, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000, 0x4}, 0x50) 3.16529185s ago: executing program 3 (id=10081): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r5}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @multicast1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) getsockopt$inet_tcp_buf(r3, 0x11e, 0x1f, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setuid(0x0) stat(0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x2000000, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x40000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 3.12379611s ago: executing program 3 (id=10082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x0, 0x5, 0x2) keyctl$session_to_parent(0x12) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x3, 0x4, 0x1000}, {0x0, 0x100}, {0x1, 0x4}, {0x4, 0x200}], 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x412c2400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.294423396s ago: executing program 3 (id=10088): socket$kcm(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.141334829s ago: executing program 0 (id=10089): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x185842) 2.06932293s ago: executing program 0 (id=10090): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0xa0000004}) 1.964914702s ago: executing program 0 (id=10091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007000000000000000000850000000700000045000000a000020095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (rerun: 64) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) (async) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x88001) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000100)=0x5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1.634942418s ago: executing program 0 (id=10095): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) 1.448684112s ago: executing program 8 (id=10096): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 1.408087643s ago: executing program 0 (id=10097): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f000c0000000200"/27], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r2, @ANYBLOB="2b323d01f5c31062f2e3419a639682bc40bc9704a500dc65d67b54d5ddb8dbda6b55e667552765c7316a49f000f0878b0d7f4a93d976e4bdc05ff0a3c56bda0af516bd5963fcfdbbeae38e3cdb853ca60694f858569d524c4d9a2ba8f532926e9d22ef44cac2676393ff4bfbe3629830694aba84fbd29392acdf38b2f75b44af49876629113e8504"], 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 1.347476184s ago: executing program 0 (id=10098): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f494246a77d86dd6700000100103afffe880000000000000000000000000201ff02000000000000000000000019000186009078ff02030005000000f6ffffff"], 0x0) write$selinux_user(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000010000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r5 = shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r5, 0x2, 0x0) r6 = geteuid() lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a801c0002800900020073797a32000000000900020073797a3000000000520001"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000000740)=[{&(0x7f0000000a00)=""/132, 0x84}], 0x1}, 0x80000000}, {{&(0x7f0000000b00)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000000980)=""/3, 0x3}, {&(0x7f0000000b80)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/17, 0x11}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/73, 0x49}, {&(0x7f0000001cc0)=""/17, 0x11}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/83, 0x53}], 0x8, &(0x7f0000002e00)=""/220, 0xdc}, 0xf}, {{&(0x7f0000002f00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f80)=""/33, 0x21}, {&(0x7f0000002fc0)}], 0x2}, 0x10001}], 0x3, 0x40000062, &(0x7f0000003100)={0x77359400}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000800)={0x0, 0x0}) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000880)={{0x1, r6, r7, 0x0, r8, 0x100, 0x5}, 0x62, 0x6, 0x2b, 0x0, 0xffffffffffffffff, r9, 0x3}) keyctl$KEYCTL_MOVE(0x4, r4, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES16=r11, @ANYBLOB="01002cbd700000dcdf251800000008000300", @ANYRES32=r12, @ANYBLOB="1c003080180001800c0005000000000000008003080001"], 0x38}}, 0x4000) 1.346807344s ago: executing program 8 (id=10099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd35}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) uname(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000000340)="9f3d1b992d9ae7d62329ca3dd3ac86cc54b62b550e384535c44ca2fa42cac998c6a86ef4369d123390618d6aec9c3aadc2504127f2f2e05fbc70ebaa33f180c5de47dccfd5d96f44db010856e1fe47753db8a2ee8a5eb921b281aef48d3bf681fc5c45b35817157316053864311848", 0x6f, r4}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x30d, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850) readv(r5, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/95, 0x5f}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbff, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x7}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) rename(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) 1.135769888s ago: executing program 9 (id=10101): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 1.109186268s ago: executing program 8 (id=10102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x800003, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000007000000000000e4000000f966bd346dfc3b009500000008000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@broadcast, 0x4e24, 0x5, 0x4e21, 0xc, 0x0, 0x20, 0x0, 0x2b}, {0xffffffffffffffff, 0x0, 0xfff, 0x0, 0xbe9f, 0x3, 0x9, 0x6}, {0x8, 0x3, 0x7}, 0x1, 0x6e6bb2, 0x0, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x2, 0x2, 0x9, 0x0, 0xd9c5}}, 0xe8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008001240050000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.096677808s ago: executing program 9 (id=10104): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 895.083132ms ago: executing program 4 (id=10105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f000c0000000200"/27], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r3, @ANYBLOB="2b323d01f5c31062f2e3419a639682bc40bc9704a500dc65d67b54d5ddb8dbda6b55e667552765c7316a49f000f0878b0d7f4a93d976e4bdc05ff0a3c56bda0af516bd5963fcfdbbeae38e3cdb853ca60694f858569d524c4d9a2ba8f532926e9d22ef44cac2676393ff4bfbe3629830694aba84fbd29392acdf38b2f75b44af49876629113e8504"], 0x28}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRES32=r4, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r2], &(0x7f0000000240)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r8, 0x0, 0x11, &(0x7f0000000540)="17000000020001004003be8c5e687a8a6a003200020100ecff3f00000003a96c6b06169da9c0f8d94d5bbb6a880a00243c5197b29f9368bdd6c8db933e7a2fdfff0a175e0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000003000000000000000080c457681f009cee4a0a003dff010000b7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfcc580000000000", 0xa8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 735.187555ms ago: executing program 4 (id=10106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000140), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 668.385706ms ago: executing program 4 (id=10107): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000017c0)={0x7fffffff, 0x2, 'client0\x00', 0x3, "6bc1444dfc6765c4", "e493cce62669f1e53411a5dd2175f2d8cbe40a7b470a9aa77184d0ed9f04957b", 0x8, 0x2}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x10f, &(0x7f0000000f00)=ANY=[], 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="040027bd7000fcdbdf250c00000070000380080005000a01010008000500ac1414aa060007004e220000060007004e24000014000600fe800000000000000000000000000043060007004e230009000000000000000014000200726f7365300000000000000000000000140002007465616d3000000000000000000000001400028008000600060000000800060000000000080004000700000008000400ff0000001800018014000300ac1414aa00000000000000000000000008000600ff7f0000"], 0xc8}, 0x1, 0x0, 0x0, 0x26000080}, 0x14000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000040)={0x81, 0x6}) 503.95195ms ago: executing program 4 (id=10108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9f000c0000000200"/27], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r2, @ANYBLOB="2b323d01f5c31062f2e3419a639682bc40bc9704a500dc65d67b54d5ddb8dbda6b55e667552765c7316a49f000f0878b0d7f4a93d976e4bdc05ff0a3c56bda0af516bd5963fcfdbbeae38e3cdb853ca60694f858569d524c4d9a2ba8f532926e9d22ef44cac2676393ff4bfbe3629830694aba84fbd29392acdf38b2f75b44af49876629113e8504"], 0x28}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES8=r3, @ANYRES32=r3, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 459.001931ms ago: executing program 4 (id=10109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x63, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000200)={0x0, 0x1, 0xb, 0x12, 0xf8, &(0x7f0000000a00)="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"}) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="2100000000000000000000000000000018120000660a85c7b9cccba28c2f85c2907f3ca3a08b279d8b5add5d4b5c25daa5457a933ee37fd0acbd073f3ada54e89a90595bc9cdc4b7101fb401876f17fa953ea65f0a23d0e088aa9f263da2baf1578a2c8ba430aa3254c36de120d140c341213340cf471808a72167ad3de6", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='cgroup\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) 458.458261ms ago: executing program 8 (id=10110): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 250.511524ms ago: executing program 4 (id=10111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000080)='\x00'/10, 0xfcf5, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 250.010514ms ago: executing program 8 (id=10112): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff0001000000000000b70300000000002085", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1900000004000000090000000200000044080000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB="0000000000000000fcffffff000000000000000000"], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRES8, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095497eac69e0bfbe1233aa99016b44c6ae1b27843adae7e09ea983787831f75c059e897c9bdfd2e3ea19c957fa6d0f4c21cb455300918c33256a3b2fdebbf3f434f8b8ca2654072eecc49cf0c50b53cffb237a1b193dc90a8b9573ded7a4d0a59629"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) splice(r4, &(0x7f0000000300)=0x2, r6, &(0x7f00000004c0)=0x8, 0xffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r11, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000080), &(0x7f00000000c0)=r10}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r11, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000000000070040001801000020756c250020ff00000000bfa100000010000007010000f8ffffffb70200"/69], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc2) 249.627644ms ago: executing program 8 (id=10113): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f494246a77d86dd6700000100103afffe880000000000000000000000000201ff02000000000000000000000019000186009078ff02030005000000f6ffffff"], 0x0) write$selinux_user(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000010000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) 231.746365ms ago: executing program 9 (id=10114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd35}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) uname(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002200000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x20040040) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000000340)="9f3d1b992d9ae7d62329ca3dd3ac86cc54b62b550e384535c44ca2fa42cac998c6a86ef4369d123390618d6aec9c3aadc2504127f2f2e05fbc70ebaa33f180c5de47dccfd5d96f44db010856e1fe47753db8a2ee8a5eb921b281aef48d3bf681fc5c45b35817157316053864311848", 0x6f, r4}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getmulticast={0x14, 0x3a, 0x30d, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850) readv(r5, &(0x7f00000013c0)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000280)=""/153, 0x99}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/95, 0x5f}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbff, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x7}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) rename(0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) 59.677438ms ago: executing program 9 (id=10115): unshare(0x10010d80) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 19.051849ms ago: executing program 9 (id=10116): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18) close(r0) 0s ago: executing program 9 (id=10117): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008e74350190400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0x2800, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d", 0x2e) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7fffeffd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0xa20, 0x8000c64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1}) kernel console output (not intermixed with test programs): em 00000000-0000-0000-0000-000000000000. [ 716.868972][T32561] loop4: p142 start 100859904 is beyond EOD, truncated [ 716.880003][T32561] loop4: p143 size 10695936 extends beyond EOD, truncated [ 716.890626][T32561] loop4: p144 start 100859904 is beyond EOD, truncated [ 716.897650][T32561] loop4: p145 size 10695936 extends beyond EOD, truncated [ 716.909770][T32561] loop4: p146 start 100859904 is beyond EOD, truncated [ 716.917134][T32561] loop4: p147 size 10695936 extends beyond EOD, truncated [ 716.936626][T32648] loop8: detected capacity change from 0 to 128 [ 716.945395][T32561] loop4: p148 start 100859904 is beyond EOD, truncated [ 716.953000][T32561] loop4: p149 size 10695936 extends beyond EOD, truncated [ 716.963840][T32651] FAULT_INJECTION: forcing a failure. [ 716.963840][T32651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.972522][T32648] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 716.977411][T32651] CPU: 1 UID: 0 PID: 32651 Comm: syz.9.9608 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 716.977458][T32651] Tainted: [W]=WARN [ 716.977467][T32651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 716.977485][T32651] Call Trace: [ 716.977501][T32651] [ 716.977514][T32651] __dump_stack+0x1d/0x30 [ 716.977544][T32651] dump_stack_lvl+0xe8/0x140 [ 716.977572][T32651] dump_stack+0x15/0x1b [ 716.977595][T32651] should_fail_ex+0x265/0x280 [ 716.977658][T32651] should_fail+0xb/0x20 [ 716.977686][T32651] should_fail_usercopy+0x1a/0x20 [ 716.977720][T32651] _copy_from_user+0x1c/0xb0 [ 716.977761][T32651] get_timespec64+0x4c/0x100 [ 716.977826][T32651] __se_sys_clock_nanosleep+0x10b/0x250 [ 716.977858][T32651] __x64_sys_clock_nanosleep+0x55/0x70 [ 716.977887][T32651] x64_sys_call+0x2731/0x3000 [ 716.977918][T32651] do_syscall_64+0xd2/0x200 [ 716.977991][T32651] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 716.978017][T32651] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 716.978130][T32651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.978169][T32651] RIP: 0033:0x7f4550c81785 [ 716.978192][T32651] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 716.978218][T32651] RSP: 002b:00007f454f6b6fa0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 716.978256][T32651] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4550c81785 [ 716.978274][T32651] RDX: 00007f454f6b6fe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 716.978292][T32651] RBP: 00007f454f6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 716.978366][T32651] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 716.978384][T32651] R13: 00007f4550ea6038 R14: 00007f4550ea5fa0 R15: 00007ffd80c906b8 [ 716.978409][T32651] [ 717.002575][T32561] loop4: p150 start 100859904 is beyond EOD, [ 717.020643][T32650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.022407][T32561] truncated [ 717.022417][T32561] loop4: p151 size 10695936 extends beyond EOD, [ 717.039822][T32648] ext4 filesystem being mounted at /247/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 717.041173][T32561] truncated [ 717.041701][T32561] loop4: p152 start 100859904 is beyond EOD, [ 717.062980][ T29] audit: type=1400 audit(1759479445.417:76532): avc: denied { mount } for pid=32646 comm="syz.3.9610" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 717.066049][T32561] truncated [ 717.078379][ T29] audit: type=1400 audit(1759479445.427:76533): avc: denied { create } for pid=32647 comm="syz.8.9611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 717.081171][T32561] loop4: p153 size 10695936 extends beyond EOD, truncated [ 717.099009][ T29] audit: type=1400 audit(1759479445.438:76534): avc: denied { bind } for pid=32647 comm="syz.8.9611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 717.100755][T32561] loop4: p154 start 100859904 is beyond EOD, truncated [ 717.100787][T32561] loop4: p155 size 10695936 extends beyond EOD, truncated [ 717.101568][T32561] loop4: p156 start 100859904 is beyond EOD, [ 717.105539][ T29] audit: type=1400 audit(1759479445.438:76535): avc: denied { connect } for pid=32647 comm="syz.8.9611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 717.125666][T32561] truncated [ 717.125676][T32561] loop4: p157 size 10695936 extends beyond EOD, truncated [ 717.126527][T32561] loop4: p158 start 100859904 is beyond EOD, truncated [ 717.379847][T32561] loop4: p159 size 10695936 extends beyond EOD, truncated [ 717.388223][T32561] loop4: p160 start 100859904 is beyond EOD, truncated [ 717.388710][T32648] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 717.395156][T32561] loop4: p161 size 10695936 extends beyond EOD, truncated [ 717.395734][T32561] loop4: p162 start 100859904 is beyond EOD, truncated [ 717.418815][T32561] loop4: p163 size 10695936 extends beyond EOD, truncated [ 717.426911][T32561] loop4: p164 start 100859904 is beyond EOD, truncated [ 717.434007][T32561] loop4: p165 size 10695936 extends beyond EOD, truncated [ 717.441805][T32561] loop4: p166 start 100859904 is beyond EOD, truncated [ 717.448811][T32561] loop4: p167 size 10695936 extends beyond EOD, truncated [ 717.457090][T32650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.468057][T32561] loop4: p168 start 100859904 is beyond EOD, truncated [ 717.475234][T32561] loop4: p169 size 10695936 extends beyond EOD, truncated [ 717.485215][T32561] loop4: p170 start 100859904 is beyond EOD, truncated [ 717.492318][T32561] loop4: p171 size 10695936 extends beyond EOD, truncated [ 717.500487][T32561] loop4: p172 start 100859904 is beyond EOD, truncated [ 717.507470][T32561] loop4: p173 size 10695936 extends beyond EOD, truncated [ 717.518261][T32561] loop4: p174 start 100859904 is beyond EOD, truncated [ 717.525303][T32561] loop4: p175 size 10695936 extends beyond EOD, truncated [ 717.541509][T32561] loop4: p176 start 100859904 is beyond EOD, truncated [ 717.548639][T32561] loop4: p177 size 10695936 extends beyond EOD, truncated [ 717.562138][T32561] loop4: p178 start 100859904 is beyond EOD, truncated [ 717.569109][T32561] loop4: p179 size 10695936 extends beyond EOD, truncated [ 717.578889][T32650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.585025][T32561] loop4: p180 start 100859904 is beyond EOD, truncated [ 717.596661][T32561] loop4: p181 size 10695936 extends beyond EOD, truncated [ 717.604692][T32661] loop8: detected capacity change from 0 to 512 [ 717.604958][T32561] loop4: p182 start 100859904 is beyond EOD, truncated [ 717.618509][T32561] loop4: p183 size 10695936 extends beyond EOD, truncated [ 717.624283][T32661] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 717.626471][T32561] loop4: p184 start 100859904 is beyond EOD, truncated [ 717.640934][T32661] EXT4-fs (loop8): orphan cleanup on readonly fs [ 717.641097][T32561] loop4: p185 size 10695936 extends beyond EOD, truncated [ 717.650132][T32661] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.9615: corrupted inode contents [ 717.657287][T32561] loop4: p186 start 100859904 is beyond EOD, truncated [ 717.670074][T32661] EXT4-fs (loop8): Remounting filesystem read-only [ 717.674598][T32561] loop4: p187 size 10695936 extends beyond EOD, truncated [ 717.675367][T32561] loop4: p188 start 100859904 is beyond EOD, truncated [ 717.675391][T32561] loop4: p189 size 10695936 extends beyond EOD, truncated [ 717.676119][T32561] loop4: p190 start 100859904 is beyond EOD, truncated [ 717.704662][T32661] EXT4-fs (loop8): 1 truncate cleaned up [ 717.711057][T32561] loop4: p191 size 10695936 extends beyond EOD, truncated [ 717.712571][T32561] loop4: p192 start 100859904 is beyond EOD, [ 717.718048][T32650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.724197][T32561] truncated [ 717.724232][T32561] loop4: p193 size 10695936 extends beyond EOD, truncated [ 717.724960][T32561] loop4: p194 start 100859904 is beyond EOD, [ 717.735723][ T178] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 717.741177][T32561] truncated [ 717.744295][ T178] Quota error (device loop8): write_blk: dquota write failed [ 717.751498][T32561] loop4: p195 size 10695936 extends beyond EOD, truncated [ 717.787773][ T178] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 717.788400][T32561] loop4: p196 start 100859904 is beyond EOD, truncated [ 717.797929][ T178] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 717.804816][T32561] loop4: p197 size 10695936 extends beyond EOD, truncated [ 717.816169][ T178] Quota error (device loop8): write_blk: dquota write failed [ 717.825548][T32561] loop4: p198 start 100859904 is beyond EOD, truncated [ 717.830392][ T178] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 717.837447][T32561] loop4: p199 size 10695936 extends beyond EOD, truncated [ 717.851959][ T178] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 717.855662][T32561] loop4: p200 start 100859904 is beyond EOD, truncated [ 717.865420][ T178] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 717.872385][T32561] loop4: p201 size 10695936 extends beyond EOD, truncated [ 717.875505][T32561] loop4: p202 start 100859904 is beyond EOD, truncated [ 717.896367][T32561] loop4: p203 size 10695936 extends beyond EOD, truncated [ 717.905834][T32561] loop4: p204 start 100859904 is beyond EOD, truncated [ 717.909335][T32661] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 717.913117][T32561] loop4: p205 size 10695936 extends beyond EOD, [ 717.919777][T32661] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 717.926244][T32561] truncated [ 717.927095][T32561] loop4: p206 start 100859904 is beyond EOD, [ 717.934801][T32661] vhci_hcd vhci_hcd.0: Device attached [ 717.936991][T32561] truncated [ 717.937001][T32561] loop4: p207 size 10695936 extends beyond EOD, truncated [ 717.963482][T32561] loop4: p208 start 100859904 is beyond EOD, truncated [ 717.970691][T32561] loop4: p209 size 10695936 extends beyond EOD, truncated [ 717.980416][T32561] loop4: p210 start 100859904 is beyond EOD, truncated [ 717.981736][T32666] vhci_hcd: connection closed [ 717.987535][T32561] loop4: p211 size 10695936 extends beyond EOD, truncated [ 717.988113][T32561] loop4: p212 start 100859904 is beyond EOD, truncated [ 717.988160][T32561] loop4: p213 size 10695936 extends beyond EOD, truncated [ 717.988703][T32561] loop4: p214 start 100859904 is beyond EOD, [ 717.997746][T21339] vhci_hcd: stop threads [ 718.000357][T32561] truncated [ 718.007220][T21339] vhci_hcd: release socket [ 718.014435][T32561] loop4: p215 size 10695936 extends beyond EOD, truncated [ 718.018777][T32561] loop4: p216 start 100859904 is beyond EOD, [ 718.021174][T21339] vhci_hcd: disconnect device [ 718.051267][T32561] truncated [ 718.054450][T32561] loop4: p217 size 10695936 extends beyond EOD, truncated [ 718.062707][T32561] loop4: p218 start 100859904 is beyond EOD, truncated [ 718.069436][T21339] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.069649][T32561] loop4: p219 size 10695936 extends beyond EOD, truncated [ 718.088170][T32561] loop4: p220 start 100859904 is beyond EOD, truncated [ 718.090787][T21339] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.095236][T32561] loop4: p221 size 10695936 extends beyond EOD, truncated [ 718.113474][T32561] loop4: p222 start 100859904 is beyond EOD, truncated [ 718.116559][T21339] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.120463][T32561] loop4: p223 size 10695936 extends beyond EOD, truncated [ 718.121197][T32561] loop4: p224 start 100859904 is beyond EOD, [ 718.135819][T21339] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.136036][T32561] truncated [ 718.154480][T32561] loop4: p225 size 10695936 extends beyond EOD, truncated [ 718.162823][T32561] loop4: p226 start 100859904 is beyond EOD, truncated [ 718.170073][T32561] loop4: p227 size 10695936 extends beyond EOD, truncated [ 718.177781][T32561] loop4: p228 start 100859904 is beyond EOD, truncated [ 718.184688][T32561] loop4: p229 size 10695936 extends beyond EOD, truncated [ 718.192494][T32561] loop4: p230 start 100859904 is beyond EOD, truncated [ 718.199613][T32561] loop4: p231 size 10695936 extends beyond EOD, truncated [ 718.206963][T32669] loop3: detected capacity change from 0 to 512 [ 718.213753][T32561] loop4: p232 start 100859904 is beyond EOD, truncated [ 718.218504][T32669] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.9616: bad orphan inode 11862016 [ 718.220668][T32561] loop4: p233 size 10695936 extends beyond EOD, truncated [ 718.232654][T32669] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 718.244868][T32561] loop4: p234 start 100859904 is beyond EOD, truncated [ 718.256940][T32561] loop4: p235 size 10695936 extends beyond EOD, truncated [ 718.264650][T32561] loop4: p236 start 100859904 is beyond EOD, truncated [ 718.271666][T32561] loop4: p237 size 10695936 extends beyond EOD, truncated [ 718.279455][T32561] loop4: p238 start 100859904 is beyond EOD, truncated [ 718.286461][T32561] loop4: p239 size 10695936 extends beyond EOD, truncated [ 718.294476][T32561] loop4: p240 start 100859904 is beyond EOD, truncated [ 718.302063][T32561] loop4: p241 size 10695936 extends beyond EOD, truncated [ 718.310331][T32561] loop4: p242 start 100859904 is beyond EOD, truncated [ 718.317353][T32561] loop4: p243 size 10695936 extends beyond EOD, truncated [ 718.325933][T32561] loop4: p244 start 100859904 is beyond EOD, truncated [ 718.333109][T32561] loop4: p245 size 10695936 extends beyond EOD, truncated [ 718.341304][T32561] loop4: p246 start 100859904 is beyond EOD, truncated [ 718.349047][T32561] loop4: p247 size 10695936 extends beyond EOD, truncated [ 718.366364][T32561] loop4: p248 start 100859904 is beyond EOD, truncated [ 718.373301][T32561] loop4: p249 size 10695936 extends beyond EOD, truncated [ 718.381390][T32561] loop4: p250 start 100859904 is beyond EOD, truncated [ 718.388653][T32561] loop4: p251 size 10695936 extends beyond EOD, truncated [ 718.397287][T32561] loop4: p252 start 100859904 is beyond EOD, truncated [ 718.404415][T32561] loop4: p253 size 10695936 extends beyond EOD, truncated [ 718.407138][T32673] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.9616: corrupted inode contents [ 718.426595][T32561] loop4: p254 start 100859904 is beyond EOD, truncated [ 718.428887][T32675] lo speed is unknown, defaulting to 1000 [ 718.433567][T32561] loop4: p255 size 10695936 extends beyond EOD, truncated [ 718.463900][T32673] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.9616: mark_inode_dirty error [ 718.491186][T32673] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.9616: corrupted inode contents [ 718.513943][T32673] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.9616: mark_inode_dirty error [ 718.543772][T32673] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.9616: mark inode dirty (error -117) [ 718.551823][T32678] loop8: detected capacity change from 0 to 512 [ 718.578928][T32673] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 718.594714][T32678] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.9620: corrupted in-inode xattr: invalid ea_ino [ 718.639063][T32678] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.9620: couldn't read orphan inode 15 (err -117) [ 718.686874][T32675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=32675 comm=syz.9.9617 [ 718.735372][T32691] netlink: 288 bytes leftover after parsing attributes in process `syz.3.9623'. [ 718.746579][T32690] FAULT_INJECTION: forcing a failure. [ 718.746579][T32690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.760302][T32690] CPU: 1 UID: 0 PID: 32690 Comm: syz.0.9619 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 718.760339][T32690] Tainted: [W]=WARN [ 718.760345][T32690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 718.760361][T32690] Call Trace: [ 718.760369][T32690] [ 718.760379][T32690] __dump_stack+0x1d/0x30 [ 718.760428][T32690] dump_stack_lvl+0xe8/0x140 [ 718.760447][T32690] dump_stack+0x15/0x1b [ 718.760467][T32690] should_fail_ex+0x265/0x280 [ 718.760494][T32690] should_fail+0xb/0x20 [ 718.760520][T32690] should_fail_usercopy+0x1a/0x20 [ 718.760615][T32690] _copy_from_user+0x1c/0xb0 [ 718.760646][T32690] get_user_ifreq+0x53/0x110 [ 718.760693][T32690] sock_ioctl+0x54e/0x610 [ 718.760731][T32690] ? __pfx_sock_ioctl+0x10/0x10 [ 718.760761][T32690] __se_sys_ioctl+0xce/0x140 [ 718.760906][T32690] __x64_sys_ioctl+0x43/0x50 [ 718.760936][T32690] x64_sys_call+0x1816/0x3000 [ 718.760965][T32690] do_syscall_64+0xd2/0x200 [ 718.761032][T32690] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 718.761077][T32690] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 718.761149][T32690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.761215][T32690] RIP: 0033:0x7f9bb701eec9 [ 718.761232][T32690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.761253][T32690] RSP: 002b:00007f9bb5a5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.761273][T32690] RAX: ffffffffffffffda RBX: 00007f9bb7276090 RCX: 00007f9bb701eec9 [ 718.761285][T32690] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000003 [ 718.761297][T32690] RBP: 00007f9bb5a5e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.761337][T32690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.761353][T32690] R13: 00007f9bb7276128 R14: 00007f9bb7276090 R15: 00007ffc4fd06ec8 [ 718.761377][T32690] [ 719.099710][T32705] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9627'. [ 719.102873][T32703] lo speed is unknown, defaulting to 1000 [ 719.232559][T32708] SELinux: failed to load policy [ 719.238566][T32703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=32703 comm=syz.3.9628 [ 719.242480][T32713] loop9: detected capacity change from 0 to 512 [ 719.284108][T32713] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.9631: bad orphan inode 11862016 [ 719.298887][T32713] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.380373][T32722] loop4: detected capacity change from 0 to 512 [ 719.404433][T32723] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.9631: corrupted inode contents [ 719.424893][T32722] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.9633: bad orphan inode 11862016 [ 719.445920][T32723] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #19: comm syz.9.9631: mark_inode_dirty error [ 719.454309][T32722] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.479444][T32723] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.9631: corrupted inode contents [ 719.531366][T32723] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #19: comm syz.9.9631: mark_inode_dirty error [ 719.570637][T32721] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9634'. [ 719.579176][T32723] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #19: comm syz.9.9631: mark inode dirty (error -117) [ 719.621028][T32723] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 719.695492][T32736] netlink: 'syz.9.9637': attribute type 10 has an invalid length. [ 719.721070][T32736] : (slave hsr0): The slave device specified does not support setting the MAC address [ 719.745779][T32732] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.9633: corrupted inode contents [ 719.758349][T32736] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 719.770887][T32736] : (slave hsr0): Error -22 calling dev_set_mtu [ 719.802011][T32736] loop9: detected capacity change from 0 to 512 [ 719.814879][T32741] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.9639'. [ 719.820228][T32732] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #19: comm syz.4.9633: mark_inode_dirty error [ 719.840057][T32732] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #19: comm syz.4.9633: corrupted inode contents [ 719.857005][T32736] EXT4-fs (loop9): orphan cleanup on readonly fs [ 719.868913][T32732] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #19: comm syz.4.9633: mark_inode_dirty error [ 719.883733][T32736] EXT4-fs warning (device loop9): ext4_xattr_inode_get:556: inode #11: comm syz.9.9637: EA inode hash validation failed [ 719.909554][T32746] netlink: 'syz.8.9641': attribute type 10 has an invalid length. [ 719.910779][T32736] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9637: corrupted inode contents [ 719.918697][T32744] lo speed is unknown, defaulting to 1000 [ 719.929855][T32732] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #19: comm syz.4.9633: mark inode dirty (error -117) [ 719.929964][T32746] : (slave hsr0): The slave device specified does not support setting the MAC address [ 719.930196][T32746] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 719.930218][T32746] : (slave hsr0): Error -22 calling dev_set_mtu [ 719.987431][T32732] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 720.005874][T32736] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #15: comm syz.9.9637: mark_inode_dirty error [ 720.021395][T32746] loop8: detected capacity change from 0 to 512 [ 720.042820][T32736] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9637: corrupted inode contents [ 720.044207][T32746] EXT4-fs (loop8): orphan cleanup on readonly fs [ 720.063785][T32736] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #15: comm syz.9.9637: mark_inode_dirty error [ 720.077580][T32746] EXT4-fs warning (device loop8): ext4_xattr_inode_get:556: inode #11: comm syz.8.9641: EA inode hash validation failed [ 720.092928][T32736] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #15: comm syz.9.9637: mark inode dirty (error -117) [ 720.106330][T32746] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.9641: corrupted inode contents [ 720.130065][T32736] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 720.145510][T32736] EXT4-fs (loop9): 1 orphan inode deleted [ 720.151918][T32746] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.9641: mark_inode_dirty error [ 720.175092][T32744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=32744 comm=syz.0.9640 [ 720.197654][T32746] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.9641: corrupted inode contents [ 720.226154][T32746] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #15: comm syz.8.9641: mark_inode_dirty error [ 720.240169][T32753] loop3: detected capacity change from 0 to 512 [ 720.256149][T32746] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #15: comm syz.8.9641: mark inode dirty (error -117) [ 720.256703][T32746] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 720.256745][T32746] EXT4-fs (loop8): 1 orphan inode deleted [ 720.307849][T32753] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.9644: bad orphan inode 11862016 [ 720.308488][T32753] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.462607][ T302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9649'. [ 720.472610][ T302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9649'. [ 720.482935][ T302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9649'. [ 720.484945][T32765] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.9644: corrupted inode contents [ 720.492541][ T302] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9649'. [ 720.538967][T32765] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.9644: mark_inode_dirty error [ 720.562890][T32765] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.9644: corrupted inode contents [ 720.587839][ T305] loop8: detected capacity change from 0 to 164 [ 720.596570][ T305] ISOFS: unable to read i-node block [ 720.602095][ T305] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 720.608638][T32765] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.9644: mark_inode_dirty error [ 720.623933][T32765] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.9644: mark inode dirty (error -117) [ 720.640734][T32765] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 720.715055][ T312] loop8: detected capacity change from 0 to 512 [ 720.752275][ T312] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.9653: bad orphan inode 11862016 [ 720.764767][ T312] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.041841][ T328] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #19: comm syz.8.9653: corrupted inode contents [ 721.111280][ T333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9658'. [ 721.145155][ T328] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #19: comm syz.8.9653: mark_inode_dirty error [ 721.339554][ T328] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #19: comm syz.8.9653: corrupted inode contents [ 722.059816][ T337] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9658'. [ 722.141384][ T328] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #19: comm syz.8.9653: mark_inode_dirty error [ 722.192574][ T328] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #19: comm syz.8.9653: mark inode dirty (error -117) [ 722.421915][ T328] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 722.643466][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 722.643487][ T29] audit: type=1400 audit(1759479451.212:76702): avc: denied { ioctl } for pid=365 comm="syz.8.9667" path="socket:[122223]" dev="sockfs" ino=122223 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 723.161921][ T29] audit: type=1400 audit(1759479451.757:76703): avc: denied { read } for pid=378 comm="syz.9.9671" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 723.187987][ T29] audit: type=1400 audit(1759479451.757:76704): avc: denied { open } for pid=378 comm="syz.9.9671" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 723.738445][ T29] audit: type=1400 audit(1759479452.408:76705): avc: denied { write } for pid=382 comm="syz.0.9673" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 723.963364][ T29] audit: type=1400 audit(1759479452.650:76706): avc: denied { write } for pid=392 comm="syz.8.9675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 723.987416][ T395] loop8: detected capacity change from 0 to 512 [ 723.996051][ T395] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.9675: casefold flag without casefold feature [ 724.011022][ T395] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.9675: couldn't read orphan inode 15 (err -117) [ 724.320306][ T407] __nla_validate_parse: 1 callbacks suppressed [ 724.326567][ T407] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.9676'. [ 724.336719][ T407] netlink: 4804 bytes leftover after parsing attributes in process `syz.4.9676'. [ 725.219412][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.227978][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.252107][ T29] audit: type=1400 audit(1759479454.004:76707): avc: denied { bind } for pid=424 comm="syz.0.9682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 725.272031][ T29] audit: type=1400 audit(1759479454.004:76708): avc: denied { name_bind } for pid=424 comm="syz.0.9682" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 725.293997][ T29] audit: type=1400 audit(1759479454.004:76709): avc: denied { node_bind } for pid=424 comm="syz.0.9682" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 725.750065][ T29] audit: type=1400 audit(1759479454.445:76710): avc: denied { shutdown } for pid=429 comm="syz.4.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 725.770509][ T29] audit: type=1400 audit(1759479454.445:76711): avc: denied { setopt } for pid=429 comm="syz.4.9685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 726.053082][ T443] loop9: detected capacity change from 0 to 2048 [ 726.187755][ T448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9687'. [ 726.615804][ T445] lo speed is unknown, defaulting to 1000 [ 727.575953][ T461] loop4: detected capacity change from 0 to 512 [ 727.674600][ T466] netlink: 'syz.0.9698': attribute type 10 has an invalid length. [ 727.800057][ T461] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 727.817543][ T461] EXT4-fs (loop4): orphan cleanup on readonly fs [ 727.906510][ T461] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.9696: corrupted inode contents [ 727.936801][ T478] hub 2-0:1.0: USB hub found [ 727.942512][ T478] hub 2-0:1.0: 8 ports detected [ 728.000493][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 728.000513][ T29] audit: type=1400 audit(1759479712.843:76713): avc: denied { ioctl } for pid=453 comm="syz.9.9692" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 728.101624][ T461] EXT4-fs (loop4): Remounting filesystem read-only [ 728.121339][ T461] EXT4-fs (loop4): 1 truncate cleaned up [ 728.238105][T21339] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 728.249220][T21339] Quota error (device loop4): write_blk: dquota write failed [ 728.256783][T21339] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 728.266912][T21339] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 728.277752][T21339] Quota error (device loop4): write_blk: dquota write failed [ 728.285933][T21339] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 728.303071][T21339] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 728.313726][T21339] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 728.355069][T21339] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 728.368198][ T483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9703'. [ 728.377395][ T483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9703'. [ 728.390264][ T483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9703'. [ 728.399788][ T483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9703'. [ 728.415444][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.424121][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.443873][ T29] audit: type=1400 audit(1759479713.358:76714): avc: denied { create } for pid=486 comm="syz.9.9704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 728.464386][ T29] audit: type=1400 audit(1759479713.358:76715): avc: denied { bind } for pid=486 comm="syz.9.9704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 728.484990][ T29] audit: type=1400 audit(1759479713.358:76716): avc: denied { write } for pid=486 comm="syz.9.9704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 728.505140][ T461] EXT4-fs mount: 20 callbacks suppressed [ 728.505162][ T461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 728.571137][ T461] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 728.577890][ T461] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 728.585592][ T461] vhci_hcd vhci_hcd.0: Device attached [ 728.612477][ T495] netlink: 'syz.9.9707': attribute type 10 has an invalid length. [ 728.621823][ T495] team0: Device hsr_slave_0 failed to register rx_handler [ 728.637045][ T499] SELinux: syz.0.9708 (499) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 728.662615][ T492] vhci_hcd: connection closed [ 728.683960][T21339] vhci_hcd: stop threads [ 728.684540][ T495] lo speed is unknown, defaulting to 1000 [ 728.688831][T21339] vhci_hcd: release socket [ 728.703485][T21339] vhci_hcd: disconnect device [ 728.759581][ T9625] vhci_hcd: vhci_device speed not set [ 729.164733][T30946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.203756][ T513] loop8: detected capacity change from 0 to 1024 [ 729.210909][ T513] EXT4-fs: Ignoring removed oldalloc option [ 729.217788][ T513] EXT4-fs: Ignoring removed bh option [ 729.222492][ T510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9710'. [ 729.238558][ T513] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.260197][ T513] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 729.281716][ T519] loop4: detected capacity change from 0 to 512 [ 729.296756][ T519] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.9712: bad orphan inode 11862016 [ 729.309801][ T519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 729.315869][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.324503][ T519] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.376323][T30946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 729.428223][ T525] loop3: detected capacity change from 0 to 1024 [ 729.435601][ T525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.442511][ T525] EXT4-fs: Ignoring removed nobh option [ 729.456727][ T525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.460024][ T531] SELinux: syz.4.9714 (531) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 729.592868][ T536] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.9715: Allocating blocks 497-513 which overlap fs metadata [ 729.651620][ T540] loop9: detected capacity change from 0 to 1024 [ 729.658731][ T540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 729.666012][ T540] EXT4-fs: Ignoring removed nobh option [ 729.675469][ T540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.804181][ T525] EXT4-fs (loop3): pa ffff888106abfe00: logic 16, phys. 145, len 23 [ 729.812423][ T525] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 729.932551][T28198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.136994][ T540] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.9718: Allocating blocks 1-17 which overlap fs metadata [ 730.156499][ T543] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.9718: Allocating blocks 1-17 which overlap fs metadata [ 730.189438][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.214427][ T551] loop9: detected capacity change from 0 to 512 [ 730.227531][ T551] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 730.236330][ T551] EXT4-fs (loop9): orphan cleanup on readonly fs [ 730.244574][ T551] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.9721: corrupted inode contents [ 730.259747][ T551] EXT4-fs (loop9): Remounting filesystem read-only [ 730.270059][ T551] EXT4-fs (loop9): 1 truncate cleaned up [ 730.276826][T21343] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 730.288026][T21343] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 730.299118][T21343] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 730.310177][ T551] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 730.326451][ T551] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 730.333153][ T551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 730.340917][ T551] vhci_hcd vhci_hcd.0: Device attached [ 730.360253][ T556] vhci_hcd: connection closed [ 730.362601][T21338] vhci_hcd: stop threads [ 730.372087][T21338] vhci_hcd: release socket [ 730.376608][T21338] vhci_hcd: disconnect device [ 730.875008][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.944903][ T564] loop3: detected capacity change from 0 to 8192 [ 731.013927][ T568] loop9: detected capacity change from 0 to 512 [ 731.033157][ T568] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.9726: bad orphan inode 11862016 [ 731.103407][ T568] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 731.116143][ T568] ext4 filesystem being mounted at /460/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.181043][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 731.235117][ T578] netlink: 'syz.8.9729': attribute type 10 has an invalid length. [ 731.243040][ T578] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9729'. [ 731.256985][ T578] team0: Port device geneve1 added [ 731.387659][ T589] loop9: detected capacity change from 0 to 512 [ 731.390148][ T587] lo speed is unknown, defaulting to 1000 [ 731.410081][ T589] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 731.428195][ T589] EXT4-fs (loop9): orphan cleanup on readonly fs [ 731.441624][ T589] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.9735: corrupted inode contents [ 731.465715][ T587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=587 comm=syz.8.9734 [ 731.479167][ T589] EXT4-fs (loop9): Remounting filesystem read-only [ 731.487755][ T589] EXT4-fs (loop9): 1 truncate cleaned up [ 731.493840][ T178] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 731.504745][ T178] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 731.519337][ T178] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 731.531550][ T589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 731.570781][ T589] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 731.577536][ T589] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.585700][ T589] vhci_hcd vhci_hcd.0: Device attached [ 731.623738][ T594] vhci_hcd: connection closed [ 731.623942][ T178] vhci_hcd: stop threads [ 731.634288][ T178] vhci_hcd: release socket [ 731.638939][ T178] vhci_hcd: disconnect device [ 731.759066][ T597] SELinux: failed to load policy [ 731.794295][ T601] netlink: 'syz.8.9738': attribute type 10 has an invalid length. [ 731.803334][ T601] : (slave hsr0): The slave device specified does not support setting the MAC address [ 731.813735][ T601] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 731.827313][ T601] : (slave hsr0): Error -22 calling dev_set_mtu [ 731.845700][ T601] loop8: detected capacity change from 0 to 512 [ 731.854352][ T601] EXT4-fs (loop8): orphan cleanup on readonly fs [ 731.865479][ T601] EXT4-fs warning (device loop8): ext4_xattr_inode_get:556: inode #11: comm syz.8.9738: EA inode hash validation failed [ 731.880519][ T601] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.9738: corrupted inode contents [ 731.906486][ T601] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.9738: mark_inode_dirty error [ 731.920297][ T601] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.9738: corrupted inode contents [ 731.934491][ T601] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #15: comm syz.8.9738: mark_inode_dirty error [ 731.947760][ T601] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #15: comm syz.8.9738: mark inode dirty (error -117) [ 731.963620][ T601] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 731.975741][ T601] EXT4-fs (loop8): 1 orphan inode deleted [ 731.983142][ T601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 732.051255][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.136401][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.303544][ T608] loop9: detected capacity change from 0 to 512 [ 732.332987][ T608] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.9740: bad orphan inode 11862016 [ 732.344724][ T608] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 732.357687][ T608] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.423346][ T623] 9pnet_fd: Insufficient options for proto=fd [ 732.453980][ T624] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.9740: corrupted inode contents [ 732.467611][ T624] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #19: comm syz.9.9740: mark_inode_dirty error [ 732.481438][ T624] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.9740: corrupted inode contents [ 732.495720][ T624] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #19: comm syz.9.9740: mark_inode_dirty error [ 732.510806][ T624] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #19: comm syz.9.9740: mark inode dirty (error -117) [ 732.526407][ T624] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 732.563667][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 732.645558][ T634] netlink: 'syz.9.9750': attribute type 10 has an invalid length. [ 732.655793][ T634] : (slave hsr0): The slave device specified does not support setting the MAC address [ 732.667265][ T634] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 732.680800][ T634] : (slave hsr0): Error -22 calling dev_set_mtu [ 732.697882][ T634] loop9: detected capacity change from 0 to 512 [ 732.706051][ T634] EXT4-fs (loop9): orphan cleanup on readonly fs [ 732.714457][ T634] EXT4-fs warning (device loop9): ext4_xattr_inode_get:556: inode #11: comm syz.9.9750: EA inode hash validation failed [ 732.750669][ T634] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9750: corrupted inode contents [ 732.770379][ T634] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #15: comm syz.9.9750: mark_inode_dirty error [ 732.785122][ T639] netlink: 'syz.8.9749': attribute type 10 has an invalid length. [ 732.860207][ T634] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9750: corrupted inode contents [ 732.925069][ T634] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #15: comm syz.9.9750: mark_inode_dirty error [ 732.996256][ T643] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.9754'. [ 733.006534][ T634] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #15: comm syz.9.9750: mark inode dirty (error -117) [ 733.026178][ T634] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 733.066032][ T634] EXT4-fs (loop9): 1 orphan inode deleted [ 733.093471][ T634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 733.154584][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.183154][ T651] 9pnet_fd: Insufficient options for proto=fd [ 733.193647][ T653] netlink: 'syz.9.9759': attribute type 10 has an invalid length. [ 733.202762][ T653] team0: Device hsr_slave_0 failed to register rx_handler [ 733.227220][ T653] lo speed is unknown, defaulting to 1000 [ 733.255065][ T659] SELinux: syz.3.9762 (659) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 733.370642][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 733.370662][ T29] audit: type=1326 audit(1759480230.458:76827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.401734][ T29] audit: type=1326 audit(1759480230.458:76828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.425632][ T29] audit: type=1326 audit(1759480230.458:76829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.449688][ T29] audit: type=1326 audit(1759480230.458:76830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.475072][ T29] audit: type=1326 audit(1759480230.469:76831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.500362][ T29] audit: type=1326 audit(1759480230.469:76832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.516707][ T674] loop8: detected capacity change from 0 to 1024 [ 733.524592][ T29] audit: type=1326 audit(1759480230.469:76833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.524632][ T29] audit: type=1326 audit(1759480230.469:76834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.524660][ T29] audit: type=1326 audit(1759480230.469:76835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.524726][ T29] audit: type=1326 audit(1759480230.469:76836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.3.9762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 733.635169][ T674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 733.643122][ T674] EXT4-fs: Ignoring removed nobh option [ 733.663909][ T674] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.795795][ T683] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.9766: Allocating blocks 497-513 which overlap fs metadata [ 733.920547][ T671] EXT4-fs (loop8): pa ffff888106abfcb0: logic 16, phys. 145, len 23 [ 733.929120][ T671] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 733.982551][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.004495][ T686] 9pnet_fd: Insufficient options for proto=fd [ 734.391304][ T695] loop9: detected capacity change from 0 to 1024 [ 734.411738][ T695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 734.487436][ T695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 734.496934][ T695] System zones: 0-1, 3-12 [ 734.505541][ T695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.611007][ T694] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9775: bg 0: block 88: padding at end of block bitmap is not set [ 735.436398][ T722] loop4: detected capacity change from 0 to 512 [ 735.443521][ T717] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.9782'. [ 735.524701][ T722] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.9783: bad orphan inode 11862016 [ 735.555587][ T722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 735.590177][ T722] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 735.614308][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.652245][ T732] netlink: 'syz.9.9785': attribute type 10 has an invalid length. [ 735.665950][ T732] : (slave hsr0): The slave device specified does not support setting the MAC address [ 735.679437][T30946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 735.690876][ T732] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 735.704936][ T732] : (slave hsr0): Error -22 calling dev_set_mtu [ 735.720551][ T734] loop9: detected capacity change from 0 to 512 [ 735.744019][ T734] EXT4-fs (loop9): orphan cleanup on readonly fs [ 735.752848][ T734] EXT4-fs warning (device loop9): ext4_xattr_inode_get:556: inode #11: comm syz.9.9785: EA inode hash validation failed [ 735.768217][ T734] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9785: corrupted inode contents [ 735.782616][ T734] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #15: comm syz.9.9785: mark_inode_dirty error [ 735.794765][ T734] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9785: corrupted inode contents [ 735.813335][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.828887][ T734] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #15: comm syz.9.9785: mark_inode_dirty error [ 735.860822][ T734] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #15: comm syz.9.9785: mark inode dirty (error -117) [ 735.886839][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.904693][ T734] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 735.925910][ T734] EXT4-fs (loop9): 1 orphan inode deleted [ 735.946115][ T734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 735.974297][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.984010][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.008670][ T742] lo speed is unknown, defaulting to 1000 [ 736.022049][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.046608][ T748] netlink: 288 bytes leftover after parsing attributes in process `syz.8.9791'. [ 736.071141][ T726] lo speed is unknown, defaulting to 1000 [ 736.088412][ T754] loop9: detected capacity change from 0 to 1024 [ 736.106644][ T754] EXT4-fs: Ignoring removed nomblk_io_submit option [ 736.142675][ T37] bridge_slave_1: left allmulticast mode [ 736.148821][ T37] bridge_slave_1: left promiscuous mode [ 736.154874][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.171825][ T754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 736.186477][ T37] bridge_slave_0: left allmulticast mode [ 736.188952][ T754] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.192631][ T37] bridge_slave_0: left promiscuous mode [ 736.209880][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.231495][ T754] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 3: comm syz.9.9792: lblock 3 mapped to illegal pblock 3 (length 3) [ 736.268251][ T754] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 736.281196][ T754] EXT4-fs (loop9): This should not happen!! Data will be lost [ 736.281196][ T754] [ 736.293360][ T37] bond1 (unregistering): (slave gretap1): Releasing active interface [ 736.340120][ T178] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 736.375374][ T178] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 736.387914][ T178] EXT4-fs (loop9): This should not happen!! Data will be lost [ 736.387914][ T178] [ 736.402054][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 736.440730][ T37]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.459106][ T37]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.495187][ T37]  (unregistering): Released all slaves [ 736.507789][ T37] bond1 (unregistering): Released all slaves [ 736.515461][ T771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=771 comm=syz.9.9798 [ 736.530472][ T37] bond2 (unregistering): Released all slaves [ 736.537342][ T771] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9798'. [ 736.550302][ T37] bond0 (unregistering): Released all slaves [ 736.575634][ T771] bond0: entered promiscuous mode [ 736.593381][ T764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=764 comm=syz.8.9795 [ 736.618301][ T771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.631757][ T763] lo speed is unknown, defaulting to 1000 [ 736.666262][ T771] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7 [ 736.686674][ T771] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9798'. [ 736.706048][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.714449][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.722238][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.729829][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.763537][ T37] veth1_macvtap: left promiscuous mode [ 736.769440][ T37] veth0_macvtap: left promiscuous mode [ 736.854346][ T37] team0 (unregistering): Port device hsr_slave_0 removed [ 736.892495][ T37] team0 (unregistering): Port device team_slave_1 removed [ 736.954264][ T37] team0 (unregistering): Port device dummy0 removed [ 736.993011][ T771] bond0 (unregistering): Released all slaves [ 737.049165][ T726] chnl_net:caif_netlink_parms(): no params data found [ 737.166870][ T787] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 737.179096][ T787] SELinux: failed to load policy [ 737.191595][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.199080][ T726] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.222332][ T726] bridge_slave_0: entered allmulticast mode [ 737.229335][ T726] bridge_slave_0: entered promiscuous mode [ 737.239511][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.246962][ T726] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.255792][ T726] bridge_slave_1: entered allmulticast mode [ 737.262780][ T726] bridge_slave_1: entered promiscuous mode [ 737.274932][ T789] bridge0: entered promiscuous mode [ 737.280589][ T789] macsec1: entered promiscuous mode [ 737.286909][ T789] bridge0: port 3(macsec1) entered blocking state [ 737.293985][ T789] bridge0: port 3(macsec1) entered disabled state [ 737.300993][ T789] macsec1: entered allmulticast mode [ 737.306561][ T789] bridge0: entered allmulticast mode [ 737.312496][ T789] macsec1: left allmulticast mode [ 737.317723][ T789] bridge0: left allmulticast mode [ 737.323544][ T789] bridge0: left promiscuous mode [ 737.347040][ T791] lo speed is unknown, defaulting to 1000 [ 737.348672][ T726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.391285][ T726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.436050][ T726] team0: Port device team_slave_0 added [ 737.448153][ T726] team0: Port device team_slave_1 added [ 737.494200][ T726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.501358][ T726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.528194][ T726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.548006][ T726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.555222][ T726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.581725][ T726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.607766][ T799] loop8: detected capacity change from 0 to 512 [ 737.641550][ T799] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.9805: bad orphan inode 11862016 [ 737.658500][ T799] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 737.674231][ T726] hsr_slave_0: entered promiscuous mode [ 737.691309][ T799] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.694769][ T726] hsr_slave_1: entered promiscuous mode [ 737.714230][ T726] debugfs: 'hsr0' already exists in 'hsr' [ 737.720019][ T726] Cannot create hsr debugfs directory [ 737.732895][ T804] 9pnet_fd: Insufficient options for proto=fd [ 737.749137][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 737.846937][ T813] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 737.869933][ T813] SELinux: failed to load policy [ 737.931454][ T819] SELinux: failed to load policy [ 737.958601][ T823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=823 comm=syz.8.9815 [ 737.972150][ T823] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9815'. [ 738.080821][ T823] bond0: entered promiscuous mode [ 738.088950][ T826] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7 [ 738.107353][ T823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.108971][ T832] 9pnet_fd: Insufficient options for proto=fd [ 738.163494][ T823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9815'. [ 738.177550][ T823] bond0 (unregistering): Released all slaves [ 738.627102][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 738.627126][ T29] audit: type=1326 audit(1759480748.042:77018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.664821][ T843] netlink: 288 bytes leftover after parsing attributes in process `syz.4.9823'. [ 738.675326][ T726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 738.700886][ T726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 738.716540][ T29] audit: type=1326 audit(1759480748.084:77019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.740291][ T29] audit: type=1326 audit(1759480748.084:77020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.764236][ T29] audit: type=1326 audit(1759480748.084:77021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.788475][ T29] audit: type=1326 audit(1759480748.084:77022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.812198][ T29] audit: type=1326 audit(1759480748.084:77023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.835989][ T29] audit: type=1326 audit(1759480748.084:77024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.859930][ T29] audit: type=1326 audit(1759480748.084:77025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.883724][ T29] audit: type=1326 audit(1759480748.084:77026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.907663][ T29] audit: type=1326 audit(1759480748.084:77027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=842 comm="syz.4.9823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b778deec9 code=0x7ffc0000 [ 738.986067][ T726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 739.029396][ T726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 739.090400][ T864] loop8: detected capacity change from 0 to 512 [ 739.133188][ T866] SELinux: syz.4.9831 (866) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 739.157207][ T726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.170135][ T726] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.182285][ T178] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.189606][ T178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.202566][ T868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9832'. [ 739.212100][ T868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9832'. [ 739.222083][ T868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9832'. [ 739.233985][T21338] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.241333][T21338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.313083][ T886] netlink: 'syz.3.9835': attribute type 10 has an invalid length. [ 739.321433][ T886] team0: Device hsr_slave_0 failed to register rx_handler [ 739.356013][ T888] netlink: 'syz.9.9836': attribute type 10 has an invalid length. [ 739.356832][ T726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.374113][ T888] : (slave hsr0): The slave device specified does not support setting the MAC address [ 739.384955][ T888] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 739.397601][ T888] : (slave hsr0): Error -22 calling dev_set_mtu [ 739.404957][ T886] lo speed is unknown, defaulting to 1000 [ 739.419622][ T888] loop9: detected capacity change from 0 to 512 [ 739.430704][ T888] EXT4-fs (loop9): orphan cleanup on readonly fs [ 739.437960][ T888] EXT4-fs warning (device loop9): ext4_xattr_inode_get:556: inode #11: comm syz.9.9836: EA inode hash validation failed [ 739.451022][ T888] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9836: corrupted inode contents [ 739.464593][ T888] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #15: comm syz.9.9836: mark_inode_dirty error [ 739.487163][ T888] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.9836: corrupted inode contents [ 739.506312][ T888] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #15: comm syz.9.9836: mark_inode_dirty error [ 739.519271][ T888] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #15: comm syz.9.9836: mark inode dirty (error -117) [ 739.532534][ T888] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 739.541838][ T888] EXT4-fs (loop9): 1 orphan inode deleted [ 739.549688][ T888] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 739.619674][ T726] veth0_vlan: entered promiscuous mode [ 739.630286][ T726] veth1_vlan: entered promiscuous mode [ 739.636759][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.661388][ T726] veth0_macvtap: entered promiscuous mode [ 739.670425][ T726] veth1_macvtap: entered promiscuous mode [ 739.684388][ T726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.858561][ T908] loop9: detected capacity change from 0 to 128 [ 739.886659][ T908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 739.919769][ T908] System zones: 1-3, 19-19, 35-36 [ 739.933187][ T908] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 739.950337][ T908] ext4 filesystem being mounted at /491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 740.036120][ T914] loop8: detected capacity change from 0 to 512 [ 740.058938][ T908] EXT4-fs (loop9): shut down requested (0) [ 740.087494][ T914] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.9841: bad orphan inode 11862016 [ 740.101062][ T914] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 740.114297][ T914] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.132717][ T726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.143390][T21342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.163452][T21342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.173397][T21342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.182967][T21342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.184868][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 740.285822][ T926] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 740.293388][ T9622] IPVS: starting estimator thread 0... [ 740.326727][ T928] FAULT_INJECTION: forcing a failure. [ 740.326727][ T928] name failslab, interval 1, probability 0, space 0, times 0 [ 740.339497][ T928] CPU: 0 UID: 0 PID: 928 Comm: syz.0.9844 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 740.339581][ T928] Tainted: [W]=WARN [ 740.339591][ T928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 740.339614][ T928] Call Trace: [ 740.339622][ T928] [ 740.339639][ T928] __dump_stack+0x1d/0x30 [ 740.339667][ T928] dump_stack_lvl+0xe8/0x140 [ 740.339692][ T928] dump_stack+0x15/0x1b [ 740.339714][ T928] should_fail_ex+0x265/0x280 [ 740.339790][ T928] should_failslab+0x8c/0xb0 [ 740.339815][ T928] kmem_cache_alloc_node_noprof+0x57/0x320 [ 740.339865][ T928] ? __alloc_skb+0x101/0x320 [ 740.339895][ T928] __alloc_skb+0x101/0x320 [ 740.339922][ T928] netlink_alloc_large_skb+0xba/0xf0 [ 740.339947][ T928] netlink_sendmsg+0x3cf/0x6b0 [ 740.340019][ T928] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.340116][ T928] __sock_sendmsg+0x142/0x180 [ 740.340191][ T928] ____sys_sendmsg+0x31e/0x4e0 [ 740.340220][ T928] ___sys_sendmsg+0x17b/0x1d0 [ 740.340324][ T928] __x64_sys_sendmsg+0xd4/0x160 [ 740.340365][ T928] x64_sys_call+0x191e/0x3000 [ 740.340390][ T928] do_syscall_64+0xd2/0x200 [ 740.340447][ T928] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 740.340490][ T928] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 740.340525][ T928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.340549][ T928] RIP: 0033:0x7fa49771eec9 [ 740.340581][ T928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.340618][ T928] RSP: 002b:00007fa49617f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.340643][ T928] RAX: ffffffffffffffda RBX: 00007fa497975fa0 RCX: 00007fa49771eec9 [ 740.340659][ T928] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 740.340672][ T928] RBP: 00007fa49617f090 R08: 0000000000000000 R09: 0000000000000000 [ 740.340683][ T928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.340695][ T928] R13: 00007fa497976038 R14: 00007fa497975fa0 R15: 00007ffd0ff0f958 [ 740.340714][ T928] [ 740.558486][ T9622] IPVS: starting estimator thread 0... [ 740.590274][ T930] IPVS: using max 2304 ests per chain, 115200 per kthread [ 740.600411][ T936] netlink: 'syz.3.9846': attribute type 10 has an invalid length. [ 740.616467][ T936] : (slave hsr0): The slave device specified does not support setting the MAC address [ 740.616923][T25737] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 740.626580][ T936] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 740.648060][ T936] : (slave hsr0): Error -22 calling dev_set_mtu [ 740.657081][ T939] loop3: detected capacity change from 0 to 512 [ 740.664158][ T932] IPVS: using max 2160 ests per chain, 108000 per kthread [ 740.679862][ T939] EXT4-fs (loop3): orphan cleanup on readonly fs [ 740.691470][ T939] EXT4-fs warning (device loop3): ext4_xattr_inode_get:556: inode #11: comm syz.3.9846: EA inode hash validation failed [ 740.718386][ T939] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.9846: corrupted inode contents [ 740.730930][ T939] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.9846: mark_inode_dirty error [ 740.743921][ T939] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #15: comm syz.3.9846: corrupted inode contents [ 740.750306][ T948] __nla_validate_parse: 1 callbacks suppressed [ 740.750328][ T948] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9850'. [ 740.772416][ T948] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9850'. [ 740.782040][ T946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9849'. [ 740.791460][ T946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9849'. [ 740.795266][ T939] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #15: comm syz.3.9846: mark_inode_dirty error [ 740.805380][ T946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9849'. [ 740.822593][ T946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9849'. [ 740.832545][ T948] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9850'. [ 740.835340][ T939] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #15: comm syz.3.9846: mark inode dirty (error -117) [ 740.841686][ T948] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9850'. [ 740.856194][ T939] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 740.882991][ T939] EXT4-fs (loop3): 1 orphan inode deleted [ 740.890918][ T939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 740.927574][ T952] loop8: detected capacity change from 0 to 1024 [ 740.935185][ T952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 740.957510][ T952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 740.971684][T28198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.976603][ T952] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.994027][ T958] lo speed is unknown, defaulting to 1000 [ 741.014346][ T952] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 3: comm syz.8.9852: lblock 3 mapped to illegal pblock 3 (length 3) [ 741.045089][ T952] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 741.057551][ T952] EXT4-fs (loop8): This should not happen!! Data will be lost [ 741.057551][ T952] [ 741.082045][ T962] netlink: 288 bytes leftover after parsing attributes in process `syz.3.9854'. [ 741.093379][ T952] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.9852: lblock 3 mapped to illegal pblock 3 (length 1) [ 741.123450][ T952] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.9852: lblock 3 mapped to illegal pblock 3 (length 1) [ 741.138025][ T958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=958 comm=syz.0.9855 [ 741.153515][ T952] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.9852: lblock 3 mapped to illegal pblock 3 (length 1) [ 741.172291][ T952] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.9852: lblock 3 mapped to illegal pblock 3 (length 1) [ 741.201854][ T952] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.9852: lblock 3 mapped to illegal pblock 3 (length 1) [ 741.595657][ T969] lo speed is unknown, defaulting to 1000 [ 741.629390][ T971] lo speed is unknown, defaulting to 1000 [ 742.159801][ T802] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 742.383216][ T178] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 742.522680][ T178] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 742.535382][ T178] EXT4-fs (loop8): This should not happen!! Data will be lost [ 742.535382][ T178] [ 742.588357][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 742.663917][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=982 comm=syz.8.9861 [ 742.691011][ T980] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 742.691995][ T1035] IPVS: starting estimator thread 0... [ 742.699102][ T982] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9861'. [ 742.748062][ T990] loop9: detected capacity change from 0 to 512 [ 742.759290][ T982] bond0: entered promiscuous mode [ 742.765143][ T982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.780368][ T982] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7 [ 742.790376][ T985] IPVS: using max 2256 ests per chain, 112800 per kthread [ 742.814348][ T990] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.9864: bad orphan inode 11862016 [ 742.838840][ T990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 742.840561][ T982] bond0 (unregistering): Released all slaves [ 742.862586][ T990] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.992078][ T1010] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 743.012125][ T1004] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.9864: corrupted inode contents [ 743.014492][ T1010] SELinux: failed to load policy [ 743.025149][ T1004] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #19: comm syz.9.9864: mark_inode_dirty error [ 743.051035][ T1004] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.9864: corrupted inode contents [ 743.071519][ T1004] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #19: comm syz.9.9864: mark_inode_dirty error [ 743.090745][ T1012] hub 1-0:1.0: USB hub found [ 743.095886][ T1012] hub 1-0:1.0: 8 ports detected [ 743.108082][ T1004] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #19: comm syz.9.9864: mark inode dirty (error -117) [ 743.129823][ T1004] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 743.173557][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 743.333894][ T1038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=1038 comm=syz.8.9881 [ 743.370124][ T1038] bond0: entered promiscuous mode [ 743.380861][ T1038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.407427][ T1038] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7 [ 743.425266][ T1038] bond0 (unregistering): Released all slaves [ 743.529573][ T1054] loop8: detected capacity change from 0 to 512 [ 743.551823][ T1054] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.9887: bad orphan inode 11862016 [ 743.568826][ T1054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 743.584805][ T1054] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.622662][ T1064] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 743.629492][ T1064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 743.637363][ T1064] vhci_hcd vhci_hcd.0: Device attached [ 743.665075][ T1067] vhci_hcd: connection closed [ 743.665311][T21343] vhci_hcd: stop threads [ 743.675620][T21343] vhci_hcd: release socket [ 743.680499][T21343] vhci_hcd: disconnect device [ 743.697819][ T1071] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #19: comm syz.8.9887: corrupted inode contents [ 743.714024][ T1071] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #19: comm syz.8.9887: mark_inode_dirty error [ 743.727404][ T1071] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #19: comm syz.8.9887: corrupted inode contents [ 743.751999][ T1071] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #19: comm syz.8.9887: mark_inode_dirty error [ 743.766171][ T1071] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #19: comm syz.8.9887: mark inode dirty (error -117) [ 743.790809][ T1071] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 743.794644][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 743.794664][ T29] audit: type=1326 audit(1759480753.469:77191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 743.841598][ T29] audit: type=1326 audit(1759480753.511:77192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 743.866814][ T29] audit: type=1326 audit(1759480753.511:77193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 743.891260][ T29] audit: type=1326 audit(1759480753.511:77194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 743.915748][ T29] audit: type=1326 audit(1759480753.511:77195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 743.940135][ T29] audit: type=1326 audit(1759480753.511:77196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 743.965026][ T29] audit: type=1326 audit(1759480753.511:77197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 743.989177][ T29] audit: type=1326 audit(1759480753.511:77198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 744.014031][ T29] audit: type=1326 audit(1759480753.511:77199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 744.038647][ T29] audit: type=1326 audit(1759480753.511:77200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.3.9896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e6cffeec9 code=0x7ffc0000 [ 744.068906][ T1085] loop4: detected capacity change from 0 to 512 [ 744.091082][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 744.107177][ T1085] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.9900: bad orphan inode 11862016 [ 744.118791][ T1085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 744.134206][ T1085] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.531273][ T1090] lo speed is unknown, defaulting to 1000 [ 744.616155][T30946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 744.636280][ T1100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=1100 comm=syz.8.9899 [ 744.753905][ T1101] bond0: entered promiscuous mode [ 744.766889][ T1101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.815014][ T1101] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7 [ 744.831857][ T1108] loop9: detected capacity change from 0 to 8192 [ 744.856409][ T1100] bond0 (unregistering): Released all slaves [ 745.074366][ T1117] netlink: 'syz.8.9910': attribute type 39 has an invalid length. [ 745.125132][ T1115] loop3: detected capacity change from 0 to 128 [ 745.135019][ T1117] bridge0: entered promiscuous mode [ 745.166481][ T1115] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 745.178533][ T1117] macsec0: entered promiscuous mode [ 745.208292][ T1117] bridge0: port 3(macsec0) entered blocking state [ 745.215059][ T1117] bridge0: port 3(macsec0) entered disabled state [ 745.225720][ T1115] System zones: 1-3, 19-19, 35-36 [ 745.262157][ T1115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 745.288952][ T1117] macsec0: entered allmulticast mode [ 745.294421][ T1117] bridge0: entered allmulticast mode [ 745.311249][ T1115] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 745.376421][ T1117] macsec0: left allmulticast mode [ 745.381773][ T1117] bridge0: left allmulticast mode [ 745.405512][ T1117] bridge0: left promiscuous mode [ 745.411175][ T1129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 745.417851][ T1129] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 745.425637][ T1129] vhci_hcd vhci_hcd.0: Device attached [ 745.438556][ T1115] EXT4-fs (loop3): shut down requested (0) [ 745.461769][ T1131] vhci_hcd: connection closed [ 745.464412][ T4641] vhci_hcd: stop threads [ 745.474181][ T4641] vhci_hcd: release socket [ 745.478953][ T4641] vhci_hcd: disconnect device [ 745.508720][T28198] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 745.665322][ T1142] netlink: 'syz.9.9917': attribute type 10 has an invalid length. [ 745.677772][ T1142] team0: Device hsr_slave_0 failed to register rx_handler [ 745.699742][ T1145] loop3: detected capacity change from 0 to 512 [ 745.718764][ T1142] lo speed is unknown, defaulting to 1000 [ 745.829111][ T1145] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.9919: bad orphan inode 11862016 [ 745.918783][ T1145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 746.070574][ T1145] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.146288][ T1162] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 746.153202][ T1163] netlink: 'syz.0.9924': attribute type 39 has an invalid length. [ 746.182158][ T1162] SELinux: failed to load policy [ 746.224138][ T1167] bridge0: entered promiscuous mode [ 746.237742][ T1165] SELinux: failed to load policy [ 746.238928][ T1167] macsec1: entered promiscuous mode [ 746.254885][ T1167] bridge0: port 3(macsec1) entered blocking state [ 746.261511][ T1167] bridge0: port 3(macsec1) entered disabled state [ 746.274245][ T1168] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.9919: corrupted inode contents [ 746.287237][ T1167] macsec1: entered allmulticast mode [ 746.292974][ T1167] bridge0: entered allmulticast mode [ 746.316243][ T1167] macsec1: left allmulticast mode [ 746.321528][ T1167] bridge0: left allmulticast mode [ 746.334283][ T1168] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.9919: mark_inode_dirty error [ 746.348001][ T1167] bridge0: left promiscuous mode [ 746.404098][ T1168] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.9919: corrupted inode contents [ 746.425035][ T1169] lo speed is unknown, defaulting to 1000 [ 746.429544][ T1168] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.9919: mark_inode_dirty error [ 746.450389][ T1170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=1170 comm=syz.9.9926 [ 746.463464][ T1168] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.9919: mark inode dirty (error -117) [ 746.496495][ T1168] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 746.547527][ T1178] loop8: detected capacity change from 0 to 8192 [ 746.577207][T28198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 746.722529][ T1197] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 746.745785][ T1197] SELinux: failed to load policy [ 746.761013][ T1196] loop3: detected capacity change from 0 to 512 [ 746.770141][ T1196] EXT4-fs: Ignoring removed bh option [ 746.782915][ T1196] EXT4-fs: Ignoring removed mblk_io_submit option [ 746.818473][ T1196] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 746.843687][ T1196] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 746.859660][ T1196] EXT4-fs (loop3): orphan cleanup on readonly fs [ 746.887950][ T1196] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9935: Failed to acquire dquot type 1 [ 746.909137][ T1196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9935: Invalid block bitmap block 0 in block_group 0 [ 746.923972][ T1196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9935: Invalid block bitmap block 0 in block_group 0 [ 746.940234][ T1196] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9935: Invalid block bitmap block 0 in block_group 0 [ 746.957584][ T1196] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9935: Failed to acquire dquot type 1 [ 746.970055][ T1196] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.9935: Failed to acquire dquot type 1 [ 746.985306][ T1196] EXT4-fs (loop3): 1 orphan inode deleted [ 746.992617][ T1196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 747.061625][ T1204] loop4: detected capacity change from 0 to 764 [ 747.076477][ T1204] rock: directory entry would overflow storage [ 747.083077][ T1204] rock: sig=0x4654, size=5, remaining=4 [ 747.151484][ T1211] loop8: detected capacity change from 0 to 1024 [ 747.159539][ T1209] SELinux: failed to load policy [ 747.165777][ T1211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 747.183823][ T1211] EXT4-fs: Ignoring removed nobh option [ 747.237172][ T1215] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 747.247192][ T1215] SELinux: failed to load policy [ 747.311850][ T1211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.342417][ T1211] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.9940: Allocating blocks 497-513 which overlap fs metadata [ 747.395203][ T1210] EXT4-fs (loop8): pa ffff888106a68b60: logic 16, phys. 145, len 23 [ 747.403324][ T1210] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 747.416925][T28198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.730196][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.783341][ T1233] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 747.793443][ T1233] SELinux: failed to load policy [ 747.831337][ T1235] netlink: 'syz.4.9949': attribute type 10 has an invalid length. [ 747.854294][ T1235] team0: Port device hsr_slave_0 added [ 747.895160][ T1235] lo speed is unknown, defaulting to 1000 [ 747.913372][ T1237] loop8: detected capacity change from 0 to 512 [ 747.939994][ T1237] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.9950: bad orphan inode 11862016 [ 747.971378][ T1237] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 748.004429][ T1239] loop3: detected capacity change from 0 to 8192 [ 748.054309][ T1237] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.069499][ T1246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=1246 comm=syz.0.9952 [ 748.084188][ T1246] __nla_validate_parse: 14 callbacks suppressed [ 748.084210][ T1246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9952'. [ 748.142903][ T1246] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7 [ 748.157747][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 748.183326][ T1246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9952'. [ 748.234134][ T1253] netlink: 'syz.4.9954': attribute type 39 has an invalid length. [ 748.246169][ T1224] loop9: detected capacity change from 0 to 512 [ 748.278092][ T1224] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 748.317192][ T1224] EXT4-fs (loop9): 1 truncate cleaned up [ 748.320025][ T1256] bridge0: entered promiscuous mode [ 748.329131][ T1224] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.342322][ T1256] macsec1: entered promiscuous mode [ 748.343543][ T1256] bridge0: port 3(macsec1) entered blocking state [ 748.354607][ T1256] bridge0: port 3(macsec1) entered disabled state [ 748.372387][ T1256] macsec1: entered allmulticast mode [ 748.377854][ T1256] bridge0: entered allmulticast mode [ 748.396141][ T1256] macsec1: left allmulticast mode [ 748.401493][ T1256] bridge0: left allmulticast mode [ 748.454555][ T1256] bridge0: left promiscuous mode [ 748.506437][ T1268] netlink: 288 bytes leftover after parsing attributes in process `syz.3.9959'. [ 748.978960][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 749.053524][ T1294] netlink: 'syz.3.9965': attribute type 10 has an invalid length. [ 749.092049][ T1294] team0: Device hsr_slave_0 failed to register rx_handler [ 749.280995][ T1297] lo speed is unknown, defaulting to 1000 [ 749.290202][ T1301] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 749.296896][ T1301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 749.305332][ T1301] vhci_hcd vhci_hcd.0: Device attached [ 749.349617][ T1302] vhci_hcd: connection closed [ 749.349769][T21338] vhci_hcd: stop threads [ 749.359790][T21338] vhci_hcd: release socket [ 749.364498][T21338] vhci_hcd: disconnect device [ 749.528465][ T1314] loop9: detected capacity change from 0 to 512 [ 749.669060][ T1314] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.9971: bad orphan inode 11862016 [ 749.901376][ T1322] SELinux: failed to load policy [ 749.994020][ T1324] loop4: detected capacity change from 0 to 512 [ 750.023210][ T1324] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.9974: bad orphan inode 11862016 [ 750.054822][ T1324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 750.082327][ T1324] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.114111][ T1333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.122999][ T1333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.126508][ T1314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 750.147896][ T1314] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.269721][ T1339] SELinux: syz.9.9978 (1339) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 750.346236][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 750.346252][ T29] audit: type=1326 audit(1759481016.348:77309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.386350][ T1343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9980'. [ 750.395779][ T1343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9980'. [ 750.407190][ T29] audit: type=1326 audit(1759481016.380:77310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.407864][ T1343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9980'. [ 750.432133][ T29] audit: type=1326 audit(1759481016.380:77311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.440850][ T1343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9980'. [ 750.466279][ T29] audit: type=1326 audit(1759481016.380:77312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.499388][ T29] audit: type=1326 audit(1759481016.380:77313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.523072][ T29] audit: type=1326 audit(1759481016.380:77314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.547507][ T29] audit: type=1326 audit(1759481016.380:77315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.571809][ T29] audit: type=1326 audit(1759481016.380:77316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.596804][ T29] audit: type=1326 audit(1759481016.380:77317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.621815][ T29] audit: type=1326 audit(1759481016.380:77318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1338 comm="syz.9.9978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 750.655806][ T1347] loop4: detected capacity change from 0 to 1024 [ 750.662555][ T1347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 750.669613][ T1347] EXT4-fs: Ignoring removed nobh option [ 750.801438][ T1356] SELinux: failed to load policy [ 750.833793][ T1358] lo speed is unknown, defaulting to 1000 [ 751.204791][ T1360] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.9982: Allocating blocks 497-513 which overlap fs metadata [ 751.452889][ T1367] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9987'. [ 751.568997][ T1371] SELinux: syz.8.9988 (1371) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 751.767972][ T1373] loop3: detected capacity change from 0 to 8192 [ 751.865756][ T1346] EXT4-fs (loop4): pa ffff888106abfbd0: logic 16, phys. 145, len 23 [ 751.873958][ T1346] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 751.943298][ T1378] loop4: detected capacity change from 0 to 512 [ 751.988935][ T1378] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.9991: bad orphan inode 11862016 [ 752.001337][ T1378] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.136065][ T1391] 9pnet_fd: Insufficient options for proto=fd [ 752.142970][ T1388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9995'. [ 752.155412][ T1388] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9995'. [ 752.189657][ T1395] netlink: 'syz.4.9998': attribute type 39 has an invalid length. [ 752.206407][ T1395] bridge0: entered promiscuous mode [ 752.213301][ T1395] macsec1: entered promiscuous mode [ 752.219684][ T1395] bridge0: port 3(macsec1) entered blocking state [ 752.227123][ T1395] bridge0: port 3(macsec1) entered disabled state [ 752.239207][ T1395] macsec1: entered allmulticast mode [ 752.244672][ T1395] bridge0: entered allmulticast mode [ 752.268999][ T1395] macsec1: left allmulticast mode [ 752.274099][ T1395] bridge0: left allmulticast mode [ 752.290054][ T1395] bridge0: left promiscuous mode [ 752.328629][ T1398] lo speed is unknown, defaulting to 1000 [ 752.754537][ T1403] netlink: 'syz.4.10000': attribute type 10 has an invalid length. [ 752.780984][ T1403] lo speed is unknown, defaulting to 1000 [ 752.932563][ T1409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10001'. [ 752.941908][ T1409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10001'. [ 753.092685][ T1410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10001'. [ 753.102057][ T1410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10001'. [ 753.264612][ T1417] loop4: detected capacity change from 0 to 512 [ 753.302340][ T1417] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.10003: bad orphan inode 11862016 [ 753.310605][ T1412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10002'. [ 753.323892][ T1417] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.351342][ T1412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10002'. [ 753.492288][ T1429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10007'. [ 753.501808][ T1429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10007'. [ 753.517934][ T1429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10007'. [ 753.527109][ T1429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10007'. [ 753.580075][ T1433] 9pnet_fd: Insufficient options for proto=fd [ 753.989608][ T1445] lo speed is unknown, defaulting to 1000 [ 754.828052][ T1450] lo speed is unknown, defaulting to 1000 [ 755.305990][ T1453] loop9: detected capacity change from 0 to 512 [ 755.320278][ T1453] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10014: bad orphan inode 11862016 [ 755.333653][ T1453] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.605595][ T1462] loop3: detected capacity change from 0 to 1024 [ 755.623169][ T1462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 755.638690][ T1462] EXT4-fs: Ignoring removed nobh option [ 756.000974][ T1474] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.10018: Allocating blocks 497-513 which overlap fs metadata [ 756.186129][ T1476] 9pnet_fd: Insufficient options for proto=fd [ 756.247420][ T1462] EXT4-fs (loop3): pa ffff888106abfa80: logic 16, phys. 145, len 23 [ 756.255629][ T1462] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 756.399476][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 756.399494][ T29] audit: type=1326 audit(1759481534.705:77394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.477386][ T29] audit: type=1326 audit(1759481534.705:77395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.502778][ T29] audit: type=1326 audit(1759481534.705:77396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.528712][ T29] audit: type=1326 audit(1759481534.705:77397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.553031][ T29] audit: type=1326 audit(1759481534.705:77398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.578251][ T29] audit: type=1326 audit(1759481534.705:77399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4550c4d710 code=0x7ffc0000 [ 756.592991][ T1495] loop8: detected capacity change from 0 to 512 [ 756.603514][ T29] audit: type=1326 audit(1759481534.705:77400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4550c4d710 code=0x7ffc0000 [ 756.633867][ T29] audit: type=1326 audit(1759481534.705:77401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.659015][ T29] audit: type=1326 audit(1759481534.705:77402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.683951][ T29] audit: type=1326 audit(1759481534.705:77403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1488 comm="syz.9.10027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4550c4eec9 code=0x7ffc0000 [ 756.719896][ T1495] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 756.728012][ T1495] EXT4-fs (loop8): orphan cleanup on readonly fs [ 756.736397][ T1495] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.10028: corrupted inode contents [ 756.759461][ T1495] EXT4-fs (loop8): Remounting filesystem read-only [ 756.768439][ T1495] EXT4-fs (loop8): 1 truncate cleaned up [ 756.810388][ T87] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 756.821453][ T87] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 756.834594][ T87] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 756.850330][ T1507] loop9: detected capacity change from 0 to 1764 [ 756.854863][ T1503] SELinux: failed to load policy [ 756.864127][ T1495] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 756.871275][ T1495] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 756.879003][ T1495] vhci_hcd vhci_hcd.0: Device attached [ 756.891723][ T1514] loop3: detected capacity change from 0 to 512 [ 756.932779][ T1516] SELinux: syz.4.10038 (1516) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 756.989279][ T1514] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.10037: bad orphan inode 11862016 [ 757.001175][ T1514] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.048240][ T1510] vhci_hcd: connection closed [ 757.048638][ T37] vhci_hcd: stop threads [ 757.058417][ T37] vhci_hcd: release socket [ 757.063681][ T37] vhci_hcd: disconnect device [ 757.069338][ T3464] vhci_hcd: vhci_device speed not set [ 757.095362][ T1530] lo speed is unknown, defaulting to 1000 [ 757.249566][ T1552] loop3: detected capacity change from 0 to 512 [ 757.263995][ T1552] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.10049: bad orphan inode 11862016 [ 757.281955][ T1552] EXT4-fs mount: 15 callbacks suppressed [ 757.281986][ T1552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 757.321156][ T1530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17903 sclass=netlink_route_socket pid=1530 comm=syz.9.10041 [ 757.338874][ T1552] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.496857][ T1566] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.10049: corrupted inode contents [ 757.517555][ T1566] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #19: comm syz.3.10049: mark_inode_dirty error [ 757.535409][ T1566] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #19: comm syz.3.10049: corrupted inode contents [ 757.551659][ T1566] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #19: comm syz.3.10049: mark_inode_dirty error [ 757.568805][ T1566] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #19: comm syz.3.10049: mark inode dirty (error -117) [ 757.582246][ T1566] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 757.613187][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.639979][T28198] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 757.676368][ T1580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=1580 comm=syz.0.10061 [ 757.696538][ T1580] bond1: entered promiscuous mode [ 757.702169][ T1580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 757.709731][ T1576] SELinux: failed to load policy [ 757.725484][ T1580] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x7 [ 757.742622][ T1580] __nla_validate_parse: 7 callbacks suppressed [ 757.742643][ T1580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10061'. [ 757.763559][ T1580] bond1 (unregistering): Released all slaves [ 757.922971][ T1599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10066'. [ 758.494446][ T1602] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10068'. [ 758.503883][ T1602] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10068'. [ 758.516383][ T1602] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10068'. [ 758.525865][ T1602] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10068'. [ 758.558071][ T1604] loop8: detected capacity change from 0 to 512 [ 758.585577][ T1604] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.10069: bad orphan inode 11862016 [ 758.602360][ T1604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 758.623321][ T1604] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.688767][ T1613] loop9: detected capacity change from 0 to 512 [ 758.698640][ T1614] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #19: comm syz.8.10069: corrupted inode contents [ 758.713742][ T1614] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #19: comm syz.8.10069: mark_inode_dirty error [ 758.727888][ T1614] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #19: comm syz.8.10069: corrupted inode contents [ 758.745817][ T1614] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #19: comm syz.8.10069: mark_inode_dirty error [ 758.762399][ T1613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.777520][ T1614] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #19: comm syz.8.10069: mark inode dirty (error -117) [ 758.790862][ T1613] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 758.805664][ T1614] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 758.819205][ T1613] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.10072: corrupted inode contents [ 758.835288][ T1613] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #2: comm syz.9.10072: mark_inode_dirty error [ 758.863826][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 758.878657][ T1613] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.10072: corrupted inode contents [ 758.898704][ T1620] batadv_slave_1: entered promiscuous mode [ 758.905074][ T1620] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10072'. [ 758.924725][ T1620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.940894][ T1620] batadv_slave_1 (unregistering): left promiscuous mode [ 758.959008][ T1620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.128506][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.149345][ T1633] loop9: detected capacity change from 0 to 512 [ 759.168312][ T1633] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10078: bad orphan inode 11862016 [ 759.181801][ T1633] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 759.195292][ T1633] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.384466][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 759.643492][ T1638] loop9: detected capacity change from 0 to 512 [ 759.662121][ T1638] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10079: bad orphan inode 11862016 [ 759.675490][ T1638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 759.688660][ T1638] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.766825][ T1646] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.10079: corrupted inode contents [ 759.780076][ T1646] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #19: comm syz.9.10079: mark_inode_dirty error [ 759.792037][ T1646] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.10079: corrupted inode contents [ 759.804923][ T1646] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #19: comm syz.9.10079: mark_inode_dirty error [ 759.900746][ T1649] lo speed is unknown, defaulting to 1000 [ 760.292022][ T1656] netlink: 'syz.8.10085': attribute type 10 has an invalid length. [ 760.300937][ T1656] team0: Device hsr_slave_0 failed to register rx_handler [ 760.335962][ T1656] lo speed is unknown, defaulting to 1000 [ 760.393665][ T1646] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #19: comm syz.9.10079: mark inode dirty (error -117) [ 760.435669][ T1646] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 760.484475][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 760.713226][ T1660] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10087'. [ 760.796478][ T1671] loop9: detected capacity change from 0 to 512 [ 760.843206][ T1671] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.10086: bad orphan inode 11862016 [ 760.881314][ T1671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 760.897150][ T1671] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.908565][ T1677] vhci_hcd: invalid port number 96 [ 760.913840][ T1677] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 761.066657][ T1683] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.10086: corrupted inode contents [ 761.091805][ T1683] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #19: comm syz.9.10086: mark_inode_dirty error [ 761.115643][ T1683] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #19: comm syz.9.10086: corrupted inode contents [ 761.156616][ T1683] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #19: comm syz.9.10086: mark_inode_dirty error [ 761.188184][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 761.188208][ T29] audit: type=1326 audit(1759481539.733:77503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.219196][ T29] audit: type=1326 audit(1759481539.733:77504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.243437][ T29] audit: type=1326 audit(1759481539.733:77505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.269060][ T29] audit: type=1326 audit(1759481539.733:77506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.293308][ T29] audit: type=1326 audit(1759481539.733:77507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.318574][ T29] audit: type=1326 audit(1759481539.733:77508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.319082][ T1683] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #19: comm syz.9.10086: mark inode dirty (error -117) [ 761.343623][ T29] audit: type=1326 audit(1759481539.733:77509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.357607][ T29] audit: type=1326 audit(1759481539.744:77510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.405950][ T29] audit: type=1326 audit(1759481539.744:77511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.409107][ T1693] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10096'. [ 761.430080][ T29] audit: type=1326 audit(1759481539.744:77512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1688 comm="syz.8.10094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efce7ebeec9 code=0x7ffc0000 [ 761.439574][ T1693] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10096'. [ 761.456111][ T1683] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 761.539865][ T1700] SELinux: syz.0.10098 (1700) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 761.561003][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 761.571844][ T1699] netlink: 'syz.8.10099': attribute type 10 has an invalid length. [ 761.581938][ T1699] : (slave hsr0): The slave device specified does not support setting the MAC address [ 761.595840][ T1699] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 761.608453][ T1699] : (slave hsr0): Error -22 calling dev_set_mtu [ 761.622285][ T1699] loop8: detected capacity change from 0 to 512 [ 761.634641][ T1699] EXT4-fs (loop8): orphan cleanup on readonly fs [ 761.641696][ T1699] EXT4-fs warning (device loop8): ext4_xattr_inode_get:556: inode #11: comm syz.8.10099: EA inode hash validation failed [ 761.656668][ T1699] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.10099: corrupted inode contents [ 761.669033][ T1699] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #15: comm syz.8.10099: mark_inode_dirty error [ 761.682952][ T1699] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #15: comm syz.8.10099: corrupted inode contents [ 761.696547][ T1699] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #15: comm syz.8.10099: mark_inode_dirty error [ 761.712669][ T1699] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #15: comm syz.8.10099: mark inode dirty (error -117) [ 761.725871][ T1699] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 761.737005][ T1699] EXT4-fs (loop8): 1 orphan inode deleted [ 761.743333][ T1699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 761.775577][T28605] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.250402][ T1728] netlink: 'syz.4.10107': attribute type 10 has an invalid length. [ 762.294206][ T1728] lo speed is unknown, defaulting to 1000 [ 762.458172][ T1740] netlink: 'syz.8.10112': attribute type 39 has an invalid length. [ 762.471152][ T1740] bridge0: entered promiscuous mode [ 762.476732][ T1740] macsec0: entered promiscuous mode [ 762.483340][ T1740] bridge0: port 3(macsec0) entered blocking state [ 762.490133][ T1740] bridge0: port 3(macsec0) entered disabled state [ 762.496935][ T1740] macsec0: entered allmulticast mode [ 762.502292][ T1740] bridge0: entered allmulticast mode [ 762.508404][ T1740] macsec0: left allmulticast mode [ 762.514070][ T1740] bridge0: left allmulticast mode [ 762.519891][ T1740] bridge0: left promiscuous mode [ 762.617015][ T1743] SELinux: syz.8.10113 (1743) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 762.640802][ T1745] netlink: 'syz.9.10114': attribute type 10 has an invalid length. [ 762.649208][ T1745] : (slave hsr0): The slave device specified does not support setting the MAC address [ 762.659455][ T1745] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 762.672092][ T1745] : (slave hsr0): Error -22 calling dev_set_mtu [ 762.683855][ T1745] loop9: detected capacity change from 0 to 512 [ 762.691696][ T1745] EXT4-fs (loop9): orphan cleanup on readonly fs [ 762.698730][ T1745] EXT4-fs warning (device loop9): ext4_xattr_inode_get:556: inode #11: comm syz.9.10114: EA inode hash validation failed [ 762.712096][ T1745] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.10114: corrupted inode contents [ 762.724729][ T1745] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #15: comm syz.9.10114: mark_inode_dirty error [ 762.737872][ T1745] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #15: comm syz.9.10114: corrupted inode contents [ 762.751433][ T1745] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #15: comm syz.9.10114: mark_inode_dirty error [ 762.763977][ T1745] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #15: comm syz.9.10114: mark inode dirty (error -117) [ 762.777641][ T1745] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 762.786992][ T1745] EXT4-fs (loop9): 1 orphan inode deleted [ 762.793222][ T1745] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 762.818003][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.887942][ T1755] loop9: detected capacity change from 0 to 512 [ 762.894901][ T1755] EXT4-fs: Ignoring removed mblk_io_submit option [ 762.901996][ T1755] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 762.913727][ T1755] EXT4-fs (loop9): 1 truncate cleaned up [ 762.920498][ T1755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.213721][ T1758] ================================================================== [ 763.221871][ T1758] BUG: KCSAN: data-race in __xa_set_mark / filemap_write_and_wait_range [ 763.230248][ T1758] [ 763.232595][ T1758] write to 0xffff88811a84edfc of 4 bytes by task 1755 on cpu 0: [ 763.240601][ T1758] __xa_set_mark+0x172/0x1a0 [ 763.245400][ T1758] __folio_mark_dirty+0x3af/0x4d0 [ 763.250551][ T1758] mark_buffer_dirty+0x11e/0x210 [ 763.255528][ T1758] block_write_end+0x12d/0x210 [ 763.260325][ T1758] ext4_write_end+0x134/0x730 [ 763.265128][ T1758] generic_perform_write+0x312/0x490 [ 763.270712][ T1758] ext4_buffered_write_iter+0x1ee/0x3c0 [ 763.276277][ T1758] ext4_file_write_iter+0xdbf/0xf00 [ 763.281595][ T1758] iter_file_splice_write+0x666/0xa60 [ 763.287127][ T1758] direct_splice_actor+0x156/0x2a0 [ 763.292286][ T1758] splice_direct_to_actor+0x312/0x680 [ 763.297699][ T1758] do_splice_direct+0xda/0x150 [ 763.302487][ T1758] do_sendfile+0x380/0x650 [ 763.307205][ T1758] __x64_sys_sendfile64+0x105/0x150 [ 763.312616][ T1758] x64_sys_call+0x2bb4/0x3000 [ 763.317413][ T1758] do_syscall_64+0xd2/0x200 [ 763.321941][ T1758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.328023][ T1758] [ 763.330382][ T1758] read to 0xffff88811a84edfc of 4 bytes by task 1758 on cpu 1: [ 763.338282][ T1758] filemap_write_and_wait_range+0xfc/0x340 [ 763.344500][ T1758] ext4_file_write_iter+0xe04/0xf00 [ 763.350474][ T1758] iter_file_splice_write+0x666/0xa60 [ 763.356233][ T1758] direct_splice_actor+0x156/0x2a0 [ 763.361526][ T1758] splice_direct_to_actor+0x312/0x680 [ 763.366944][ T1758] do_splice_direct+0xda/0x150 [ 763.371830][ T1758] do_sendfile+0x380/0x650 [ 763.376347][ T1758] __x64_sys_sendfile64+0x105/0x150 [ 763.381649][ T1758] x64_sys_call+0x2bb4/0x3000 [ 763.386491][ T1758] do_syscall_64+0xd2/0x200 [ 763.391117][ T1758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.397115][ T1758] [ 763.399689][ T1758] value changed: 0x00000021 -> 0x0a000021 [ 763.405864][ T1758] [ 763.408214][ T1758] Reported by Kernel Concurrency Sanitizer on: [ 763.414386][ T1758] CPU: 1 UID: 0 PID: 1758 Comm: syz.9.10117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 763.426054][ T1758] Tainted: [W]=WARN [ 763.429881][ T1758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 763.440042][ T1758] ================================================================== [ 763.769586][T25737] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.