last executing test programs: 2m40.214331087s ago: executing program 32 (id=1891): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000ff0f00000900000000000000", @ANYRES32, @ANYRES32], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = io_uring_setup(0x6e4a, &(0x7f0000000e80)={0x0, 0x4c91, 0x8, 0x3, 0x296}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1m50.562908371s ago: executing program 33 (id=2676): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = dup(r0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) write$cgroup_pid(r2, &(0x7f0000000440), 0x12) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000a80)) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\x8c\x9a\x9a\xf3+}[@\x00\xe0G\xae)\x02\x00\x00\x00\x83\xa8\x9a\xbet\x93\tg\x9b\xca\x8a\x86\xd9aZ)\x06^\xd3\xa5\xc2\x9a\xf0\xec\xd9\xf6\x06Y\xb5\xcf}`\xd8E\xb4h\xaco\xa4\xb8^\xaf\xd9\xb8U/<\xf7\xa2\"pz$\xd0\xfb\x86\xdf\x1f\xc8\xa1\x9c\xc4\x9d\xbd\xa1\xa4{\x14i<\xc7Cv\x8d\xcd\n!c\x81(\x1b]\xbc\xa8\xc2\xc9;nDq\x12\x98X[^7tj\xbe\xd1\x8a\xc5\xfd\xb5D\xea6\xe4\x17\x0f\xea=\xa4\x99IH\xfc\x93\x9b\xd0*u\x17\x87\x1b\xed<\xe4\xc9i\xea;K\xe4M\xb3\x91\xe7\x01\x7fu\xce\n\x01=h\xbd\xb9\x04?\x94\xf8\xaa\x19\x97)\xb5\xb6[\xee\x80:\xb8\xd3M:\x11\f\xb4I\xab\xb6\x93\xd9\xc1\xbe\xc0\xee\xd7\x11^[AN\xda\xackqBqZ\xfe\x12\x02\xfd\x9e-\\\xb1\x10\xe6\x86\xb9\x80]G\x84\x95@2\r\xc4Q\xd5\xfcuG\xf6\x99p\x9a-\xb0\xae\xca(\"\xb6f\xcf\xbf\xb1\x82\xc6\x02\x1c\xac\xed\x00\xc1S\xa0&\x11 \x83Y\xd9\xbe\xc87\aHa\x97\x19\xfdc\xf1\xfa$\x94/\xb7\xca\xa4\xa3\x9e\xe7G\x06\xbe\a\x8b\xfaR\xccQ\x1fW\x05\x0f\xaf^\xf7&\xc7g\x05h\x9a\xe2\xac\xa5(\xac\xc9\xe3c\x1e\xe4\xd8^z\xb3r&\xad\x99,\xb6\x1b\vf\x8d\n\x05\xae\xe8.73\x12\xcb\xdc\xe8\x13\x7f?\xc1K\xbd\x9c\xf1\x16I\x1f\xad\xa8k\x89K\xb5.q\xfe\x93\xd0#\x10\x17\xc67k\'\xe26Q\xcd\xb8u\xf1\x8e') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x144, r9, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m44.795115404s ago: executing program 34 (id=2757): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x80088c0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 1m26.910504169s ago: executing program 35 (id=2848): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', &(0x7f0000004780)=@fuse={0xc}, &(0x7f00000047c0), 0x1200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffe, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000180), 0x20000000, 0x2000000}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000200000000000000000001819", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="28dc49e5500bcc8c30a3631755a010ff13211407e2a0bc80280575e4d404eccbfd439e37ff0fc0b9506611ab6e26acef75c0f9c8ab5ebe7adb4514880a8733e646279cf838ab7195ae746c9fd83061877cd80a3ea436d2902d738865ce0be2681e9140dbebe74250545f1fbcfefd8018ea0661e0a96284"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108040, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffddbf7f, 0x1000, 0x0, 0x1}, 0x20) 1m25.218567231s ago: executing program 1 (id=2997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 1m24.685789649s ago: executing program 1 (id=2999): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000040)={0x4, 0xbc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000711024000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000040)={0x4, 0xbc}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000711024000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') (async) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) (async) 1m24.469580168s ago: executing program 1 (id=3001): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) io_uring_enter(r0, 0x567, 0x60, 0x0, 0x0, 0x0) 1m24.340610977s ago: executing program 1 (id=3003): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) open(&(0x7f0000000000)='./file2\x00', 0x0, 0x0) (fail_nth: 5) 1m24.137466316s ago: executing program 1 (id=3004): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/93, &(0x7f0000000100)=0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x508, &(0x7f0000000b00)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGk3ZB4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcONSDkj8iEAbJA6uZjzJerP2JtokdhQ/jzSa+Wa8ft9vs/N9O28SfwGMrJsRsR8RExFxPyJm8/NJvsV7nS193aODhyuHBw9Xkmi3P/hXkl1Pz0XXn0ndyN+zFBE/+l7ET5On4zZ39zaWa7Xqdt6eb9W35pu7e3fW68tr1bXqZqWytLi08M7dtysX1tfX6hP50Vc/++P+t36epjWTn+nux0XqdL14HCc1HhE/uIxgQzCW92di2InwXAoR8XJEvJ7d/7Mxln01AYDrrN2ejfZsdxsAuO4KWQ0sKZTzWsBMFArlcqeG90pMF2qNZuv2g8bO5mqnVjYXxcKD9Vp1Ia8VzkUxSduL2fHjduVE+25EvBQRv5ycytrllUZtdZj/8QGAEXbjxPz/38nO/A8AXHOlYScAAAyc+R8ARk/f+f/+YPMAAAbH8z8AjJ7O/D817DQAgAHy/A8Ao+dM87/yAABcFz98//10ax/mn3+9+uHuzkbjwzur1eZGub6zUl5pbG+V1xqNtewze+qnvV+t0dhafCt2Ppr79lazNd/c3btXb+xstu5ln+t9r1rMXrU/gJ4BAP289Nqnf0nSGfndqWyLrrUcikPNDLhshWEnAAzN2LATAIbGal8wus7xjK88ANdEjyV6n1Dq9RNA7Xa7fXkpAZfs1pfU/2FUddX//RYQjBj1fxhd6v8wutrt5Kxr/sdZXwgAXG1q/ECf7/+/nO9/l39z4CerJ1/xyWVmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfb0fq/5Xwt8JkoFMrlJF6IiLkoJg/Wa9WFiHgxIv48WZxM24tDzhkAOK/C35N8/a9bs2/OPHHp1RvHhxMR8bNff/Crj5Zbre0/RUwk/548Ot/6JD9fGXz2AMDpjubpbN/1IP/o4OHK0TbIfP7x3YgodeIfHkzE4XH88RjP9qUoRsT0f5K83ZF01S7OY//jiPhir/4nMZPVQDorn56Mn8Z+YaDxC0/EL2TXOvv07+ILF5ALjJpP0/HnvV73XyFuZvve938pG6HOLx//0rdaOczGwMfxj8a/sT7j382zxnjrD9/vHE09fe3jiC+PRxzFPuwaf47iJ33iv3nG+H/9yquv97vW/k3EregdvzvWfKu+Nd/c3buzXl9eq65VNyuVpcWlhXfuvl2Zz2rU8/1ng3++e/vFftfS/k/3iV86pf9fP2P/f/v/+z/+2jPif/ONXvEL8coz4qdz4jf6vOfkifby9O9L/XJL46/26f9pX//bp3U899nf9p5aNhwAGJ7m7t7Gcq1W3Xbg4OofpP9kr0AaPQ++M6hYE9H70i/e6NzTJy61288Vq9+IcRFVN+AqOL7pI+J/w04GAAAAAAAAAAAAAADoaRC/sTTsPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fR4AAP//rGLPlA==") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mount$9p_xen(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x800000, &(0x7f0000000900)=ANY=[@ANYBLOB="7472616e733d78656e06646566636f6e746578743d756e636f6e66696e65645f752c00"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x0, 0x0, {0x24}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x40, 0x10, 0x63a6, 0x6, {{0x1a, 0x4, 0x0, 0x1, 0x68, 0x67, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@generic={0x94, 0x9, "8e5cc5086440bf"}, @timestamp_addr={0x44, 0x24, 0xae, 0x1, 0x2, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x1ff}, {@broadcast, 0x7f}]}, @timestamp_addr={0x44, 0x24, 0xae, 0x1, 0xc, [{@remote, 0x4}, {@multicast2, 0xc}, {@broadcast, 0x4}, {@private=0xa010100, 0x80}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000220000000080000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.384803443s ago: executing program 1 (id=3005): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x8010}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)="82", 0x1, 0x10, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[], 0x300}, 0x1, 0x0, 0x0, 0x41}, 0x2000001) 1m13.714109097s ago: executing program 36 (id=2963): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0xc0901, 0x0) write$binfmt_register(r0, &(0x7f00000002c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xaa9, 0x3a, 'iso8859-9', 0x3a, '*]!\x19%(', 0x3a, './bus'}, 0x34) (fail_nth: 1) 1m8.312231709s ago: executing program 37 (id=3005): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x8957) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x8010}, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)="82", 0x1, 0x10, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[], 0x300}, 0x1, 0x0, 0x0, 0x41}, 0x2000001) 1m8.301601679s ago: executing program 4 (id=3071): syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, &(0x7f0000000200)={0x4, 0xdd5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40103d0b, 0x0) 1m8.125385508s ago: executing program 4 (id=3073): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0), 0x7, 0x4be, &(0x7f00000005c0)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500"], 0x50}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x2, [@struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x1, 0x1, 0xda}, {0xa, 0x2, 0x5dce}]}, @enum64={0xa, 0x7, 0x0, 0x13, 0x1, 0x4, [{0x1, 0x3, 0xd4e}, {0xd, 0xe, 0x6}, {0x4, 0x1000, 0x8}, {0x8, 0x3, 0x3}, {0x4, 0x5, 0x7ff}, {0xa, 0x96b6, 0x10}, {0x2, 0xffffffff, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x5, 0x2}, {0xd, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x0, 0x2}, {0xa, 0x2}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000440)=""/126, 0xf2, 0x7e, 0x1, 0xdd79, 0x10000, @value}, 0x28) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000015f7ffff1833000002000000000000000000000018000000070000010000009500000000000000184700000000000000000000000000000627020001000000851000007ba35bc296068839658e0300"/104], &(0x7f00000002c0)='syzkaller\x00', 0xb, 0x1000, &(0x7f0000000a80)=""/4096, 0x40f00, 0x41, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r3], &(0x7f0000001a80)=[{0x2, 0x1, 0x7, 0xe}, {0x1, 0x1, 0xd}, {0x4, 0x1, 0x9, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x101) getdents64(r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x0) 1m7.839273886s ago: executing program 4 (id=3074): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m7.790591116s ago: executing program 4 (id=3075): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000700180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a0}}, 0x0) 1m7.754629826s ago: executing program 4 (id=3076): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/93, &(0x7f0000000100)=0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x508, &(0x7f0000000b00)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mount$9p_xen(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x800000, &(0x7f0000000900)=ANY=[@ANYBLOB="7472616e733d78656e06646566636f6e746578743d756e636f6e66696e65645f752c00"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.279515822s ago: executing program 4 (id=3087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r2, @ANYBLOB="607a7740ed2f5b18cb5769c2d515a4becdd6d19a7f89654fa4d497fb626e038d29c3d9f4c4c7330644cd59a1921510a1b9b8f07e3ba408264ccb070a868b35752f461d76f24e85bd4a22ff90fe36d93f5ebe4813486cebd52d43ec40fd3d7db85862d9004a244331a3733b0b6d416e6408c301797e172fc47afb463ef96a75ab4b7b4fcee8d4c5f846cc95385ff99dd8abdc90d7bd027a7e64ee6b970764a795128bf53299a0e2d790e65135c46a90aecee2fe34afa20878d3d6eef629deb934cfdd", @ANYRESHEX=r1, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r8, 0x1, 0x4, 0x0, 0x0) r9 = mq_open(&(0x7f000084dff0)='!selynuxselinux\x00', 0x6e93ebbbcc0884f2, 0x182, &(0x7f0000000380)={0x2000000000002000, 0x5, 0x3, 0x1000}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r9, &(0x7f00000005c0)=""/192, 0xffffffff, 0x100000000000000, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r8, &(0x7f00000004c0)=[{{0x0, 0xffffffffffffffd9, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e", 0x73}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f473bd", 0x3}, {&(0x7f00000001c0)="97af2fc6d3150521e45752b5e92d96ddd191978d03e44ec735babc7f82076599aa843bc5ad9aff130e0257fbdbe6a325c33c38fb6cfcff64a4c1cf1d2218bdb274ef0b46a2bf869fecc826ae3c00ec0f808279118ad82bce63282360b0f59a77e108862d42210807adf95b6c", 0x6c}], 0x2}}], 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0xca, &(0x7f0000000280)="5d1848ad06149f99b3072bfdfc82a24d88b73c93", 0x14) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f0000000440)="8d808be20faddb0007da9a036558", 0xe}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@rand_addr=0x64010100, @broadcast, 0x0, "e162dbd071290cc81fafbc90d1e4d2d9de8319406b4969d34cc98b2c6a05abde", 0x6, 0xff, 0x3, 0x6}, 0x3c) unshare(0x40000000) 52.190399126s ago: executing program 38 (id=3087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r2, @ANYBLOB="607a7740ed2f5b18cb5769c2d515a4becdd6d19a7f89654fa4d497fb626e038d29c3d9f4c4c7330644cd59a1921510a1b9b8f07e3ba408264ccb070a868b35752f461d76f24e85bd4a22ff90fe36d93f5ebe4813486cebd52d43ec40fd3d7db85862d9004a244331a3733b0b6d416e6408c301797e172fc47afb463ef96a75ab4b7b4fcee8d4c5f846cc95385ff99dd8abdc90d7bd027a7e64ee6b970764a795128bf53299a0e2d790e65135c46a90aecee2fe34afa20878d3d6eef629deb934cfdd", @ANYRESHEX=r1, @ANYRESOCT=r1], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r8, 0x1, 0x4, 0x0, 0x0) r9 = mq_open(&(0x7f000084dff0)='!selynuxselinux\x00', 0x6e93ebbbcc0884f2, 0x182, &(0x7f0000000380)={0x2000000000002000, 0x5, 0x3, 0x1000}) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r9, &(0x7f00000005c0)=""/192, 0xffffffff, 0x100000000000000, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) sendmmsg$inet(r8, &(0x7f00000004c0)=[{{0x0, 0xffffffffffffffd9, &(0x7f00000002c0)=[{&(0x7f0000000bc0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a653ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172a489e35e", 0x73}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f473bd", 0x3}, {&(0x7f00000001c0)="97af2fc6d3150521e45752b5e92d96ddd191978d03e44ec735babc7f82076599aa843bc5ad9aff130e0257fbdbe6a325c33c38fb6cfcff64a4c1cf1d2218bdb274ef0b46a2bf869fecc826ae3c00ec0f808279118ad82bce63282360b0f59a77e108862d42210807adf95b6c", 0x6c}], 0x2}}], 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0xca, &(0x7f0000000280)="5d1848ad06149f99b3072bfdfc82a24d88b73c93", 0x14) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}, {&(0x7f0000000440)="8d808be20faddb0007da9a036558", 0xe}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@rand_addr=0x64010100, @broadcast, 0x0, "e162dbd071290cc81fafbc90d1e4d2d9de8319406b4969d34cc98b2c6a05abde", 0x6, 0xff, 0x3, 0x6}, 0x3c) unshare(0x40000000) 47.285253324s ago: executing program 9 (id=3274): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 47.072956053s ago: executing program 9 (id=3280): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) io_uring_enter(r0, 0x567, 0x60, 0x0, 0x0, 0x0) 46.990221962s ago: executing program 9 (id=3283): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket(0x1e, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) inotify_init() open(&(0x7f0000000040)='.\x00', 0x418601, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe000202b}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000070d58b6167e4ce1a0000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='afs_lookup\x00', r3}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000000)) 46.770967011s ago: executing program 9 (id=3287): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 46.67230055s ago: executing program 9 (id=3288): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/93, &(0x7f0000000100)=0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x508, &(0x7f0000000b00)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGk3ZB4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcONSDkj8iEAbJA6uZjzJerP2JtokdhQ/jzSa+Wa8ft9vs/N9O28SfwGMrJsRsR8RExFxPyJm8/NJvsV7nS193aODhyuHBw9Xkmi3P/hXkl1Pz0XXn0ndyN+zFBE/+l7ET5On4zZ39zaWa7Xqdt6eb9W35pu7e3fW68tr1bXqZqWytLi08M7dtysX1tfX6hP50Vc/++P+t36epjWTn+nux0XqdL14HCc1HhE/uIxgQzCW92di2InwXAoR8XJEvJ7d/7Mxln01AYDrrN2ejfZsdxsAuO4KWQ0sKZTzWsBMFArlcqeG90pMF2qNZuv2g8bO5mqnVjYXxcKD9Vp1Ia8VzkUxSduL2fHjduVE+25EvBQRv5ycytrllUZtdZj/8QGAEXbjxPz/38nO/A8AXHOlYScAAAyc+R8ARk/f+f/+YPMAAAbH8z8AjJ7O/D817DQAgAHy/A8Ao+dM87/yAABcFz98//10ax/mn3+9+uHuzkbjwzur1eZGub6zUl5pbG+V1xqNtewze+qnvV+t0dhafCt2Ppr79lazNd/c3btXb+xstu5ln+t9r1rMXrU/gJ4BAP289Nqnf0nSGfndqWyLrrUcikPNDLhshWEnAAzN2LATAIbGal8wus7xjK88ANdEjyV6n1Dq9RNA7Xa7fXkpAZfs1pfU/2FUddX//RYQjBj1fxhd6v8wutrt5Kxr/sdZXwgAXG1q/ECf7/+/nO9/l39z4CerJ1/xyWVmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfb0fq/5Xwt8JkoFMrlJF6IiLkoJg/Wa9WFiHgxIv48WZxM24tDzhkAOK/C35N8/a9bs2/OPHHp1RvHhxMR8bNff/Crj5Zbre0/RUwk/548Ot/6JD9fGXz2AMDpjubpbN/1IP/o4OHK0TbIfP7x3YgodeIfHkzE4XH88RjP9qUoRsT0f5K83ZF01S7OY//jiPhir/4nMZPVQDorn56Mn8Z+YaDxC0/EL2TXOvv07+ILF5ALjJpP0/HnvV73XyFuZvve938pG6HOLx//0rdaOczGwMfxj8a/sT7j382zxnjrD9/vHE09fe3jiC+PRxzFPuwaf47iJ33iv3nG+H/9yquv97vW/k3EregdvzvWfKu+Nd/c3buzXl9eq65VNyuVpcWlhXfuvl2Zz2rU8/1ng3++e/vFftfS/k/3iV86pf9fP2P/f/v/+z/+2jPif/ONXvEL8coz4qdz4jf6vOfkifby9O9L/XJL46/26f9pX//bp3U899nf9p5aNhwAGJ7m7t7Gcq1W3Xbg4OofpP9kr0AaPQ++M6hYE9H70i/e6NzTJy61288Vq9+IcRFVN+AqOL7pI+J/w04GAAAAAAAAAAAAAADoaRC/sTTsPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fR4AAP//rGLPlA==") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 46.442391599s ago: executing program 9 (id=3296): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_read_part_table(0x5c9, &(0x7f0000000880)="$eJzs0jFoW0cYAOD/vaKoHYJFCLjQpRCTSUmKOiRQiVKMIrzYIaQhQ+dCMhQSyODBSFUyp8nULSGJDcaL6dBOhi7GMhgb5MnIq+dCvWkwr8h6XmxTCsZ13XzfoNP999/9d/wvONfS+CPLsiQisuJB7Md8JeLxF3+/+9uF+u2Jz+98c/deRBKPImLy2qPfBitJnnFw6i/5fCqfTxQr3bdr47sLpfUrm52x92lEYRC/EBGtwf7W7MjRekl8dfIn8z+yWFsZefb8SePFdO3hVmNmp5DHX918V23eH60+SIfzpfS43dkx39jJ6u+N3prbyKb+fH3xeqHT7VdW87xyctJK/Bct7mUDn2aD/n89s/PmcrvX7k9enX96o3ypt9x8ud/338/6mgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAdgsbYy8uz5k8aL6drDrcbMzpffX6t/9lP9h1c331Wb90erD9Jh3lL679Qf696a28g+jtcXrxc6F/qV1TyvnJxOfc7W4f6/udzutfuTV+ef3ihf6i03XyY/Pz7rOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA50v99nZE3L0XkcR3ETGelmYH8awYUdo+mj9VHI4TxUr37dr47kJp/cpmZ+z9nTy+lEa04pP9/7/u/04fOuGj4dCKiPT03sU/81cAAAD//xmKiIU=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 46.264654997s ago: executing program 2 (id=3301): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0), 0x7, 0x4be, &(0x7f00000005c0)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500"], 0x50}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x2, [@struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x1, 0x1, 0xda}, {0xa, 0x2, 0x5dce}]}, @enum64={0xa, 0x7, 0x0, 0x13, 0x1, 0x4, [{0x1, 0x3, 0xd4e}, {0xd, 0xe, 0x6}, {0x4, 0x1000, 0x8}, {0x8, 0x3, 0x3}, {0x4, 0x5, 0x7ff}, {0xa, 0x96b6, 0x10}, {0x2, 0xffffffff, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x5, 0x2}, {0xd, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x0, 0x2}, {0xa, 0x2}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000440)=""/126, 0xf2, 0x7e, 0x1, 0xdd79, 0x10000, @value}, 0x28) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000015f7ffff1833000002000000000000000000000018000000070000010000009500000000000000184700000000000000000000000000000627020001000000851000007ba35bc296068839658e0300"/104], &(0x7f00000002c0)='syzkaller\x00', 0xb, 0x1000, &(0x7f0000000a80)=""/4096, 0x40f00, 0x41, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r3], &(0x7f0000001a80)=[{0x2, 0x1, 0x7, 0xe}, {0x1, 0x1, 0xd}, {0x4, 0x1, 0x9, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x101) getdents64(r4, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) lseek(r4, 0x3, 0x1) getdents64(r4, 0x0, 0x0) 46.248625127s ago: executing program 8 (id=3302): r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x8b008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x2, @perf_config_ext, 0x1a, 0x19fbcc0a, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 46.139036106s ago: executing program 8 (id=3303): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x48, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 46.093902096s ago: executing program 8 (id=3304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x80088c0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 46.039242826s ago: executing program 8 (id=3305): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 45.882179795s ago: executing program 8 (id=3307): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/93, &(0x7f0000000100)=0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x508, &(0x7f0000000b00)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 45.720808554s ago: executing program 2 (id=3308): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x1, 0x7b9, &(0x7f0000000d80)="$eJzs3U1sHGf5APBnXDtxXCmq+v+rRFGaTpIiJSK4u+vWxeqhbNdjZ1p71+yuUXJAbdU4VRT3Q60qaA6UXFpAIMSJY+m14sINxAGJA3BCogcuHJAq9YSKBBICISSjmd2NP7K28+WkH7/fKvvOzrzzvs/MTubZWe/MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSWO2UqkmsZA3l8+m22vMtluLO0wftPfrTcUO/UYkxb8YH49DvVGH/n998gPF0/E40nt1JMaLYjwu3/vAfU/83+jIYP4dArpZx66zXhLxnSKoS8+vrq68tgeB3EHf/9UNz/LvteJ5PmvmnVa+WJ/P0rzTSmempyuPnJnrpHP5QtY51+lmi2mjndW7rXZ6snEqrc7MTKXZ5LnWcnN+tr6QDUY+/uVapTKdPj25lNXbnVbzkacnO40z+cJC3pwv69Qq34yizuPFhvhM3k27WX0xTS9cXF2Z2i3UolJ105j9mzacIw/f99EbH/7j4kqxQW7XSNLfMGvVaq1WnX5s5rHHK5XRWqW2eURli7haI0Yiihp7stHyKXL7dt5wi0b6+T8WIo9mLMfZSCONkfJ5/TEW4zEb7WjFYvH6T2Nbpl+T/7/4yN/+sFO/G/P/IMsfWp98OMr8f7T36ug2+b/YKW+NY68e91yNbePY1+PNuByX4vlYjdVYidfuWDw3+Ri5ve3NRxbNyGN/ROSxGPVyTBp5dKIVaczEdExHJZ6NMzEXnUhjLvJYiCw6cS460Y2s3KIa0Y4s6tGNVrQjjZPRiFORRjVmYiamIo0sJuNctGI5mjEfs1EvW7kQF8v1PrUlrge+/dwvX/zjR+8Ww1crVXdYkKT4MFdU+vsOlfrJ/KG4ifw/qCH/f9aMD/YL1+m27bvhVq2V+X/0bocBAAAA7KGk/PY9iYixeLAcmsu/dreDAgAAAG6r8nfNR4pirBh6MJK5fCGrDKn5wR2PDQAAALg9kvIcuyQiJuKh3tDgdKlhXwIAAAAAn0Ll3/+PFsVExFvlCMf/AAAA8Bnz3e2usf/hvv41ejtL+5PBxW+Xzj6cvFQvhuov9cf1i69fbbE7dzg52G+kLKZHL9+bRMRoIzuSDK5++d/9vfLj8vnw+gUIt7vWf9JujyVXtg8gdg6gfBU/iGO9OsfO98rzgym9Xibm8oVsstFaeKKa9L8c6b7x8sVvRRS9f6+5eDCJCxdXVyZfeGX1fBnLlaKVKy/1Lw+f3EAsa/01EA8OX+Kx8kSMfr8TvX4rG5d/pDf7yM59Jhv7fDuO9+ocn+iVE5uXf7zoszr5RDXq9YMj3exs9421DUvfj6J6i0v+dpzo1Tlx8kSvGBJFbVMUL18bRW1jFNe3Lq47inePvXX2n79tJdnUblFM3WIUAHfLhfKqP+tZ6ECZhf6z1lPk/y1598Ag4d7IXu7C+qeMA/3aG3LdaNxQdh8kmyF79JO9Oid7nydGDw/JK5Uhe/RXL776u/4e/dH3f/LTbxz9/c9vPru9H6d6dfpF3P+bbXJsscw/3JJV3yvmeG+bfouXtSTGevdOWJ+88uLKy7Xa1HTl0UrlsVqMlR8V+oXcA8AQu95j5zruwvPo8KPqGGS8+6/+pGAyXohXYjXOx+nybIOIeGh4qxMbfoZwepej1okNd3g5vfOx5aH10xtqW+vuP5HEvftiSLubUuUXflwW/9qztwQA9tzxXfLwDvl/bJD/T+9y3L05l5/q3Th3cHQc2+fyYb6y1ysEAD4HsvbHyUT3naTdzpeerc7MVOvdM1nabjWeSdv57HyW5s1u1m4MvmludVuNwdHwbNZJO8tLS612N51rtdOlVic/W975Pe3f+r2TLdab3bzRWVrI6p0sbbSa3Xqjm87mnUa6tPzUQt45k7XLmTtLWSOfyxv1bt5qpp3WcruRTaZpJ8s2VMxns2Y3n8uLwWa61M4X6+0rEbGwvJils1mn0c6Xuq1eg4O+8uZcq71YNjt57eL/9U6uawD4pHj9zcuXnl9dXXlt88BasnXM8IE/v3n50uBP9NtWjli7y0sJAGy0MUsDAAAAAAAAAAAAAACfTNeerleM3e20v00DY3EDlbcM7N/+rMHP5cCXftZ7W25Hg7fSzoFN7+m+/sayJ4t8T0Ts3Vp97sknL21X56m3Dp35y/7r6X34/5Rhp7q+czBi3y9+1Bvz1Tu12XzQX4cxekOzryU71LlruyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Nb/AgAA///rrkcE") r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x24) 45.632730623s ago: executing program 8 (id=3309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x33c0000000000}}], 0x18}, 0x40000) r6 = socket$kcm(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="850fe100c2c0", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0xffff}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x25, &(0x7f0000000000), 0x20000010) close_range(r0, 0xffffffffffffffff, 0x0) 44.581492807s ago: executing program 2 (id=3316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x80088c0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 44.466830906s ago: executing program 2 (id=3318): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0), 0x7, 0x4be, &(0x7f00000005c0)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500"], 0x50}, 0x1, 0xba01}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x2, [@struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x1, 0x1, 0xda}, {0xa, 0x2, 0x5dce}]}, @enum64={0xa, 0x7, 0x0, 0x13, 0x1, 0x4, [{0x1, 0x3, 0xd4e}, {0xd, 0xe, 0x6}, {0x4, 0x1000, 0x8}, {0x8, 0x3, 0x3}, {0x4, 0x5, 0x7ff}, {0xa, 0x96b6, 0x10}, {0x2, 0xffffffff, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x5, 0x2}, {0xd, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x0, 0x2}, {0xa, 0x2}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000440)=""/126, 0xf2, 0x7e, 0x1, 0xdd79, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x101) getdents64(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) lseek(r1, 0x3, 0x1) getdents64(r1, 0x0, 0x0) 43.53100408s ago: executing program 2 (id=3320): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/93, &(0x7f0000000100)=0x5d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000340)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}, {@user_xattr}]}, 0xfd, 0x508, &(0x7f0000000b00)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGk3ZB4oyh2HMVOacIe0jNXJCpxgiN/AOeeuHNBcONSDkj8iEAbJA6uZjzJerP2JtokdhQ/jzSa+Wa8ft9vs/N9O28SfwGMrJsRsR8RExFxPyJm8/NJvsV7nS193aODhyuHBw9Xkmi3P/hXkl1Pz0XXn0ndyN+zFBE/+l7ET5On4zZ39zaWa7Xqdt6eb9W35pu7e3fW68tr1bXqZqWytLi08M7dtysX1tfX6hP50Vc/++P+t36epjWTn+nux0XqdL14HCc1HhE/uIxgQzCW92di2InwXAoR8XJEvJ7d/7Mxln01AYDrrN2ejfZsdxsAuO4KWQ0sKZTzWsBMFArlcqeG90pMF2qNZuv2g8bO5mqnVjYXxcKD9Vp1Ia8VzkUxSduL2fHjduVE+25EvBQRv5ycytrllUZtdZj/8QGAEXbjxPz/38nO/A8AXHOlYScAAAyc+R8ARk/f+f/+YPMAAAbH8z8AjJ7O/D817DQAgAHy/A8Ao+dM87/yAABcFz98//10ax/mn3+9+uHuzkbjwzur1eZGub6zUl5pbG+V1xqNtewze+qnvV+t0dhafCt2Ppr79lazNd/c3btXb+xstu5ln+t9r1rMXrU/gJ4BAP289Nqnf0nSGfndqWyLrrUcikPNDLhshWEnAAzN2LATAIbGal8wus7xjK88ANdEjyV6n1Dq9RNA7Xa7fXkpAZfs1pfU/2FUddX//RYQjBj1fxhd6v8wutrt5Kxr/sdZXwgAXG1q/ECf7/+/nO9/l39z4CerJ1/xyWVmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfb0fq/5Xwt8JkoFMrlJF6IiLkoJg/Wa9WFiHgxIv48WZxM24tDzhkAOK/C35N8/a9bs2/OPHHp1RvHhxMR8bNff/Crj5Zbre0/RUwk/548Ot/6JD9fGXz2AMDpjubpbN/1IP/o4OHK0TbIfP7x3YgodeIfHkzE4XH88RjP9qUoRsT0f5K83ZF01S7OY//jiPhir/4nMZPVQDorn56Mn8Z+YaDxC0/EL2TXOvv07+ILF5ALjJpP0/HnvV73XyFuZvve938pG6HOLx//0rdaOczGwMfxj8a/sT7j382zxnjrD9/vHE09fe3jiC+PRxzFPuwaf47iJ33iv3nG+H/9yquv97vW/k3EregdvzvWfKu+Nd/c3buzXl9eq65VNyuVpcWlhXfuvl2Zz2rU8/1ng3++e/vFftfS/k/3iV86pf9fP2P/f/v/+z/+2jPif/ONXvEL8coz4qdz4jf6vOfkifby9O9L/XJL46/26f9pX//bp3U899nf9p5aNhwAGJ7m7t7Gcq1W3Xbg4OofpP9kr0AaPQ++M6hYE9H70i/e6NzTJy61288Vq9+IcRFVN+AqOL7pI+J/w04GAAAAAAAAAAAAAADoaRC/sTTsPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fR4AAP//rGLPlA==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 39.763624216s ago: executing program 2 (id=3339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x4000000) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r9, &(0x7f0000000040), 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 31.03181022s ago: executing program 39 (id=3296): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000010000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_read_part_table(0x5c9, &(0x7f0000000880)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 30.578366817s ago: executing program 40 (id=3309): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r5}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x33c0000000000}}], 0x18}, 0x40000) r6 = socket$kcm(0x2, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="850fe100c2c0", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2, 0xffff}}}}}}}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x25, &(0x7f0000000000), 0x20000010) close_range(r0, 0xffffffffffffffff, 0x0) 24.536902638s ago: executing program 41 (id=3339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c800}, 0x4000000) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(r9, &(0x7f0000000040), 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 4.509380999s ago: executing program 0 (id=3746): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x13}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x40000010) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r4, r2, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) 4.320929008s ago: executing program 0 (id=3749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in, {}, {}, {0xfffffffc, 0x0, 0xffffffff}, 0x70bd2b, 0x0, 0xa}}, 0xf0}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x802, &(0x7f0000000100)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@journal_path={'journal_path', 0x3d, './file0'}}], [{@seclabel}], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") (rerun: 64) 4.253618097s ago: executing program 3 (id=3750): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x38, 0x39, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0xa4, 0x0, 0x1, [@nested={0x18, 0x109, 0x0, 0x1, [@typed={0x14, 0xe5, 0x0, 0x0, @ipv6=@local}]}]}]}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c540012003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 4.021250416s ago: executing program 7 (id=3756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(&(0x7f0000000b00)=""/255, 0xff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0x5, 0x2, @mcast1, @mcast2, 0x80, 0x7800, 0x6, 0x1ff}}) ftruncate(r3, 0x8800000) 3.961057816s ago: executing program 3 (id=3757): r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x8b008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x2, @perf_config_ext, 0x1a, 0x19fbcc0a, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r6, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) 3.960478866s ago: executing program 6 (id=3758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(&(0x7f0000000b00)=""/255, 0xff) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0x5, 0x2, @mcast1, @mcast2, 0x80, 0x7800, 0x6, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', r6, 0x0, 0x6, 0x9, 0x474d, 0x8, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x1, 0x2, 0x5f5}}) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r3, 0x0, 0x578410e9) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000002}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r9, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 3.950109666s ago: executing program 3 (id=3759): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) setxattr$security_capability(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x0, 0x0, 0x2) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x2, 0x203) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000b80)=ANY=[@ANYBLOB="7f454c4600000004010000000000000002003e000000000003000000000000004000000000000000980100000000000000000000000038000100000002000000030000000200000002000000000000000000000000000000070000000000000004"], 0x1fc) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) clock_settime(0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x800}, @val={0x2, 0x4, 0x6, 0x3, 0x80, 0x6}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x1, 0x40, 0x68, 0x0, 0x9, 0x11, 0x0, @rand_addr=0x64010100, @multicast1}, {0x0, 0x4e23, 0x2c, 0x0, @opaque="46e3a0ee14bf49a3ab6afa2df7461c915f0a4948a7f36228e590e08b1c61d84a611dfb7e"}}}}, 0x4e) 2.014666873s ago: executing program 6 (id=3760): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x48, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.011666943s ago: executing program 0 (id=3770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) ioperm(0x1, 0x5, 0xdd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.978044823s ago: executing program 3 (id=3761): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d05, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.927864783s ago: executing program 7 (id=3763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @rand_addr, 0x2}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) close(0xffffffffffffffff) (async) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='devtmpfs\x00', 0x0, &(0x7f0000002040)='dirsync') listen(r4, 0x101) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000000)={0x3a, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x400, [0x6, 0x1, 0xfffffffffffffffa, 0x0, 0xffffffff, 0x0, 0xc0f]}}, @padn={0x1, 0x1, [0x0]}]}, 0x58) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000080)={@loopback, @multicast2}, 0x8) dup2(r7, r4) (async) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x2, 0x1, 0x8, 0x2a000000, 0xffffffffffffffff}) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) socket$packet(0x11, 0x2, 0x300) 1.909719263s ago: executing program 6 (id=3764): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c540012003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (fail_nth: 4) 1.904362502s ago: executing program 0 (id=3765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 1.651355651s ago: executing program 3 (id=3766): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24) (fail_nth: 3) 1.42199201s ago: executing program 7 (id=3767): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000004000000ff00000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_ext_show_extent\x00', r3}, 0xfffffffffffffc48) syz_emit_ethernet(0x2a, &(0x7f0000001200)=ANY=[@ANYBLOB="bbbbbbbbbbbb2f1e6e55c37408"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 1.333280649s ago: executing program 3 (id=3769): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) read$hidraw(r3, 0x0, 0x49) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822301) write$char_usb(r4, &(0x7f0000000040)="e2", 0x1068) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffffffffffff3d) dup3(r1, r3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_getaddr={0x70, 0x16, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xff, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x4, 0x0, 0x1e00}}, @IFA_CACHEINFO={0x14, 0x6, {0x80000001, 0x2, 0x10, 0x400}}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x80}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020642500000000002020207b1af8ff00000000bfa1010000000100070100e200ffffffb782000008000000b703000834120000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0x6, 0xa, 0xfffffffe}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x21}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x3}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)=r11}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) 1.332635799s ago: executing program 6 (id=3771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(&(0x7f0000000b00)=""/255, 0xff) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x1, 0x5, 0x2, @mcast1, @mcast2, 0x80, 0x7800, 0x6, 0x1ff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', r6, 0x0, 0x6, 0x9, 0x474d, 0x8, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x1, 0x2, 0x5f5}}) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r7, r3, 0x0, 0x578410e9) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x10000002}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) 1.231292168s ago: executing program 0 (id=3773): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 1.117034447s ago: executing program 0 (id=3775): quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000280)=@sg0, 0xee00, &(0x7f0000000440)={0xfffffffffffeffff, 0x1, 0x7, 0x10001, 0x9, 0x3, 0xfffffffffffffff7, 0x7, 0x3ff}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8"], 0xb98}, 0x1, 0x0, 0x0, 0x2c800}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) r5 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x1c4, 0x0) ppoll(0x0, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000380)={[0x7]}, 0x8) mq_timedreceive(r5, &(0x7f0000000180)=""/196, 0xc4, 0x800000000000, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x3ed7, 0x0) syz_emit_ethernet(0xfc0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0xfffff3f1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000ffed00000000550500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 662.231585ms ago: executing program 7 (id=3776): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0xf1ff, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) 477.907363ms ago: executing program 5 (id=3778): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000786bda4400"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='mm_page_alloc\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x51, 0xfff}, 0x11, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x10000040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x2b}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe0}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x2a}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x2a}], 0x6, 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f4", 0x27}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000780)={'\x00', 0x8, 0xb4, 0x2, 0x0, 0xd5a}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1c8, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x7, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r9 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500190000000000050018"], 0x44}}, 0x0) 365.345473ms ago: executing program 5 (id=3779): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) (fail_nth: 12) 362.929443ms ago: executing program 6 (id=3780): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f00000000c0), 0x7, 0x4be, &(0x7f00000005c0)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500"], 0x50}, 0x1, 0xba01}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x2, [@struct={0x5, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x1, 0x1, 0xda}, {0xa, 0x2, 0x5dce}]}, @enum64={0xa, 0x7, 0x0, 0x13, 0x1, 0x4, [{0x1, 0x3, 0xd4e}, {0xd, 0xe, 0x6}, {0x4, 0x1000, 0x8}, {0x8, 0x3, 0x3}, {0x4, 0x5, 0x7ff}, {0xa, 0x96b6, 0x10}, {0x2, 0xffffffff, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x5, 0x2}, {0xd, 0x3}]}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x7, 0x3}, {0x0, 0x2}, {0xa, 0x2}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}]}}, &(0x7f0000000440)=""/126, 0xf2, 0x7e, 0x1, 0xdd79, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000015f7ffff1833000002000000000000000000000018000000070000010000009500000000000000184700000000000000000000000000000627020001000000851000007ba35bc296068839658e0300"], 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x41, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580), &(0x7f0000001a80)=[{0x2, 0x1, 0x7, 0xe}, {0x1, 0x1, 0xd}, {0x4, 0x1, 0x9, 0x2}], 0x10, 0x6, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x101) getdents64(r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x0) 349.008043ms ago: executing program 5 (id=3781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x44, 0x9}, 0x2) 269.054312ms ago: executing program 7 (id=3782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 227.837272ms ago: executing program 5 (id=3783): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 227.027482ms ago: executing program 7 (id=3784): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x80000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 74.768961ms ago: executing program 5 (id=3785): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYRES16=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) sendmsg$qrtr(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000780)="579ad68b272c6b5a83f2275860b3d4e003f1ce13f18a9e769ff9508c37b2b84bc81b61e0f0b7cc6da903e91061bbde637494c6dc465f00d2e9242069eefa057ab3e5fc42613133797149b0a30c470a06a16d73a2da764c6db60c4113e5318f9a7bf57bfd011d92a6a03f90", 0x6b}, {&(0x7f0000000600)="5839733734b4aa2714a2d7c1a90e4fc829a4a8217d6d4293d6fba7a596dc55625b4fc8cd4c858b9cf5786909370b7c2dc5bf7c188d223f959da21a0c8ce0f1f668005dc53fb22dea3f5a8efa7bba1f7594854f4bc4a5c227f5555a4b8bf55078c662cdb3313de9a6b8aa70b2c595a6e67490d67da41b9a18fe", 0x79}, {&(0x7f0000000540)="52ed40f6d3341bb966a9a1dc8c3c1feba0cd6e465c5457b64ffd69e01a4e493216ddbc44ef1de85abe8ed4bda12bf0ee07c7e82a003dbec7bd9dec7c5976f5b7d275860326cec3ba01b9af715e0a353e1ce0ae8f6b89b10af3262bf6d412fe17f0aac4681adef9defe28d902a2428fc7a404dbc9273ad4e8d7f47d5b37c156a5ad2674ea166728c5743d4ec754b321efa9b36e72b4aca093ea34eb90dbe495444cc3869a874bce71e103f4a5f5112da285f38a103af97d0bf6f97e51", 0xbc}], 0x4, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], 0x1218}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000200", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6(0xa, 0x6, 0x0) listen(r7, 0x5) close_range(r7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='inet_sock_set_state\x00', r8}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r10, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r10, 0x0) listen(r9, 0x0) 22.93683ms ago: executing program 6 (id=3786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000004c0)=0x80000000) sendmsg$nl_route(r3, 0x0, 0x40000) pwritev2(r2, &(0x7f0000000340)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f00000004c0)="e55eff413e3667ee0a56effd91c8062d26c06726a5a400e763b81d18de7496422c185b9378df4db235efae281eac477d5b816d62920e8455c21df9ea5423c80d29814892d97f06d087f93dd88d43da461a68e1b281a471fcb68f97632835e4a6bbb262f1878cd28ee7b5ab80cb6080f925164a09d6e41f7eb7b62bac9a7e0163b3584cb651f25b9818218faa47f81f5e3ef79bf0400b47f2c77f450c0df87878459426588527957b7b7b6a56c310121cb224008723bb68510a5bb7187148df9510d7c5fc79bf978d7437cc127772d2df781ae3f93bcaa1e0a7f020e59e938094af01e1b5102fdd46ec65b3fc1e3dcda1", 0xf0}, {&(0x7f00000005c0)="033f4f46b2c5830d2fdd9ba6e6bafe1155c1e0d5afed9d862fc852a576691b3cdf29166d5de6f6a47b9b6336966fceab3f99f125a26e5bca2190a7df2bbe349aca29411fce3c12f0026dcdcccbfcfde15bd31bc3f9cb997d9b785065fef724034893a3a1c2d98c795d4915d59bb9ff88385ca6cb69379ee37d82fd98bee28bfbd668dcb0a5ebfa8b3e6976880f5cdc0c7d915410fce88ac70af7c0e45ae1a434c4acec9948590f216fc3edb4e2982cf18c094e1973c816779533bfd73c169893e34326caede650b1e82fcf9b70ddef80ca44", 0xd2}], 0x3, 0x5, 0x8, 0xa) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x83d}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000200)={r4, 0x4, "6c25fdce"}, &(0x7f0000000240)=0xc) 0s ago: executing program 5 (id=3787): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket(0x1e, 0x2, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) inotify_init() open(&(0x7f0000000040)='.\x00', 0x418601, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe000202b}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000070d58b6167e4ce1a0000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='afs_lookup\x00', r3}, 0x18) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000080)={0x0, 0x1, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r5, 0x4b67, &(0x7f0000000000)) kernel console output (not intermixed with test programs): (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.868467][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x4 [ 265.876221][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x2 [ 265.907137][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.914943][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.922684][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.930352][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.938208][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.946427][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.954381][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.962063][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.969781][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.977473][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.985210][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 265.993065][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 266.000710][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 266.008465][ T3374] hid-generic 0000:3000000:0000.006E: unknown main item tag 0x0 [ 266.324707][ T3374] hid-generic 0000:3000000:0000.006E: hidraw0: HID v0.00 Device [sy] on syz0 [ 266.648554][T14857] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3378'. [ 266.657605][T14857] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3378'. [ 266.689931][T14857] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3378'. [ 266.723179][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x4 [ 266.730883][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x2 [ 266.749387][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.757255][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.765209][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.772907][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.780602][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.788304][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.796015][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.803750][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.811591][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.819258][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.827028][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.834808][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.842489][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.850162][ T3373] hid-generic 0000:3000000:0000.006F: unknown main item tag 0x0 [ 266.956124][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 266.963715][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 266.971112][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 266.991249][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 266.998781][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.006263][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.013718][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.021124][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.028571][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.036243][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.043704][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.051100][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.058607][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.066093][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.113523][ T3373] hid-generic 0000:3000000:0000.006F: hidraw0: HID v0.00 Device [sy] on syz0 [ 267.124544][T12726] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.139254][ T4413] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.177542][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.185177][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.192747][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.200154][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.207618][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.215053][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.222606][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.230000][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.237549][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.245055][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.252545][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.260007][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.267501][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.275010][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.282469][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.289949][ T3375] hid-generic 0000:0000:0000.0070: unknown main item tag 0x0 [ 267.350842][ T3375] hid-generic 0000:0000:0000.0070: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 267.350798][T12330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.553975][ T4413] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.574845][T14850] chnl_net:caif_netlink_parms(): no params data found [ 267.649089][T14925] loop3: detected capacity change from 0 to 512 [ 267.657540][ T4413] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.699694][T14925] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3384: invalid indirect mapped block 256 (level 2) [ 267.722941][ T4413] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.735065][T14925] EXT4-fs (loop3): 2 truncates cleaned up [ 267.742448][T14925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.764841][T14850] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.772252][T14850] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.781128][T14850] bridge_slave_0: entered allmulticast mode [ 267.787724][T14850] bridge_slave_0: entered promiscuous mode [ 267.794559][T14850] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.801637][T14850] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.810940][T14850] bridge_slave_1: entered allmulticast mode [ 267.817630][T14850] bridge_slave_1: entered promiscuous mode [ 267.835326][T14925] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3384: path /45/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 267.870119][T14925] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3384: path /45/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 267.922449][T14850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.957438][T14850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.003256][T14867] chnl_net:caif_netlink_parms(): no params data found [ 268.098611][ T4413] bridge_slave_1: left allmulticast mode [ 268.104383][ T4413] bridge_slave_1: left promiscuous mode [ 268.110056][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.123578][ T4413] bridge_slave_0: left allmulticast mode [ 268.129333][ T4413] bridge_slave_0: left promiscuous mode [ 268.135043][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.293866][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.306328][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.317689][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x4 [ 268.325519][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x2 [ 268.337943][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.345741][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.353486][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.361260][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.369079][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.376797][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.384650][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.392041][ T4413] bond0 (unregistering): Released all slaves [ 268.392399][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.406054][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.413840][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.421534][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.429236][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.436952][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.444833][ T3375] hid-generic 0000:3000000:0000.0071: unknown main item tag 0x0 [ 268.453680][ T3375] hid-generic 0000:3000000:0000.0071: hidraw0: HID v0.00 Device [sy] on syz0 [ 268.459893][T14850] team0: Port device team_slave_0 added [ 268.487172][T14850] team0: Port device team_slave_1 added [ 268.498302][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.542805][T14971] IPVS: length: 93 != 24 [ 268.549799][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.557295][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.564732][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.573705][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.581233][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.588659][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.596240][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.603726][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.611319][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.618750][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.626169][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.633603][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.641049][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.648489][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.655965][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.663451][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.670864][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.678441][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.685956][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.693389][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.700775][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.708316][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.715884][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.723339][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.730732][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.738338][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.745776][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.753233][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.760635][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.768114][ T3373] hid-generic 0000:0000:0000.0072: unknown main item tag 0x0 [ 268.778639][ T3373] hid-generic 0000:0000:0000.0072: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 268.846226][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.853702][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.879724][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.920537][ T4413] hsr_slave_0: left promiscuous mode [ 268.926573][ T4413] hsr_slave_1: left promiscuous mode [ 268.967268][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.974802][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.988999][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.996526][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.009405][ T4413] veth1_macvtap: left promiscuous mode [ 269.014998][ T4413] veth0_macvtap: left promiscuous mode [ 269.020633][ T4413] veth1_vlan: left promiscuous mode [ 269.026054][ T4413] veth0_vlan: left promiscuous mode [ 269.115750][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 269.126430][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 269.171132][T14867] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.178481][T14867] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.188174][T14867] bridge_slave_0: entered allmulticast mode [ 269.194896][T14867] bridge_slave_0: entered promiscuous mode [ 269.195622][T15007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'. [ 269.202332][T14867] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.209771][T15007] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3399'. [ 269.216808][T14867] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.225858][T15007] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3399'. [ 269.236243][T14867] bridge_slave_1: entered allmulticast mode [ 269.250374][T14867] bridge_slave_1: entered promiscuous mode [ 269.268954][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.276119][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.302105][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.327900][T15009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.388515][T15011] IPVS: length: 93 != 24 [ 269.436476][T15013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.482152][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.489662][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.497289][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.509969][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.517439][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.525054][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.532634][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.540061][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.547653][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.555106][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.562519][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.569938][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.577444][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.584927][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.599584][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.607051][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.614645][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.622058][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.629488][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.637004][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.644433][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.651859][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.659257][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.666715][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.674176][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.681585][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.688975][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.696408][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.703819][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.711216][ T3360] hid-generic 0000:0000:0000.0073: unknown main item tag 0x0 [ 269.725959][ T3360] hid-generic 0000:0000:0000.0073: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 269.866290][T14850] hsr_slave_0: entered promiscuous mode [ 269.872702][T14850] hsr_slave_1: entered promiscuous mode [ 269.878643][T14850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.886302][T14850] Cannot create hsr debugfs directory [ 269.895494][T14867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.907547][T14867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.936246][T14867] team0: Port device team_slave_0 added [ 269.945847][T14867] team0: Port device team_slave_1 added [ 269.952856][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 269.952873][ T29] audit: type=1326 audit(1736241258.828:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 269.992123][ T29] audit: type=1326 audit(1736241258.858:18265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.015748][ T29] audit: type=1326 audit(1736241258.858:18266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.039508][ T29] audit: type=1326 audit(1736241258.858:18267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.063283][ T29] audit: type=1326 audit(1736241258.858:18268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.086936][ T29] audit: type=1326 audit(1736241258.858:18269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.110605][ T29] audit: type=1326 audit(1736241258.858:18270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.134321][ T29] audit: type=1326 audit(1736241258.858:18271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.158041][ T29] audit: type=1326 audit(1736241258.858:18272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.181724][ T29] audit: type=1326 audit(1736241258.858:18273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.0.3408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f80295d29 code=0x7ffc0000 [ 270.225674][T14867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.232701][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.258672][T14867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.301093][T14867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.308151][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.335103][T14867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.493179][T14867] hsr_slave_0: entered promiscuous mode [ 270.499506][T14867] hsr_slave_1: entered promiscuous mode [ 270.538246][T14867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.551347][T14867] Cannot create hsr debugfs directory [ 270.656655][ T4413] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.721030][T15047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3409'. [ 270.730069][T15047] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3409'. [ 270.749007][T15047] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3409'. [ 270.761080][ T4413] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.834877][ T4413] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.926411][ T4413] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.968107][T14850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 271.009655][T14850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 271.025725][T14850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 271.066856][T14850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 271.106067][ T4413] bridge_slave_1: left allmulticast mode [ 271.111907][ T4413] bridge_slave_1: left promiscuous mode [ 271.117627][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.133699][ T4413] bridge_slave_0: left allmulticast mode [ 271.139534][ T4413] bridge_slave_0: left promiscuous mode [ 271.145393][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.254222][T15079] IPVS: length: 93 != 24 [ 271.284508][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.296889][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.310103][ T4413] bond0 (unregistering): Released all slaves [ 271.322786][T15081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3418'. [ 271.331816][T15081] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3418'. [ 271.343147][T15081] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3418'. [ 271.384635][ T4413] tipc: Left network mode [ 271.408270][ T4413] hsr_slave_0: left promiscuous mode [ 271.423042][ T4413] hsr_slave_1: left promiscuous mode [ 271.430479][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.438055][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.452348][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.459877][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.502720][ T4413] veth1_macvtap: left promiscuous mode [ 271.508345][ T4413] veth0_macvtap: left promiscuous mode [ 271.513955][ T4413] veth1_vlan: left promiscuous mode [ 271.519293][ T4413] veth0_vlan: left promiscuous mode [ 271.766714][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 271.777720][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 272.488570][T15100] loop3: detected capacity change from 0 to 512 [ 272.496556][T14850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.515584][T14850] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.552521][T14850] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.562949][T14850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.590691][T15100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.602404][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.609583][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.624590][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.631760][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.698237][T15100] EXT4-fs (loop3): 1 truncate cleaned up [ 272.705502][T15100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.722920][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.865548][T14850] veth0_vlan: entered promiscuous mode [ 272.874352][T14850] veth1_vlan: entered promiscuous mode [ 272.890614][T14850] veth0_macvtap: entered promiscuous mode [ 272.897766][T14850] veth1_macvtap: entered promiscuous mode [ 272.907866][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.918350][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.928279][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.938784][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.948699][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.959211][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.969766][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.978146][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.987429][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.988661][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.007518][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.018014][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.027994][T14850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.034665][T15139] IPVS: length: 93 != 24 [ 273.038521][T14850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.053484][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.062039][T14850] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.070877][T14850] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.079639][T14850] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.088415][T14850] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.125552][T15141] netlink: 'syz.0.3428': attribute type 4 has an invalid length. [ 273.133389][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'. [ 273.191604][T15148] loop3: detected capacity change from 0 to 764 [ 273.264564][T13833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.282576][ T4413] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.348337][ T4413] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.394379][ T4413] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.454588][T15185] loop5: detected capacity change from 0 to 512 [ 273.470415][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.477904][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.485396][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.492908][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.500507][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.508165][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.515677][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.523204][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.530723][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.538276][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.545962][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.550540][T15185] EXT4-fs (loop5): orphan cleanup on readonly fs [ 273.553400][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.562099][T15185] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3437: bg 0: block 248: padding at end of block bitmap is not set [ 273.567146][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.588913][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.599931][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.600428][ T4413] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.607416][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.625250][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.629375][T15185] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3437: Failed to acquire dquot type 1 [ 273.632708][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.632735][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.632759][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.632786][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.653288][T15185] EXT4-fs (loop5): 1 truncate cleaned up [ 273.658834][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.670489][T15194] IPVS: length: 93 != 24 [ 273.673747][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.698599][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.706176][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.713680][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.721256][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.728714][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.736254][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.744117][ T9] hid-generic 0000:0000:0000.0074: unknown main item tag 0x0 [ 273.754354][ T9] hid-generic 0000:0000:0000.0074: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 273.773836][T15185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.808044][T15142] chnl_net:caif_netlink_parms(): no params data found [ 273.866133][T15185] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 273.903745][T15185] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 273.929534][ T4413] bridge_slave_1: left allmulticast mode [ 273.935247][ T4413] bridge_slave_1: left promiscuous mode [ 273.940996][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.948109][T15210] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.956892][ T4413] bridge_slave_0: left allmulticast mode [ 273.962625][ T4413] bridge_slave_0: left promiscuous mode [ 273.968268][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.033243][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.089065][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.117459][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.135419][ T4413] bond0 (unregistering): Released all slaves [ 274.230621][ T4413] hsr_slave_0: left promiscuous mode [ 274.252663][ T4413] hsr_slave_1: left promiscuous mode [ 274.265949][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.273490][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.284786][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.292384][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.308823][ T4413] veth1_macvtap: left promiscuous mode [ 274.314567][ T4413] veth0_macvtap: left promiscuous mode [ 274.320152][ T4413] veth1_vlan: left promiscuous mode [ 274.325581][ T4413] veth0_vlan: left promiscuous mode [ 274.542604][T15255] __nla_validate_parse: 3 callbacks suppressed [ 274.542671][T15255] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3449'. [ 274.567341][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 274.577622][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 274.630434][T14867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.663559][T14867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.725809][T14867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.748892][T15273] loop3: detected capacity change from 0 to 512 [ 274.762506][T14867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 274.769385][T15273] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 274.787112][T15142] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.794362][T15142] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.801660][T15142] bridge_slave_0: entered allmulticast mode [ 274.808182][T15142] bridge_slave_0: entered promiscuous mode [ 274.815091][T15142] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.822274][T15142] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.829544][T15142] bridge_slave_1: entered allmulticast mode [ 274.836159][T15142] bridge_slave_1: entered promiscuous mode [ 274.870108][T15273] EXT4-fs (loop3): 1 truncate cleaned up [ 274.898620][T15142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.908063][T15273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.927093][T15142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.954010][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.980797][T15142] team0: Port device team_slave_0 added [ 274.992475][T15142] team0: Port device team_slave_1 added [ 275.059962][T15142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.067163][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.093336][T15142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.124076][T14867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.157784][T15142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.164878][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.191112][T15142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.270998][T15142] hsr_slave_0: entered promiscuous mode [ 275.277672][T15142] hsr_slave_1: entered promiscuous mode [ 275.286601][T15142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.294363][T15142] Cannot create hsr debugfs directory [ 275.350154][T14867] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.406605][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.413745][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.438901][T15326] netlink: 'syz.0.3456': attribute type 4 has an invalid length. [ 275.446749][T15326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3456'. [ 275.457200][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x4 [ 275.465130][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x2 [ 275.475141][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.482915][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.490722][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.498554][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.506306][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.514071][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.521833][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.529594][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.537352][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.545093][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.550945][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x4 [ 275.552933][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.553027][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.553048][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.560747][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x2 [ 275.568388][ T9] hid-generic 0000:3000000:0000.0075: unknown main item tag 0x0 [ 275.599433][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.600314][ T9] hid-generic 0000:3000000:0000.0075: hidraw0: HID v0.00 Device [sy] on syz0 [ 275.607151][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.624637][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.632350][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.640098][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.643147][T15324] loop5: detected capacity change from 0 to 512 [ 275.647791][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.661768][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.669471][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.677207][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.684993][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.692706][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.700481][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.708390][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.716075][ T3373] hid-generic 0000:3000000:0000.0076: unknown main item tag 0x0 [ 275.729527][ T3373] hid-generic 0000:3000000:0000.0076: hidraw0: HID v0.00 Device [sy] on syz0 [ 275.735892][T15324] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3455: bg 0: block 248: padding at end of block bitmap is not set [ 275.754343][T15324] __quota_error: 60 callbacks suppressed [ 275.754358][T15324] Quota error (device loop5): write_blk: dquota write failed [ 275.767479][T15324] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 275.777891][T15324] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.3455: Failed to acquire dquot type 1 [ 275.789890][T15324] EXT4-fs (loop5): 1 truncate cleaned up [ 275.796594][T15324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.809515][T15324] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.825865][ T4358] bond0 (unregistering): Released all slaves [ 275.834887][ T4358] bond1 (unregistering): Released all slaves [ 275.844160][ T4358] bond2 (unregistering): Released all slaves [ 275.844255][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.853259][ T4358] bond3 (unregistering): Released all slaves [ 275.878329][ T4358] bond4 (unregistering): Released all slaves [ 275.887795][ T4358] bond5 (unregistering): Released all slaves [ 275.896701][ T4358] bond6 (unregistering): Released all slaves [ 275.905869][ T4358] bond7 (unregistering): Released all slaves [ 275.915303][ T4358] bond8 (unregistering): Released all slaves [ 275.937456][ T4372] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.944602][ T4372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.036677][ T29] audit: type=1326 audit(1736241264.908:18331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.071821][ T29] audit: type=1326 audit(1736241264.908:18332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.095573][ T29] audit: type=1326 audit(1736241264.908:18333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.119247][ T29] audit: type=1326 audit(1736241264.908:18334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.142895][ T29] audit: type=1326 audit(1736241264.908:18335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.166505][ T29] audit: type=1326 audit(1736241264.908:18336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.190246][ T29] audit: type=1326 audit(1736241264.908:18337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.195030][T15354] loop5: detected capacity change from 0 to 512 [ 276.213926][ T29] audit: type=1326 audit(1736241264.908:18338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15349 comm="syz.5.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 276.257572][T15354] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3465: invalid indirect mapped block 256 (level 2) [ 276.273050][ T4358] hsr_slave_0: left promiscuous mode [ 276.283520][T15354] EXT4-fs (loop5): 2 truncates cleaned up [ 276.290455][T15354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.305636][ T4358] hsr_slave_1: left promiscuous mode [ 276.329249][T15354] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3465: path /10/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 276.355324][ T4358] veth1_macvtap: left promiscuous mode [ 276.360841][ T4358] veth0_macvtap: left promiscuous mode [ 276.366410][ T4358] veth1_vlan: left promiscuous mode [ 276.371828][ T4358] veth0_vlan: left promiscuous mode [ 276.409613][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x4 [ 276.417457][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x2 [ 276.426755][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.430099][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.443503][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.451302][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.459036][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.466757][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.474536][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.482256][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.490111][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.497890][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.505758][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.513430][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.521074][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.528748][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.536460][ T24] hid-generic 0000:3000000:0000.0077: unknown main item tag 0x0 [ 276.549099][ T24] hid-generic 0000:3000000:0000.0077: hidraw0: HID v0.00 Device [sy] on syz0 [ 276.798732][T14867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.865737][T15408] loop5: detected capacity change from 0 to 512 [ 276.898736][T15408] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3474: corrupted in-inode xattr: invalid ea_ino [ 276.944202][T15408] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3474: couldn't read orphan inode 15 (err -117) [ 276.963298][T15420] loop3: detected capacity change from 0 to 512 [ 276.974294][T15408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.989130][T15408] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3474: path /13/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 277.004638][T15420] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3477: invalid indirect mapped block 256 (level 2) [ 277.068532][T15430] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3474: path /13/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 277.081608][T15420] EXT4-fs (loop3): 2 truncates cleaned up [ 277.121503][T15142] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 277.128663][T15420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.156399][T15142] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 277.175789][T15142] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 277.189309][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.211447][T15142] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 277.246464][T14867] veth0_vlan: entered promiscuous mode [ 277.311846][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.323941][T14867] veth1_vlan: entered promiscuous mode [ 277.426328][T15142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.437525][T15142] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.453496][T15465] loop5: detected capacity change from 0 to 764 [ 277.469930][T15456] tipc: Enabled bearer , priority 28 [ 277.476440][T14867] veth0_macvtap: entered promiscuous mode [ 277.502874][T15468] FAULT_INJECTION: forcing a failure. [ 277.502874][T15468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.516162][T15468] CPU: 1 UID: 0 PID: 15468 Comm: syz.3.3488 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 277.527076][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.537165][T15468] Call Trace: [ 277.540716][T15468] [ 277.543658][T15468] dump_stack_lvl+0xf2/0x150 [ 277.548314][T15468] dump_stack+0x15/0x1a [ 277.552510][T15468] should_fail_ex+0x223/0x230 [ 277.557236][T15468] should_fail+0xb/0x10 [ 277.561435][T15468] should_fail_usercopy+0x1a/0x20 [ 277.566632][T15468] _copy_to_user+0x20/0xa0 [ 277.571083][T15468] simple_read_from_buffer+0xa0/0x110 [ 277.576549][T15468] proc_fail_nth_read+0xf9/0x140 [ 277.581559][T15468] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 277.587148][T15468] vfs_read+0x1a2/0x700 [ 277.591468][T15468] ? __rcu_read_unlock+0x4e/0x70 [ 277.596542][T15468] ? __fget_files+0x17c/0x1c0 [ 277.601277][T15468] ksys_read+0xe8/0x1b0 [ 277.605484][T15468] __x64_sys_read+0x42/0x50 [ 277.610062][T15468] x64_sys_call+0x2874/0x2dc0 [ 277.614770][T15468] do_syscall_64+0xc9/0x1c0 [ 277.619300][T15468] ? clear_bhb_loop+0x55/0xb0 [ 277.624139][T15468] ? clear_bhb_loop+0x55/0xb0 [ 277.628997][T15468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.634985][T15468] RIP: 0033:0x7f73b9e3473c [ 277.639430][T15468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.659074][T15468] RSP: 002b:00007f73b84a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.667530][T15468] RAX: ffffffffffffffda RBX: 00007f73ba025fa0 RCX: 00007f73b9e3473c [ 277.675584][T15468] RDX: 000000000000000f RSI: 00007f73b84a70a0 RDI: 0000000000000006 [ 277.683612][T15468] RBP: 00007f73b84a7090 R08: 0000000000000000 R09: 0000000000000000 [ 277.691590][T15468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.699589][T15468] R13: 0000000000000000 R14: 00007f73ba025fa0 R15: 00007ffef4c42a08 [ 277.707576][T15468] [ 277.731780][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.738885][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.747791][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.754907][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.783988][T15489] loop5: detected capacity change from 0 to 512 [ 277.784514][T14867] veth1_macvtap: entered promiscuous mode [ 277.800613][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.811190][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.821026][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.831579][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.841679][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.852141][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.862761][T14867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.889674][T15489] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3490: invalid indirect mapped block 256 (level 2) [ 277.905151][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.915757][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.925724][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.936259][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.946124][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.956610][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.967421][T14867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.985327][T15489] EXT4-fs (loop5): 2 truncates cleaned up [ 277.993397][T15489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.039424][T14867] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.048360][T14867] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.057294][T14867] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.059100][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.066097][T14867] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.101585][T15142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.466183][T15142] veth0_vlan: entered promiscuous mode [ 278.479430][T15566] loop5: detected capacity change from 0 to 512 [ 278.530546][T15566] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3509: corrupted in-inode xattr: invalid ea_ino [ 278.537392][T15573] loop3: detected capacity change from 0 to 764 [ 278.547121][T15142] veth1_vlan: entered promiscuous mode [ 278.561198][ T3373] tipc: Node number set to 3147495417 [ 278.566985][T15142] veth0_macvtap: entered promiscuous mode [ 278.574423][T15142] veth1_macvtap: entered promiscuous mode [ 278.584622][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.595142][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.605029][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.615542][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.625473][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.635942][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.645832][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.656266][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.667051][T15142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.689511][T15566] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3509: couldn't read orphan inode 15 (err -117) [ 278.701280][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.711876][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.721719][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.732157][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.742129][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.752790][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.762744][T15142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.773278][T15142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.789555][T15142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.790903][T15582] loop3: detected capacity change from 0 to 164 [ 278.812596][T15566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.813355][T15142] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.834170][T15142] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.843211][T15142] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.852026][T15142] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.869593][T15566] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3509: path /22/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 278.897562][T15566] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3509: path /22/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 278.977524][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.051668][T15605] loop3: detected capacity change from 0 to 512 [ 279.075101][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3519'. [ 279.113167][T15605] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3518: bg 0: block 248: padding at end of block bitmap is not set [ 279.154658][T15605] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3518: Failed to acquire dquot type 1 [ 279.223984][T15605] EXT4-fs (loop3): 1 truncate cleaned up [ 279.230190][T15605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.271219][T15605] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.374534][T15623] loop7: detected capacity change from 0 to 512 [ 279.410095][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.465946][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3529'. [ 279.475057][T15664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3529'. [ 279.489800][T15623] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3520: bg 0: block 248: padding at end of block bitmap is not set [ 279.512556][T15623] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.3520: Failed to acquire dquot type 1 [ 279.528827][T15623] EXT4-fs (loop7): 1 truncate cleaned up [ 279.553027][T15623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.587120][T15623] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.675447][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.690945][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x4 [ 279.698733][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x2 [ 279.717283][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.725052][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.732805][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.740865][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.748592][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.756463][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.764158][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.772284][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.780047][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.787776][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.795510][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.803374][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.811040][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.818756][ T35] hid-generic 0000:3000000:0000.0078: unknown main item tag 0x0 [ 279.836582][ T35] hid-generic 0000:3000000:0000.0078: hidraw0: HID v0.00 Device [sy] on syz0 [ 279.907054][T15699] loop3: detected capacity change from 0 to 512 [ 279.967857][T15699] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3538: bg 0: block 248: padding at end of block bitmap is not set [ 280.069213][T15699] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3538: Failed to acquire dquot type 1 [ 280.168965][T15699] EXT4-fs (loop3): 1 truncate cleaned up [ 280.179277][T15699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.193586][T15699] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.457392][T15736] FAULT_INJECTION: forcing a failure. [ 280.457392][T15736] name failslab, interval 1, probability 0, space 0, times 0 [ 280.470181][T15736] CPU: 1 UID: 0 PID: 15736 Comm: syz.6.3549 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 280.480965][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 280.491097][T15736] Call Trace: [ 280.494389][T15736] [ 280.497424][T15736] dump_stack_lvl+0xf2/0x150 [ 280.502108][T15736] dump_stack+0x15/0x1a [ 280.506392][T15736] should_fail_ex+0x223/0x230 [ 280.511132][T15736] should_failslab+0x8f/0xb0 [ 280.515795][T15736] __kmalloc_noprof+0xab/0x3f0 [ 280.520920][T15736] ? ip_options_get+0x51/0x330 [ 280.525855][T15736] ip_options_get+0x51/0x330 [ 280.530559][T15736] do_ip_setsockopt+0x1b23/0x2340 [ 280.535681][T15736] ip_setsockopt+0x63/0x100 [ 280.540253][T15736] ipv6_setsockopt+0xef/0x130 [ 280.544969][T15736] tcp_setsockopt+0x93/0xb0 [ 280.549555][T15736] sock_common_setsockopt+0x64/0x80 [ 280.554802][T15736] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 280.560802][T15736] __sys_setsockopt+0x187/0x200 [ 280.565732][T15736] __x64_sys_setsockopt+0x66/0x80 [ 280.570784][T15736] x64_sys_call+0x282e/0x2dc0 [ 280.575583][T15736] do_syscall_64+0xc9/0x1c0 [ 280.580118][T15736] ? clear_bhb_loop+0x55/0xb0 [ 280.584824][T15736] ? clear_bhb_loop+0x55/0xb0 [ 280.589573][T15736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.595549][T15736] RIP: 0033:0x7f6b20975d29 [ 280.600091][T15736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.619724][T15736] RSP: 002b:00007f6b1efe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.628260][T15736] RAX: ffffffffffffffda RBX: 00007f6b20b65fa0 RCX: 00007f6b20975d29 [ 280.636329][T15736] RDX: 0000000000000004 RSI: 0004000000000000 RDI: 0000000000000004 [ 280.644401][T15736] RBP: 00007f6b1efe7090 R08: 000000000000000a R09: 0000000000000000 [ 280.652397][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.660416][T15736] R13: 0000000000000000 R14: 00007f6b20b65fa0 R15: 00007ffd61dd6468 [ 280.668421][T15736] [ 280.728763][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.736136][T15754] loop7: detected capacity change from 0 to 512 [ 280.746419][T15754] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 280.865018][T15754] EXT4-fs (loop7): 1 truncate cleaned up [ 280.871124][T15754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.936260][T15770] loop3: detected capacity change from 0 to 512 [ 280.953942][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 280.953956][ T29] audit: type=1400 audit(1736241269.828:18513): avc: denied { create } for pid=15767 comm="syz.6.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 281.005862][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.052765][T15770] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3551: corrupted in-inode xattr: invalid ea_ino [ 281.061784][ T29] audit: type=1400 audit(1736241269.868:18514): avc: denied { write } for pid=15767 comm="syz.6.3559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 281.071496][T15777] loop7: detected capacity change from 0 to 512 [ 281.086722][ T29] audit: type=1326 audit(1736241269.868:18515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.116692][ T29] audit: type=1326 audit(1736241269.868:18516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.133632][T15770] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3551: couldn't read orphan inode 15 (err -117) [ 281.140325][ T29] audit: type=1326 audit(1736241269.868:18517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.175919][ T29] audit: type=1326 audit(1736241269.868:18518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.199554][ T29] audit: type=1326 audit(1736241269.868:18519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.223188][ T29] audit: type=1326 audit(1736241269.878:18520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.223219][ T29] audit: type=1326 audit(1736241269.878:18521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.223265][ T29] audit: type=1326 audit(1736241269.878:18522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15771 comm="syz.5.3560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 281.242465][T15770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.322927][T15777] EXT4-fs (loop7): orphan cleanup on readonly fs [ 281.334939][T15777] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3561: bg 0: block 248: padding at end of block bitmap is not set [ 281.383800][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.391325][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.393685][T15770] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3551: path /89/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 281.398716][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.427998][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.435515][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.443010][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.450457][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.452615][T15777] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.3561: Failed to acquire dquot type 1 [ 281.457974][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.476848][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.484005][T15770] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3551: path /89/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 281.484397][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.513072][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.520511][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.527976][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.535484][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.543102][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.550537][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.557998][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.565545][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.573076][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.580648][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.588287][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.595759][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.603395][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.608359][T15777] EXT4-fs (loop7): 1 truncate cleaned up [ 281.610790][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.624058][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.631516][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.639215][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.646661][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.654438][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.661887][T15183] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 281.670138][T15777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.675211][T15183] hid-generic 0000:0000:0000.0079: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 281.692218][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.777848][T15777] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 281.804209][T15822] loop6: detected capacity change from 0 to 512 [ 281.815540][T15777] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 281.829229][T15822] EXT4-fs (loop6): orphan cleanup on readonly fs [ 281.836860][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3572'. [ 281.845973][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'. [ 281.847959][T15822] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3576: bg 0: block 248: padding at end of block bitmap is not set [ 281.894280][T15777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.909832][T15822] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3576: Failed to acquire dquot type 1 [ 281.926221][T15822] EXT4-fs (loop6): 1 truncate cleaned up [ 281.988101][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.020471][T15822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.046885][T15845] loop5: detected capacity change from 0 to 512 [ 282.085575][T15822] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 282.104141][T15845] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3583: corrupted in-inode xattr: invalid ea_ino [ 282.121087][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.128686][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.136153][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.146717][T15845] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3583: couldn't read orphan inode 15 (err -117) [ 282.168918][T15822] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 282.184133][T15845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.224738][T15822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 282.225423][T15845] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3583: path /39/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 282.268084][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.275580][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.283116][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.290609][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.298060][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.305519][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.312989][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.320472][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.327939][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.335374][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.342935][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.353193][T14867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.362836][T15845] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3583: path /39/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 282.363782][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.391865][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.399401][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.407072][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.414566][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.421999][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.429421][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.436888][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.444330][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.451875][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.459281][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.466815][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.474329][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.481768][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.489176][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.496626][T15183] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 282.505022][T15183] hid-generic 0000:0000:0000.007A: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 282.518264][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.880542][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.881042][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x4 [ 282.888059][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.895817][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x2 [ 282.903344][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.941388][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 282.942495][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.949170][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 282.956582][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.956610][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.956637][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.964374][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 282.971696][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.979132][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 282.986552][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.986660][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.986685][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 282.994515][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.001840][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.009459][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.016828][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.024193][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.031601][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.039293][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.039320][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.039344][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.039376][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.039402][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.116193][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.123902][T15183] hid-generic 0000:3000000:0000.007C: unknown main item tag 0x0 [ 283.144954][T15946] loop3: detected capacity change from 0 to 512 [ 283.146934][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.158818][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.163939][T15183] hid-generic 0000:3000000:0000.007C: hidraw0: HID v0.00 Device [sy] on syz0 [ 283.166410][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.183808][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.191397][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.198842][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.206418][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.213913][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.221479][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.228886][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.236347][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.243824][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.251288][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.258772][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.266223][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.273661][T12771] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 283.285438][T12771] hid-generic 0000:0000:0000.007B: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 283.340777][T15946] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3604: bg 0: block 248: padding at end of block bitmap is not set [ 283.360380][T15946] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3604: Failed to acquire dquot type 1 [ 283.384433][T15946] EXT4-fs (loop3): 1 truncate cleaned up [ 283.390653][T15946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.439148][T15946] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.565092][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.117420][T15996] loop6: detected capacity change from 0 to 512 [ 284.139963][T15996] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 284.181700][T15996] EXT4-fs (loop6): 1 truncate cleaned up [ 284.187914][T15996] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.286975][T14867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.320582][T16016] loop5: detected capacity change from 0 to 512 [ 284.369457][T16016] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3623: corrupted in-inode xattr: invalid ea_ino [ 284.403116][T16016] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3623: couldn't read orphan inode 15 (err -117) [ 284.441580][T16016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.485324][T16016] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3623: path /43/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 284.498688][T16034] loop7: detected capacity change from 0 to 512 [ 284.517664][T16030] loop6: detected capacity change from 0 to 512 [ 284.552066][T16034] EXT4-fs (loop7): orphan cleanup on readonly fs [ 284.559049][T16030] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3626: invalid indirect mapped block 256 (level 2) [ 284.597529][T16016] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3623: path /43/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 284.634325][T16034] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3628: bg 0: block 248: padding at end of block bitmap is not set [ 284.649768][T16030] EXT4-fs (loop6): 2 truncates cleaned up [ 284.656161][T16030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.659705][T16034] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.3628: Failed to acquire dquot type 1 [ 284.682046][T16034] EXT4-fs (loop7): 1 truncate cleaned up [ 284.688327][T16034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 284.710632][T16030] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3626: path /27/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 284.734087][T16034] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 284.746725][T16030] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3626: path /27/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 284.768516][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.770096][T16034] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 284.827102][T16060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.843763][T16070] serio: Serial port ttyS3 [ 284.918943][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.978759][T14867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.224254][T16112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.333368][T16124] loop6: detected capacity change from 0 to 512 [ 285.363499][T16124] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3647: invalid indirect mapped block 256 (level 2) [ 285.401585][T16124] EXT4-fs (loop6): 2 truncates cleaned up [ 285.407659][T16124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.442730][T16124] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3647: path /32/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 285.466602][T16124] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3647: path /32/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 285.754713][T16160] tipc: Started in network mode [ 285.759723][T16160] tipc: Node identity fa2ae063b817, cluster identity 4711 [ 285.767015][T16160] tipc: Enabled bearer , priority 0 [ 285.905227][T16159] tipc: Resetting bearer [ 285.922671][T16159] tipc: Disabling bearer [ 285.940997][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 285.948551][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 285.955997][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 285.968811][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 285.976328][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 285.983825][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 285.991390][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 285.998815][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.006412][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.013919][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.021436][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.028872][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.036662][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.044192][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.271368][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.271466][T14867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.278810][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.295262][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.302724][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.310150][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.317651][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.325160][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.332651][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.340210][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.347664][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.355102][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.362528][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.369996][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.377445][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.384936][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.392420][T14570] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 286.402497][T14570] hid-generic 0000:0000:0000.007D: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 286.416382][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x4 [ 286.424270][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x2 [ 286.439784][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x4 [ 286.447565][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x2 [ 286.469340][T16202] loop3: detected capacity change from 0 to 512 [ 286.489433][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.497337][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.505115][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.512951][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.520723][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.528510][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.536210][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.543979][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.551686][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.559392][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.567099][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.574842][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.582610][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.590298][T15183] hid-generic 0000:3000000:0000.007E: unknown main item tag 0x0 [ 286.622901][T16215] loop5: detected capacity change from 0 to 512 [ 286.646866][T16213] loop6: detected capacity change from 0 to 512 [ 286.648858][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.660860][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.668670][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.676407][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.680563][T16202] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3662: bg 0: block 248: padding at end of block bitmap is not set [ 286.684098][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.706127][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.706614][T16202] __quota_error: 110 callbacks suppressed [ 286.706631][T16202] Quota error (device loop3): write_blk: dquota write failed [ 286.713875][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.713904][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.713931][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.719678][T16202] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 286.727140][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.734733][T16202] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3662: Failed to acquire dquot type 1 [ 286.742387][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.750587][T16202] EXT4-fs (loop3): 1 truncate cleaned up [ 286.759931][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.800056][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.801984][ T29] audit: type=1326 audit(1736241275.578:18622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 286.807761][ T3376] hid-generic 0000:3000000:0000.007F: unknown main item tag 0x0 [ 286.831298][ T29] audit: type=1326 audit(1736241275.578:18623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 286.862569][ T29] audit: type=1326 audit(1736241275.578:18624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 286.869557][T15183] hid-generic 0000:3000000:0000.007E: hidraw0: HID v0.00 Device [sy] on syz0 [ 286.886291][ T29] audit: type=1326 audit(1736241275.578:18625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 286.903394][ T3376] hid-generic 0000:3000000:0000.007F: hidraw1: HID v0.00 Device [sy] on syz0 [ 286.919623][ T29] audit: type=1326 audit(1736241275.578:18626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 286.953097][ T29] audit: type=1326 audit(1736241275.578:18627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 286.976717][ T29] audit: type=1326 audit(1736241275.578:18628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 287.000359][ T29] audit: type=1326 audit(1736241275.578:18629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.7.3670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b1125d29 code=0x7ffc0000 [ 287.027928][T16202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.041246][T16202] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.066914][T16215] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.3669: corrupted in-inode xattr: invalid ea_ino [ 287.155923][T16215] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3669: couldn't read orphan inode 15 (err -117) [ 287.172677][T16215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.181218][T16213] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3664: bg 0: block 248: padding at end of block bitmap is not set [ 287.187752][T16215] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3669: path /47/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 287.228202][T16215] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.5.3669: path /47/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 287.248451][T16213] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3664: Failed to acquire dquot type 1 [ 287.274760][T16213] EXT4-fs (loop6): 1 truncate cleaned up [ 287.280923][T16213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.301405][T16213] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.317090][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.338915][T16240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.353753][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.525528][T14867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.611840][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.619728][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.627218][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.693189][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.700738][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.708657][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.716311][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.723728][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.731171][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.738571][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.746024][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.753432][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.760902][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 287.768370][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.025289][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.032806][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.040398][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.048211][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.055700][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.063330][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.071082][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.078573][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.086037][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.090428][T16275] syz.7.3684[16275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.093483][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.097103][T16275] syz.7.3684[16275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.104918][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.131372][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.133296][T16283] loop5: detected capacity change from 0 to 2048 [ 288.138762][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.152603][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.153848][T16275] syz.7.3684[16275] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.160021][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.178953][T12771] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 288.189002][T12771] hid-generic 0000:0000:0000.0080: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 288.232928][T16283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.266443][T16291] loop6: detected capacity change from 0 to 1024 [ 288.273095][T16291] ext4: Unknown parameter 'fsuuid' [ 288.297947][T16295] loop7: detected capacity change from 0 to 512 [ 288.333583][T16295] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.3687: corrupted in-inode xattr: invalid ea_ino [ 288.375181][T16283] FAULT_INJECTION: forcing a failure. [ 288.375181][T16283] name failslab, interval 1, probability 0, space 0, times 0 [ 288.387887][T16283] CPU: 1 UID: 0 PID: 16283 Comm: syz.5.3685 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 288.396680][T16295] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.3687: couldn't read orphan inode 15 (err -117) [ 288.398760][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 288.398776][T16283] Call Trace: [ 288.398784][T16283] [ 288.426968][T16283] dump_stack_lvl+0xf2/0x150 [ 288.431606][T16283] dump_stack+0x15/0x1a [ 288.435847][T16283] should_fail_ex+0x223/0x230 [ 288.440563][T16283] should_failslab+0x8f/0xb0 [ 288.445269][T16283] kmem_cache_alloc_lru_noprof+0x57/0x320 [ 288.445884][T16295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.451063][T16283] ? ext4_alloc_inode+0x38/0x320 [ 288.451109][T16283] ext4_alloc_inode+0x38/0x320 [ 288.473241][T16283] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 288.478665][T16283] alloc_inode+0x3c/0x160 [ 288.483057][T16283] new_inode+0x1e/0x100 [ 288.487241][T16283] __ext4_new_inode+0x13f/0x2230 [ 288.492216][T16283] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 288.498094][T16283] ? __dquot_initialize+0x13a/0x760 [ 288.503358][T16283] ? _raw_spin_unlock+0x26/0x50 [ 288.508309][T16283] ext4_create+0x172/0x2f0 [ 288.512762][T16283] ? __pfx_ext4_create+0x10/0x10 [ 288.517732][T16283] path_openat+0xe92/0x1fa0 [ 288.522277][T16283] do_filp_open+0x107/0x230 [ 288.526859][T16283] do_sys_openat2+0xab/0x120 [ 288.531412][T16295] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.7.3687: path /24/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 288.531551][T16283] __x64_sys_openat+0xf3/0x120 [ 288.557602][T16283] x64_sys_call+0x2b30/0x2dc0 [ 288.562356][T16283] do_syscall_64+0xc9/0x1c0 [ 288.567241][T16283] ? clear_bhb_loop+0x55/0xb0 [ 288.571965][T16283] ? clear_bhb_loop+0x55/0xb0 [ 288.576654][T16283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.582691][T16283] RIP: 0033:0x7fe6ef965d29 [ 288.587184][T16283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.606824][T16283] RSP: 002b:00007fe6edfd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 288.615268][T16283] RAX: ffffffffffffffda RBX: 00007fe6efb55fa0 RCX: 00007fe6ef965d29 [ 288.623308][T16283] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c [ 288.631318][T16283] RBP: 00007fe6edfd1090 R08: 0000000000000000 R09: 0000000000000000 [ 288.639295][T16283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.647273][T16283] R13: 0000000000000000 R14: 00007fe6efb55fa0 R15: 00007ffce77fbc78 [ 288.655257][T16283] [ 288.681652][T16295] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.7.3687: path /24/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 288.750377][T14850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.760923][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.865093][T16332] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3691'. [ 288.883993][T16329] loop3: detected capacity change from 0 to 512 [ 288.918627][T16329] EXT4-fs (loop3): orphan cleanup on readonly fs [ 288.926769][T16329] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3694: bg 0: block 248: padding at end of block bitmap is not set [ 288.943012][T16329] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.3694: Failed to acquire dquot type 1 [ 288.954739][T16329] EXT4-fs (loop3): 1 truncate cleaned up [ 288.961098][T16329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.009195][T16329] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 289.280470][T16350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.406735][T16329] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 289.525601][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.536082][T16367] FAULT_INJECTION: forcing a failure. [ 289.536082][T16367] name failslab, interval 1, probability 0, space 0, times 0 [ 289.537113][T16366] netlink: 268 bytes leftover after parsing attributes in process `syz.6.3702'. [ 289.548919][T16367] CPU: 0 UID: 0 PID: 16367 Comm: syz.7.3701 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 289.568773][T16367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.578874][T16367] Call Trace: [ 289.582164][T16367] [ 289.585101][T16367] dump_stack_lvl+0xf2/0x150 [ 289.589719][T16367] dump_stack+0x15/0x1a [ 289.593909][T16367] should_fail_ex+0x223/0x230 [ 289.598663][T16367] ? sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 289.604629][T16367] should_failslab+0x8f/0xb0 [ 289.609304][T16367] __kmalloc_cache_noprof+0x4e/0x320 [ 289.614625][T16367] sctp_auth_asoc_copy_shkeys+0x101/0x340 [ 289.620359][T16367] sctp_association_new+0xe78/0x1130 [ 289.625704][T16367] sctp_connect_new_asoc+0x1b0/0x3b0 [ 289.631157][T16367] sctp_sendmsg+0xf05/0x1920 [ 289.635845][T16367] ? __pfx_sctp_sendmsg+0x10/0x10 [ 289.641005][T16367] inet_sendmsg+0xc5/0xd0 [ 289.645444][T16367] __sock_sendmsg+0x102/0x180 [ 289.650242][T16367] ____sys_sendmsg+0x312/0x410 [ 289.655022][T16367] __sys_sendmsg+0x19d/0x230 [ 289.659708][T16367] __x64_sys_sendmsg+0x46/0x50 [ 289.664518][T16367] x64_sys_call+0x2734/0x2dc0 [ 289.669210][T16367] do_syscall_64+0xc9/0x1c0 [ 289.673748][T16367] ? clear_bhb_loop+0x55/0xb0 [ 289.678452][T16367] ? clear_bhb_loop+0x55/0xb0 [ 289.683216][T16367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.689151][T16367] RIP: 0033:0x7f53b1125d29 [ 289.693572][T16367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.713191][T16367] RSP: 002b:00007f53af797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.721698][T16367] RAX: ffffffffffffffda RBX: 00007f53b1315fa0 RCX: 00007f53b1125d29 [ 289.729703][T16367] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 289.737703][T16367] RBP: 00007f53af797090 R08: 0000000000000000 R09: 0000000000000000 [ 289.745777][T16367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.753832][T16367] R13: 0000000000000000 R14: 00007f53b1315fa0 R15: 00007ffc13cc8768 [ 289.761822][T16367] [ 289.796053][T16366] syz.6.3702 (16366): /proc/16363/oom_adj is deprecated, please use /proc/16363/oom_score_adj instead. [ 289.859440][T16376] loop3: detected capacity change from 0 to 512 [ 289.884734][T16366] loop6: detected capacity change from 0 to 512 [ 289.908186][T16366] EXT4-fs warning (device loop6): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 289.918967][T16366] EXT4-fs warning (device loop6): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132791, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop14 [ 289.939506][T16376] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.3703: corrupted in-inode xattr: invalid ea_ino [ 289.974708][T16376] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3703: couldn't read orphan inode 15 (err -117) [ 289.999415][T16376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.017479][T16376] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3703: path /111/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 290.053820][T16392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.069839][T16392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.084457][T16376] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.3.3703: path /111/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 290.171790][T12994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.193365][T16407] xt_nat: multiple ranges no longer supported [ 290.245840][T16400] infiniband syz1: set active [ 290.250571][T16400] infiniband syz1: added team_slave_0 [ 290.309790][T16417] loop7: detected capacity change from 0 to 1024 [ 290.322103][T16400] RDS/IB: syz1: added [ 290.326152][T16400] smc: adding ib device syz1 with port count 1 [ 290.338496][T16400] smc: ib device syz1 port 1 has pnetid [ 290.385302][T16417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.489533][T16436] EXT4-fs (loop7): shut down requested (0) [ 290.593480][ T4374] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 290.671240][ T4374] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1412 with error 28 [ 290.683807][ T4374] EXT4-fs (loop7): This should not happen!! Data will be lost [ 290.683807][ T4374] [ 290.693581][ T4374] EXT4-fs (loop7): Total free blocks count 0 [ 290.699581][ T4374] EXT4-fs (loop7): Free/Dirty block details [ 290.705696][ T4374] EXT4-fs (loop7): free_blocks=68451041280 [ 290.711538][ T4374] EXT4-fs (loop7): dirty_blocks=1424 [ 290.716900][ T4374] EXT4-fs (loop7): Block reservation details [ 290.722931][ T4374] EXT4-fs (loop7): i_reserved_data_blocks=89 [ 290.949875][T16463] loop7: detected capacity change from 0 to 512 [ 290.974825][T16463] EXT4-fs (loop7): orphan cleanup on readonly fs [ 290.988928][T16463] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3720: bg 0: block 248: padding at end of block bitmap is not set [ 291.021862][T16463] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.3720: Failed to acquire dquot type 1 [ 291.039586][T16463] EXT4-fs (loop7): 1 truncate cleaned up [ 291.069221][T16463] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.101443][T16463] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 291.131355][T16463] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 291.157166][T16463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.236529][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.314833][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.322401][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.329922][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.363442][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.371025][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.378482][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.387084][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.394584][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.402174][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.409573][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.417038][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.424484][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.431961][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.439446][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.532927][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.540479][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.548392][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.556192][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.563679][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.571215][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.578816][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.586499][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.594172][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.601742][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.609245][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.616716][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.624235][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.631836][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.639644][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.647138][T12771] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 291.655481][T12771] hid-generic 0000:0000:0000.0081: hidraw0: HID vffffff.fd Device [syz0] on syz1 [ 291.959166][T16530] netlink: 'syz.5.3734': attribute type 7 has an invalid length. [ 291.967002][T16530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3734'. [ 292.131889][T16556] loop6: detected capacity change from 0 to 512 [ 292.148080][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3740'. [ 292.176043][T16556] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3739: corrupted in-inode xattr: invalid ea_ino [ 292.337250][T16556] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3739: couldn't read orphan inode 15 (err -117) [ 292.364672][T16556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.390972][T16584] loop7: detected capacity change from 0 to 512 [ 292.422753][T16567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 292.430019][T16567] IPv6: NLM_F_CREATE should be set when creating new route [ 292.458455][T16567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3742'. [ 292.626809][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 292.626830][ T29] audit: type=1326 audit(1736241281.318:18705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.656641][ T29] audit: type=1326 audit(1736241281.318:18706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.680404][ T29] audit: type=1326 audit(1736241281.318:18707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.704205][ T29] audit: type=1326 audit(1736241281.318:18708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.727798][ T29] audit: type=1326 audit(1736241281.318:18709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.751372][ T29] audit: type=1326 audit(1736241281.318:18710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.775001][ T29] audit: type=1326 audit(1736241281.318:18711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.798597][ T29] audit: type=1326 audit(1736241281.318:18712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.822961][ T29] audit: type=1326 audit(1736241281.318:18713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.846707][ T29] audit: type=1326 audit(1736241281.318:18714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16561 comm="syz.5.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ef965d29 code=0x7ffc0000 [ 292.994060][T16556] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3739: path /42/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 293.008580][T16584] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.3744: corrupted in-inode xattr: invalid ea_ino [ 293.049085][T16584] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.3744: couldn't read orphan inode 15 (err -117) [ 293.063173][T16584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.113966][T16556] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3739: path /42/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 293.144748][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.246335][T16609] netlink: zone id is out of range [ 293.256101][T14867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.311052][T16609] netlink: del zone limit has 4 unknown bytes [ 293.332988][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'. [ 293.366985][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3752'. [ 293.443038][T16630] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.3754'. [ 295.474479][T16660] syz.0.3770[16660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.474569][T16660] syz.0.3770[16660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.536826][T16660] syz.0.3770[16660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.591924][T16674] FAULT_INJECTION: forcing a failure. [ 295.591924][T16674] name failslab, interval 1, probability 0, space 0, times 0 [ 295.616034][T16674] CPU: 1 UID: 0 PID: 16674 Comm: syz.6.3764 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 295.626876][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.628640][T16678] FAULT_INJECTION: forcing a failure. [ 295.628640][T16678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.636935][T16674] Call Trace: [ 295.636945][T16674] [ 295.636955][T16674] dump_stack_lvl+0xf2/0x150 [ 295.660821][T16674] dump_stack+0x15/0x1a [ 295.664999][T16674] should_fail_ex+0x223/0x230 [ 295.669726][T16674] should_failslab+0x8f/0xb0 [ 295.674410][T16674] kmem_cache_alloc_noprof+0x52/0x320 [ 295.679805][T16674] ? skb_clone+0x154/0x1f0 [ 295.684267][T16674] skb_clone+0x154/0x1f0 [ 295.688524][T16674] __netlink_deliver_tap+0x2bd/0x4f0 [ 295.693905][T16674] netlink_unicast+0x64a/0x670 [ 295.698685][T16674] netlink_sendmsg+0x5cc/0x6e0 [ 295.703470][T16674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.708862][T16674] __sock_sendmsg+0x140/0x180 [ 295.713564][T16674] __sys_sendto+0x1a8/0x230 [ 295.718148][T16674] __x64_sys_sendto+0x78/0x90 [ 295.722837][T16674] x64_sys_call+0x29fa/0x2dc0 [ 295.727556][T16674] do_syscall_64+0xc9/0x1c0 [ 295.732097][T16674] ? clear_bhb_loop+0x55/0xb0 [ 295.736788][T16674] ? clear_bhb_loop+0x55/0xb0 [ 295.741548][T16674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.747470][T16674] RIP: 0033:0x7f6b20975d29 [ 295.751917][T16674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.771591][T16674] RSP: 002b:00007f6b1efe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 295.780030][T16674] RAX: ffffffffffffffda RBX: 00007f6b20b65fa0 RCX: 00007f6b20975d29 [ 295.788070][T16674] RDX: 0000000000000078 RSI: 0000000020000080 RDI: 0000000000000003 [ 295.796049][T16674] RBP: 00007f6b1efe7090 R08: 0000000000000000 R09: 0000000000000000 [ 295.804073][T16674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.812050][T16674] R13: 0000000000000000 R14: 00007f6b20b65fa0 R15: 00007ffd61dd6468 [ 295.820036][T16674] [ 295.823173][T16678] CPU: 0 UID: 0 PID: 16678 Comm: syz.3.3766 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 295.833996][T16678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.844067][T16678] Call Trace: [ 295.847413][T16678] [ 295.850415][T16678] dump_stack_lvl+0xf2/0x150 [ 295.855035][T16678] dump_stack+0x15/0x1a [ 295.859296][T16678] should_fail_ex+0x223/0x230 [ 295.864004][T16678] should_fail+0xb/0x10 [ 295.868293][T16678] should_fail_usercopy+0x1a/0x20 [ 295.873351][T16678] _copy_from_iter+0xd5/0xd00 [ 295.878137][T16678] ? kmalloc_reserve+0x16e/0x190 [ 295.883209][T16678] ? __build_skb_around+0x196/0x1f0 [ 295.888429][T16678] ? __alloc_skb+0x21f/0x310 [ 295.893080][T16678] ? __virt_addr_valid+0x1ed/0x250 [ 295.898311][T16678] ? __check_object_size+0x364/0x520 [ 295.903625][T16678] netlink_sendmsg+0x460/0x6e0 [ 295.908451][T16678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.913861][T16678] __sock_sendmsg+0x140/0x180 [ 295.918605][T16678] sock_write_iter+0x15e/0x1a0 [ 295.923405][T16678] vfs_write+0x77f/0x920 [ 295.927739][T16678] ? __pfx_sock_write_iter+0x10/0x10 [ 295.933058][T16678] ksys_write+0xe8/0x1b0 [ 295.937353][T16678] __x64_sys_write+0x42/0x50 [ 295.942203][T16678] x64_sys_call+0x287e/0x2dc0 [ 295.946898][T16678] do_syscall_64+0xc9/0x1c0 [ 295.951420][T16678] ? clear_bhb_loop+0x55/0xb0 [ 295.956135][T16678] ? clear_bhb_loop+0x55/0xb0 [ 295.960918][T16678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.966970][T16678] RIP: 0033:0x7f73b9e35d29 [ 295.971397][T16678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.991019][T16678] RSP: 002b:00007f73b84a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.999618][T16678] RAX: ffffffffffffffda RBX: 00007f73ba025fa0 RCX: 00007f73b9e35d29 [ 296.007605][T16678] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 296.015613][T16678] RBP: 00007f73b84a7090 R08: 0000000000000000 R09: 0000000000000000 [ 296.023661][T16678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.031653][T16678] R13: 0000000000000000 R14: 00007f73ba025fa0 R15: 00007ffef4c42a08 [ 296.039662][T16678] [ 296.045784][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3764'. [ 296.222171][T16682] loop7: detected capacity change from 0 to 512 [ 296.240097][T16682] EXT4-fs: Ignoring removed i_version option [ 296.246234][T16682] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.303746][T16682] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 296.573069][T16710] wg2: entered promiscuous mode [ 296.578002][T16710] wg2: entered allmulticast mode [ 296.616261][T16726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3769'. [ 296.642243][T16682] EXT4-fs (loop7): 1 truncate cleaned up [ 296.648645][T16682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.817840][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.145360][T16751] loop6: detected capacity change from 0 to 512 [ 297.164584][T16755] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 297.169368][T16751] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.3780: corrupted in-inode xattr: invalid ea_ino [ 297.216955][T16751] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3780: couldn't read orphan inode 15 (err -117) [ 297.267265][T16751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.297180][T16775] loop7: detected capacity change from 0 to 512 [ 297.319817][T16751] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3780: path /49/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 297.341913][T16775] EXT4-fs (loop7): orphan cleanup on readonly fs [ 297.351297][T16775] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3784: bg 0: block 248: padding at end of block bitmap is not set [ 297.369381][T16751] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.6.3780: path /49/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 297.369484][T16775] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.3784: Failed to acquire dquot type 1 [ 297.403517][T16775] EXT4-fs (loop7): 1 truncate cleaned up [ 297.409880][T16775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.434314][T16775] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 297.454847][T14867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.464356][T16775] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 297.493714][ T2998] ================================================================== [ 297.502128][ T2998] BUG: KCSAN: data-race in set_nlink / set_nlink [ 297.508532][ T2998] [ 297.510886][ T2998] read to 0xffff88810671eeb8 of 4 bytes by task 14583 on cpu 0: [ 297.518535][ T2998] set_nlink+0x2b/0xb0 [ 297.522633][ T2998] kernfs_iop_permission+0x1c8/0x210 [ 297.527940][ T2998] inode_permission+0x18c/0x300 [ 297.532809][ T2998] link_path_walk+0x14b/0x820 [ 297.537502][ T2998] path_openat+0x1af/0x1fa0 [ 297.542029][ T2998] do_filp_open+0x107/0x230 [ 297.546556][ T2998] do_sys_openat2+0xab/0x120 [ 297.551171][ T2998] __x64_sys_openat+0xf3/0x120 [ 297.555953][ T2998] x64_sys_call+0x2b30/0x2dc0 [ 297.560642][ T2998] do_syscall_64+0xc9/0x1c0 [ 297.565161][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.571095][ T2998] [ 297.573426][ T2998] write to 0xffff88810671eeb8 of 4 bytes by task 2998 on cpu 1: [ 297.581067][ T2998] set_nlink+0x98/0xb0 [ 297.585164][ T2998] kernfs_iop_permission+0x1c8/0x210 [ 297.590475][ T2998] inode_permission+0x18c/0x300 [ 297.595338][ T2998] link_path_walk+0x14b/0x820 [ 297.600120][ T2998] path_openat+0x1af/0x1fa0 [ 297.604643][ T2998] do_filp_open+0x107/0x230 [ 297.609164][ T2998] do_sys_openat2+0xab/0x120 [ 297.613766][ T2998] __x64_sys_openat+0xf3/0x120 [ 297.618545][ T2998] x64_sys_call+0x2b30/0x2dc0 [ 297.623239][ T2998] do_syscall_64+0xc9/0x1c0 [ 297.627756][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.633680][ T2998] [ 297.636008][ T2998] value changed: 0x0000001c -> 0x0000001d [ 297.641731][ T2998] [ 297.644058][ T2998] Reported by Kernel Concurrency Sanitizer on: [ 297.650253][ T2998] CPU: 1 UID: 0 PID: 2998 Comm: udevd Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 297.660505][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.670572][ T2998] ================================================================== [ 297.703965][T15142] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.