last executing test programs: 1m48.281386329s ago: executing program 32 (id=736): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x28c402, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfffffffffffffd19, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7ffff000) 1m44.757013939s ago: executing program 33 (id=794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) mknod$loop(0x0, 0x100000000000600d, 0x0) 1m44.535706604s ago: executing program 0 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m44.361614705s ago: executing program 0 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24004814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = socket(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000001a51811000059c6560df40d135a99b2307100ca4f7706c858af21a5a3093b8bff34dd8b6adc93880db6ad147535f838cc4a", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff15000000bfa208000000000007020000f838ffffb703000008000d0000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) sendmmsg$inet(r4, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r11 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r12, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r11, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1m44.090489192s ago: executing program 0 (id=815): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r1]) ppoll(&(0x7f0000000100)=[{r1, 0x2392}, {r1, 0x5600}, {0xffffffffffffffff, 0x9050}, {0xffffffffffffffff, 0x1000}, {0xffffffffffffffff, 0x8001}, {0xffffffffffffffff, 0x30c}, {0xffffffffffffffff, 0x8000}, {0xffffffffffffffff, 0xe7ee7ffbd3c5f559}], 0x8, 0x0, 0x0, 0x0) tkill(r0, 0x7) 1m43.938396183s ago: executing program 0 (id=817): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x3904}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, r6, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={0x0, 0xffffffff}, &(0x7f0000000140)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.542448238s ago: executing program 0 (id=823): mknod(&(0x7f0000000140)='./file0\x00', 0x8220, 0xe) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) 1m42.782394668s ago: executing program 0 (id=831): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) 1m42.781975428s ago: executing program 34 (id=831): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) 1m40.415248402s ago: executing program 3 (id=855): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) pipe2$9p(&(0x7f00000000c0), 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x22b118a4, 0x1, {{0x9, 0x4, 0x1, 0x7, 0x24, 0x65, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x5b, [@dev={0xac, 0x14, 0x14, 0x27}, @multicast1, @broadcast]}]}}}}}) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x5, 0x0) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 1m40.270921761s ago: executing program 3 (id=857): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x2) syz_read_part_table(0x104c, &(0x7f00000002c0)="$eJzsz7GpAkEUhtF/HrtPQZApQWOrGFNNjWzCEgRrMdAeRVkNNDEUFM7JhrnfhRu+yDXJ+N3n5PWxuuxGyX42z6H93aMyhK3muFxkWpPtMLYuObX/lNqne4T9c0eXzflztwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA77gFAAD///krCKU=") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010004000000000000f8ffff840000006e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) timer_create(0x6, &(0x7f0000001400)={0x0, 0x1d, 0x0, @thr={&(0x7f0000001340)="584f93eb9a973df4a4af785f82bc3e79fa23c1b9b63aa323396af9f01a3cf3edb659273028f1d735aba68e793529beaec82fa0", &(0x7f0000001380)="c975a88adbd0a7470ebe2e6a035a3a6742283d79e27b096f7803d7c3fd72a5b204a1ff6261eec24defbe73c67341b45d2d41a43a023634603f331470aaa2b177a1922bd442c1c349caffaac276454f2585c983549ee87bcd67ff16d0db62f2751392827d1609fa02b21d9ef5b9a961499d"}}, &(0x7f0000001440)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$inet(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001580)="7dd2d3280c34986355550fd324d40a735ee96694c8a3a3d51e1215dc6bb7f46ec54fff7b99c9babe60a911925d9b1e40833d99e843fd4b7e655d91fadebef194ee8ef123ecba4b457cb0cfeb0dcbf30f60742b44f5e11aa5886ebce46271af264e961cdbdc", 0x65}], 0x1, &(0x7f0000001640)=[@ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x83, 0x10, "dd6caa17abbd67d3432abdc610e5"}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xec, 0x3, 0xb, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xffffffde}]}, @lsrr={0x83, 0x1b, 0x80, [@empty, @remote, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102]}, @generic={0x83, 0x9, "da29e7baddca8a"}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xa8, 0x0, 0x9, [0x1, 0x3]}, @generic={0x94, 0x12, "1874661a1ec2e81489b0f63887ff3bd6"}, @lsrr={0x83, 0x7, 0xf4, [@local]}, @lsrr={0x83, 0x27, 0x5d, [@broadcast, @multicast2, @local, @remote, @private=0xa010100, @multicast2, @remote, @local, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfed}}], 0xf8}, 0x4000054) timer_settime(r4, 0x0, &(0x7f0000001480)={{}, {0x0, 0x3938700}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0xfffffffe}}, 0x2e) r11 = fcntl$dupfd(r10, 0x0, r10) setsockopt$inet_mtu(r11, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 1m40.034104117s ago: executing program 3 (id=863): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0xf9ff, 0x4000}, 0x1}, 0x6d) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfe, {0xa, 0x40, 0xc0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0x243}]}, 0x34}}, 0x400c0c0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8001, 0xd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, 0x0, 0xa) 1m39.107981057s ago: executing program 3 (id=886): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x3904}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, r5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m38.424641342s ago: executing program 3 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m38.027540098s ago: executing program 3 (id=918): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) pipe2$9p(&(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socket(0xa, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x20000844) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 1m37.98953093s ago: executing program 35 (id=918): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) pipe2$9p(&(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socket(0xa, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x20000844) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000200)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) 1m35.167031124s ago: executing program 7 (id=970): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000010c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES16, @ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r1, 0xa, 0x5, 0x3}) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000100), 0xfffffffffffffe7b) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) sendfile(r3, r3, 0x0, 0x3) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e1d, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1cf4000000000000000000000700000001832704"], 0xf41c}, 0x804) 1m34.879956723s ago: executing program 7 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x40008004) 1m34.826342776s ago: executing program 7 (id=976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(0x0, 0x82, 0x28440) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) 1m34.762452341s ago: executing program 7 (id=979): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x3904}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.200301777s ago: executing program 7 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 1m33.658905863s ago: executing program 7 (id=1000): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in=@multicast1, 0xffff, 0x0, 0x4e21, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x3c}, @in6=@empty, {0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmmsg$sock(r1, &(0x7f0000001040)=[{{0x0, 0xe, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x24, 0x1}}], 0x18}}], 0x1, 0x404c880) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x3, 0x4) syz_emit_ethernet(0x18f, &(0x7f00000002c0)=ANY=[@ANYBLOB="2e3466000708bb226773a5a70800447c0181006500006506907800000000ac1414bb440356070facac1414aa64010101e00000010710ce5f02ead7c6cd909d88e7533e71071791e0000001ac1414bbac1e0001ffffffffac14140c0000004e224e23", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="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"], &(0x7f0000000480)={0x1, 0x3, [0xa, 0xa97, 0xffb, 0xd24]}) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$inet6_udplite(0xa, 0x2, 0x88) umount2(&(0x7f00000004c0)='./file0/../file0\x00', 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x480, 0xffffffff, 0x150, 0x150, 0x268, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x5}, [0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xff], 'syzkaller0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x4, 0xd, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0xff, 0x2, 0x0, [0x696, 0x0, 0x0, 0x9, 0x9, 0x101, 0x9, 0x100, 0x5d9, 0x4, 0x7f, 0x6, 0x4, 0x2, 0x2, 0x3093], 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x8, 0x887, 0x5e, 0x8fb, 0x66fb}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffffff, 0xff], [0xffffffff, 0xff, 0xff000000], 'vlan0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x3a, 0x3, 0x7, 0x21}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x456, 0x0, 0xcb37, 0x1, 0x0, "d30c263277ae7fb1ea907edc9d81d135ffdf0698b6d754751a901bae1ab47288e8f8345707fbdfc1a8ba4d84832e11357c8c9d707dd974bd4c5be7f59288235b"}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0xb, 0x1, 0x0, [0x3, 0xfff, 0x2, 0x9, 0x1, 0xd4c1, 0x7fff, 0x0, 0x3, 0x6, 0xb, 0x9, 0x101, 0x9, 0x4, 0x8e], 0x1}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x3, 0x4}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r6 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) setns(r9, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$cgroup_devices(r6, &(0x7f0000000640)={'b', ' *:* ', 'wm\x00'}, 0x9) 1m33.622742525s ago: executing program 36 (id=1000): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in=@multicast1, 0xffff, 0x0, 0x4e21, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x3c}, @in6=@empty, {0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) sendmmsg$sock(r1, &(0x7f0000001040)=[{{0x0, 0xe, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18, 0x1, 0x24, 0x1}}], 0x18}}], 0x1, 0x404c880) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x3, 0x4) syz_emit_ethernet(0x18f, &(0x7f00000002c0)=ANY=[@ANYBLOB="2e3466000708bb226773a5a70800447c0181006500006506907800000000ac1414bb440356070facac1414aa64010101e00000010710ce5f02ead7c6cd909d88e7533e71071791e0000001ac1414bbac1e0001ffffffffac14140c0000004e224e23", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="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"], &(0x7f0000000480)={0x1, 0x3, [0xa, 0xa97, 0xffb, 0xd24]}) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') r5 = socket$inet6_udplite(0xa, 0x2, 0x88) umount2(&(0x7f00000004c0)='./file0/../file0\x00', 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x480, 0xffffffff, 0x150, 0x150, 0x268, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x5}, [0x0, 0xff, 0xffffffff], [0x0, 0xff, 0xff], 'syzkaller0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x4, 0xd, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0xff, 0x2, 0x0, [0x696, 0x0, 0x0, 0x9, 0x9, 0x101, 0x9, 0x100, 0x5d9, 0x4, 0x7f, 0x6, 0x4, 0x2, 0x2, 0x3093], 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x4e23, 0x4e21, 0x4e20, 0x4e22, 0x8, 0x887, 0x5e, 0x8fb, 0x66fb}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffffff, 0xff], [0xffffffff, 0xff, 0xff000000], 'vlan0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x3a, 0x3, 0x7, 0x21}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x456, 0x0, 0xcb37, 0x1, 0x0, "d30c263277ae7fb1ea907edc9d81d135ffdf0698b6d754751a901bae1ab47288e8f8345707fbdfc1a8ba4d84832e11357c8c9d707dd974bd4c5be7f59288235b"}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0xb, 0x1, 0x0, [0x3, 0xfff, 0x2, 0x9, 0x1, 0xd4c1, 0x7fff, 0x0, 0x3, 0x6, 0xb, 0x9, 0x101, 0x9, 0x4, 0x8e], 0x1}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x3, 0x4}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r6 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) setns(r9, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$cgroup_devices(r6, &(0x7f0000000640)={'b', ' *:* ', 'wm\x00'}, 0x9) 1m31.088268421s ago: executing program 8 (id=1042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 1m30.94906511s ago: executing program 8 (id=1043): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) dup3(0xffffffffffffffff, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000000)=0x9, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x88402, 0x0) ioctl$TUNSETIFF(r5, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r5) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000500000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000200"], 0x20}}, 0x4) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x5}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300090f0000000000000000000000010018009f03000005000600000000000a0000eb000000000000000000000000000000000000000000000000000000000200010000000000000009000000"], 0x78}, 0x1, 0x7}, 0x0) getsockopt$bt_hci(r2, 0x0, 0x0, &(0x7f0000000400)=""/169, &(0x7f0000000100)=0xa9) 1m30.739419274s ago: executing program 8 (id=1044): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r2, &(0x7f0000000380)={0x6, 0x20, 0xfffffffffffffff8, 0x20, 0x9}, 0x48) 1m30.672775968s ago: executing program 8 (id=1046): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x3904}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, r5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.976917433s ago: executing program 8 (id=1058): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24004814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000001a51811000059c6560df40d135a99b2307100ca4f7706c858af21a5a3093b8bff34dd8b6adc93880db6ad147535f838cc4a", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff15000000bfa208000000000007020000f838ffffb703000008000d0000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r7 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 1m29.654432015s ago: executing program 8 (id=1066): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x3904}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, r4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.653969765s ago: executing program 37 (id=1066): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0, 0x0, 0x3904}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x80) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x13, r4, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.260062346s ago: executing program 5 (id=3008): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') utimensat(r0, &(0x7f0000000040)='./file7\x00', &(0x7f0000000100)={{}, {0x77359400}}, 0x100) 9.20449245s ago: executing program 5 (id=3009): unshare(0x20000400) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x40047452, 0xf0ff1f00000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000200), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9.092236217s ago: executing program 5 (id=3011): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) fadvise64(r0, 0x2, 0x0, 0x4) 9.030209931s ago: executing program 5 (id=3012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}], 0x1, 0x0, 0x0, 0x20000001}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x9204, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x4000, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffed, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000130a0102"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f00000004c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="ac", 0x1}, {0x0}], 0x2}}], 0x1, 0x4000040) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_sset_info={0x37, 0x9, 0x7fff}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) fcntl$getownex(r4, 0x10, &(0x7f0000000640)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r5, &(0x7f00000006c0)={r5, r8, 0x6}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)) 8.882761551s ago: executing program 5 (id=3015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0xe3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0xcb0}}], 0x18}}], 0x1, 0x404c804) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=[0x5], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r2, 0x0) 8.298733439s ago: executing program 5 (id=3030): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 8.298556329s ago: executing program 38 (id=3030): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x80, 0x1) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 3.062408321s ago: executing program 9 (id=3109): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)='check=strict', 0xc, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, 0x0, 0x0) 2.514069356s ago: executing program 9 (id=3117): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.200778157s ago: executing program 9 (id=3123): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24004814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000001a51811000059c6560df40d135a99b2307100ca4f7706c858af21a5a3093b8bff34", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff15000000bfa208000000000007020000f838ffffb703000008000d0000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r10 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r11, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 2.199059557s ago: executing program 6 (id=3124): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x2, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) r6 = mq_open(0x0, 0x40, 0x1f0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) sendfile(r8, r8, 0x0, 0x800000009) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1], &(0x7f00000000c0)='syzkaller\x00', 0x10}, 0x94) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000040)=0x3b3) mq_unlink(&(0x7f0000000000)='eth0\x00') r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0x30, 0xffffffffffffffff, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x22, 0x0, r3, 0x80, &(0x7f0000000500)=@hci={0x1f, 0x2}, 0x0, 0x0, 0x0, {0x0, r11}}) 2.063448606s ago: executing program 2 (id=3125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x78, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439, 0xd5}) 2.009752419s ago: executing program 9 (id=3126): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="28a603a1f99d479236fccf766888b03190404d48634a044c369fe30b8026b6d79e8ec482007e6e4c86a066da878ee295de648a072a8ccf7860f88c4b", @ANYRESOCT], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) socket$inet6(0xa, 0x400000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) write(r3, &(0x7f0000000080)="240000001e005f0214fffffffffffff807000000010000000000007bc8801ff2176e8bf2", 0x24) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)={0x1110, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_RRK={0xaa, 0xfc, "5590313adca076075308c1c05710c7420c11f5a12fcd965f2f67c1b7ec6c2fab7326dbf426abcdbc4494f93fa5b7c03ffa601e0a6d76b0828a8e889b3d5f4623df73452d848ece10f8666fb406d61ebd7557397e59332862b95e8b1d28b1af091cda164c39a855d61db3b3afa853ad0fe052ec76fab8546a53f15f0fbfd60dac4c5fe1330f1c7b5b709b843d43e0be6ec20455e78e9eb515ad0fdbca4a9f5e74598f59aa9cb0"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "7aaf7e5df5cf67"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, '\b'}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "c6d040aebe680360df8b252f96c1"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "24741cfc"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "81f947c273c771c4"}]]}, 0x1110}, 0x1, 0x0, 0x0, 0x4010}, 0x40080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r9 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, r9, r9, 0x0) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) 1.99170144s ago: executing program 2 (id=3127): r0 = socket(0x10, 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f00000000c0)=0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x35, 0x3, 0x1}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000fe00000000000000", 0x23) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x1671, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x28, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @alu={0x4, 0x0, 0x6, 0x6, 0x1, 0x18}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @generic={0xc, 0xb, 0x6, 0xa, 0x1ed}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x93]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80\xfbM1k\xac\x97\x17\xb4T2\x05\"@\x1dFy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1', 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r11, 0x10001, 0x0) write$binfmt_elf32(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r7, @ANYRES32=r4, @ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r12}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xb, &(0x7f0000000740)=[{&(0x7f0000000280)=""/194, 0xc2}, {0x0}], 0x2}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff1}, {0xffe0}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x1, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 1.448256266s ago: executing program 4 (id=3131): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x28) fadvise64(r3, 0x7f, 0x1000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.349865032s ago: executing program 1 (id=3132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 974.566736ms ago: executing program 1 (id=3133): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 962.628317ms ago: executing program 6 (id=3134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x200}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@data_journal}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[], 0x24, 0x3) 860.701964ms ago: executing program 4 (id=3135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x210, 0x24, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x9, 0xffff}, {0x1, 0xffe0}, {0x10, 0x4}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @qdisc_kind_options=@q_gred={{0x9}, {0x9c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x3, 0x1, 0x3}}, @TCA_GRED_PARMS={0x38, 0x1, {0xfff, 0x28000, 0x1, 0x8, 0x3, 0x7, 0x2, 0x6, 0x8, 0x4, 0x1a, 0x1e, 0x20, 0x4, 0x10, 0x101}}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x3, 0x7, 0x1, 0x550, 0xa, 0x6, 0x3ff, 0x101, 0x9, 0x16, 0x20, 0x13, 0x5, 0x4, 0xffffff81}}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0xd, 0x0, 0x5}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb5}, @TCA_STAB={0xd4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x8a10, 0x4, 0x1, 0x9, 0x3, 0x2}}, {0x8, 0x2, [0x1, 0x9]}}, {{0x1c, 0x1, {0x7, 0x7, 0xaa14, 0x3, 0x1, 0x0, 0x40, 0x8}}, {0x14, 0x2, [0x2, 0x3, 0x9, 0x3, 0xfff7, 0x8, 0xfffd, 0x3]}}, {{0x1c, 0x1, {0x9, 0xf1, 0x0, 0x5, 0x2, 0xa181, 0xfffffffc, 0x5}}, {0xe, 0x2, [0x5, 0x1, 0x3ff, 0x5, 0xea0]}}, {{0x1c, 0x1, {0x0, 0x1, 0x4, 0x400, 0x2, 0x8, 0x4, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x1, 0xf, 0x0, 0x1, 0x2, 0x5e37, 0xe9ab, 0x6}}, {0x10, 0x2, [0x5, 0x9, 0xff, 0x8, 0x400, 0x94ae]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}, @qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xe0}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x94}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xb5}, @TCA_CAKE_TARGET={0x8, 0x8, 0x101}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x5}]}}]}, 0x210}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005c40)=@newtfilter={0x4270, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0xffff, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4240, 0x2, [@TCA_BASIC_ACT={0x1ec, 0x3, [@m_ct={0x120, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0xf6, 0x6, "15186a0b8a21092f39a924e527f05c49bd26209db5c2cd439bd79cd23285aa09c95645a7344a6967e290bde9a8c590fe8e95764715f3282936509fecc034cd93dcff1e9f4f6ac42b907e59e508ea1654706fd06402b9456883932b931398a33d543ea4b0d405adcebeb46e6a0d4c2d0fc4141f7f5fef2a3fc6dd81be1fb36df4046c9cc00fd85cfbc91444ae5fefa28a40e650c9cd2e1ef648b4fd0f633410caf771b45ac666efeee31c3c019169f44cc582f4bf086fa8a07578ff555976dc381d8ec0cbff37719a8875dee19123fe8b626424fb30c69c357d083d567aa72eb309c39f2430ce5aa6dd8ffaba692d329c38f0"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_tunnel_key={0xc8, 0x1b, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}]}, {0x6c, 0x6, "19d56d95f50d3577f3c5c8bbc3dfcc7316894a7fc1bbda2994ce6a849709a9a0f4ea982e95a26d65cced80f8305d9c4bbfe7d81462fa3a161f0e40e813a0cf4891b3e7bf8097e9ddb20c7d48fdaf90988a7f5eaf03f9fee582ce087fbb17df98e0d2dc1aaeccbd0b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}]}, @TCA_BASIC_POLICE={0x814, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x700, 0xa, 0x0, 0x400, 0x1000, 0x9, 0x7, 0x6, 0x0, 0xfa, 0x53, 0x5450, 0x2a, 0xea, 0x4, 0x6, 0x4, 0x9, 0x7fffffff, 0x1, 0x9, 0x7, 0x2c1, 0x8, 0x2, 0x2, 0xf44e, 0xffffff27, 0x3, 0x4, 0x2, 0x6, 0x538e, 0xfffffff2, 0xfffffff7, 0x7, 0x7, 0x100, 0x100, 0xa9e6, 0x1, 0x3, 0xffffffff, 0x101, 0x2, 0x0, 0x8, 0xffffff00, 0x7, 0x7cf69e01, 0x7, 0x6, 0x7fffffff, 0x3, 0x4, 0x5eb3, 0x2, 0x5, 0x45, 0x0, 0x1ff, 0x2, 0x1ff, 0xfffffffa, 0x2, 0xc, 0x8000000, 0xb7, 0x6, 0x8d3, 0x5a8e, 0x10000, 0x2, 0x8, 0x4, 0xffffffff, 0x401, 0x9f, 0x661, 0x80000001, 0x4, 0x0, 0x9, 0x2, 0x8, 0xbbe9, 0x1, 0x3, 0x5, 0x10, 0x3, 0x6, 0x1, 0x38000, 0xfffffff8, 0x8, 0x4, 0x1, 0x29, 0x0, 0x7, 0x8, 0x6, 0x6, 0x1, 0x7, 0x2, 0x7, 0x12cb, 0x401, 0x4, 0x7, 0x400, 0x4000003, 0x8, 0x80000001, 0xb, 0x0, 0x0, 0x6, 0x3ff, 0x9, 0x7, 0x1fb, 0x4800000, 0x7, 0x8000f, 0x94, 0x6, 0x2ae, 0x7, 0x7, 0x3659, 0x1, 0x5, 0xfffffffd, 0x2, 0x6, 0x9, 0xe, 0x4, 0x3ff, 0x8, 0xfffffff9, 0x9f, 0x8, 0xfffeffff, 0x1, 0x1, 0x3, 0x800, 0x401, 0x0, 0x8000, 0x1, 0x566c, 0x9b45, 0x1, 0xe31d, 0xb, 0x4, 0x2, 0x8001, 0xdd5d, 0x80000001, 0x4, 0xf, 0xffff7fff, 0x4, 0x8, 0x7ff, 0x5, 0x5, 0x6, 0x47, 0x3, 0x7ff, 0x8, 0x6, 0xffff7627, 0x2da6, 0x6, 0x5, 0x9, 0x100, 0x4, 0x4, 0xd651, 0xe96b, 0x4, 0x1, 0x8, 0x4, 0x10, 0x401, 0x8, 0x8, 0x2, 0x4, 0x0, 0x800000, 0x0, 0x5d11, 0x72, 0xe0000000, 0x6, 0x3, 0x1, 0x7, 0x1, 0x8, 0x0, 0x3c64, 0x6, 0x1, 0xa, 0xffff06e2, 0xfffeffff, 0x956, 0x2e4f45e, 0x6, 0x7, 0x3, 0x4, 0x2, 0x0, 0x101, 0x8001, 0xc, 0x5, 0x2, 0x7f, 0x0, 0x3, 0x96d6, 0x1, 0x7ff, 0x0, 0x4, 0x9, 0x8001, 0xb4, 0x627, 0xf2000000, 0x9, 0x20000, 0x5, 0x7, 0x4, 0x5, 0x3, 0xc53, 0x9, 0x23, 0x10]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xd, 0x3, 0x20000000, 0x10000, 0xa, 0x80, 0x4, 0x40, 0xb03, 0x10, 0x101, 0x9, 0x6, 0xfffffffd, 0x1, 0x7, 0x2, 0x3, 0x1000, 0x6, 0xfffffffb, 0x2, 0x3, 0x4, 0x95, 0x1, 0x9, 0x0, 0x0, 0x2f8a, 0x5, 0xfffffff9, 0xe, 0x401, 0x1, 0x7, 0x8000, 0x1, 0x46, 0x8, 0x9, 0xd2f, 0x10001, 0xffff, 0x0, 0x401, 0x1, 0x8, 0x4, 0x9, 0x2, 0x8010, 0x8, 0x0, 0x7, 0x6, 0x0, 0x80000000, 0x9, 0x8, 0x4d, 0x5c2240ca, 0xffffffff, 0x583c, 0x7, 0x8, 0x3e9a, 0xfffffffd, 0xfffffff8, 0xb, 0x81, 0xfff80000, 0xc79a, 0x81, 0xffffff33, 0x8, 0x10, 0x0, 0x7, 0x2983f218, 0x8, 0x7, 0x7, 0x7, 0x7f, 0xffffffff, 0x391, 0x0, 0x4, 0x6, 0x3, 0xfffff001, 0x200, 0x81, 0x0, 0x1, 0xcc, 0x1, 0x1, 0x9, 0x34000000, 0xfffffffe, 0x75b, 0x9, 0xd, 0x3, 0x43, 0x1, 0xb38a, 0x7, 0x1, 0xff, 0x3, 0xffffffff, 0x0, 0x7fff, 0xb, 0x3, 0x8, 0x3d6c, 0x40, 0xff, 0x5e, 0x4, 0x4, 0x77, 0x7, 0x1, 0xc, 0x7, 0xfffeffff, 0x0, 0x80000000, 0x42aa, 0x9, 0x6, 0x8, 0x3, 0xfffffff7, 0xffffffff, 0x1000, 0x0, 0xd, 0x1, 0x6, 0x2, 0x7, 0x9, 0x7, 0xbed, 0x9, 0x0, 0x6, 0x3, 0x9, 0x31, 0x1, 0xad, 0xfffffbf6, 0x8000, 0x5, 0x7fff, 0x0, 0x0, 0x3, 0x4, 0x9, 0x1, 0x7, 0x1ff, 0x401, 0x55dc, 0x8, 0x65b, 0x1ccc0000, 0x6, 0x0, 0x1, 0x0, 0x5, 0xd, 0xfffffff9, 0x10, 0x1, 0x3, 0xf, 0x4, 0x2, 0xfff, 0x8, 0x5, 0x0, 0x4, 0x200, 0x1, 0x2, 0x7, 0x53d, 0xfffffffa, 0xffffffff, 0x5, 0xa, 0x2, 0x5, 0x6, 0x7fff, 0x5, 0x6, 0x7, 0xe000000, 0x5, 0x4, 0x5, 0x1, 0x78, 0x2, 0x9, 0x10001, 0x1ff, 0x86, 0x1, 0x1, 0x4, 0x7, 0xa, 0x9, 0x0, 0xee75, 0xffff, 0x1, 0x0, 0x17c, 0x6, 0xf, 0x8, 0x8, 0x7fffffff, 0x401, 0x8000, 0xfffff94e, 0x787d7154, 0x8, 0x2c, 0x0, 0x4, 0x8001, 0xfffffffb, 0x1, 0x9d8, 0xffffffff, 0x4, 0x4, 0xc6, 0xfffffff9, 0x8]}]}, @TCA_BASIC_ACT={0x13ec, 0x3, [@m_ife={0x10a4, 0x1f, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_TYPE={0x6, 0x5, 0x7ff}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x5, 0x7, 0x3}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x130, 0x13, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x8, 0x5, 0x5}, 0xfff6}}]}, {0xe4, 0x6, "eae40198f946c82b89464d2574c563106c2984a13d26b5a37d74244a15649a08046f5604959d348419dff97e4ac558bf339ec3695aa5a2a55f1541c0753711967bb7bb293538c7baaeef9afd4c21a727d92bb058d88b318bd0afa7ac4e4e9643f8880a9af6af1d96d3d0ec317dd471df50cc75c84c9d39c139253d5724dc409c9015c89540a4285daea8136cccac23bd25b4ade26e0a2018448f378ac79626d665f51afc5b3deee08194ca0e2f75f2b1419103e7204f6b7410ef200003c19965e23a8a86d6f21625f5673b827bd54887af5bd65d63d51d840cddeb3365c70817"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x16c, 0x1a, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x2644, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x200, 0x20000000, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3ff, 0x4, 0x2, 0x9, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd9, 0x2, 0x7, 0x3f7, 0x563}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x207d, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3, 0x1ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x3, 0x401, 0x80000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xe3, 0x1, 0xffffffffdffffff5, 0x9, 0x7}}]}, {0x95, 0x6, "165ad7da5b511dc7e5b534f62823546afefc9abcb8f310d48f2655003766d9b5da32811b0a7bfa32114bfbd70144ae72497bfab84b80c59529395146eab82a4f64775570da46359d2d8368b0dbfba1d91e4329435bae2ee1c5fb263dbbf5415f197fe30f2c6f2e4f7f25591f04c047f1c3e1ad24c043b8582f129b9c3c42fad91762e059d97825982814169e110d523eb0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0xa8, 0xb, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0xffffff84, 0x5, 0x401, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x1a, 0x6, "d85adc13da296f2932f55f67ae87ba3cbaa6f078924a"}, {0xc, 0x7, {0x0, 0x2230022996781512}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_BASIC_ACT={0x2444, 0x3, [@m_bpf={0x10fc, 0x20, 0x0, 0x0, {{0x8}, {0x5d, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0xb49, 0x2, 0xf8, 0x7}, {0xffff, 0x59, 0x75, 0x6}, {0x8, 0x6, 0x5, 0x8001}, {0x9, 0xfd, 0x7b, 0x8}, {0x10, 0x9, 0x4, 0x101}, {0x35, 0x9, 0x88, 0x4}, {0x1, 0x5, 0x93, 0x2}, {0x6, 0x7, 0x72, 0xcdd8}, {0x1ff, 0x6, 0x8, 0x1}, {0x1, 0x8, 0x3, 0x4}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x4, 0x1, 0x3, 0x6c}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x5, 0x6, 0xd, 0x628}, {0xb72c, 0x0, 0xd4, 0x400}, {0x4, 0xd, 0xd, 0x3}, {0x80, 0x19, 0x0, 0x200}, {0xc, 0x0, 0x8, 0x5140}, {0xc2, 0x6c, 0x7, 0x7fffffff}, {0x0, 0x6, 0xa, 0x2d}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}]}, {0x1004, 0x6, "e11b4482e5db3112f9cb3bde14d6cb006eba255f44449f0d1a4d64c330aeb0bd07e791abb40b3aaa5ffa1e28500d60d86940fa4559edfad38cf88fff9f1cab253a535c39158d1e10a3326c949189505ac1db64f753347a7b04e00db7d5a62b7fc7c6d3864cb25d53cd1eca99647b20916e8430e30049dae4251d3c08b52f223049be737ed9ec2a42f20f2e890da4f5d699b779ef00a21522f61f082ba048d31117d2c309a8616c37565a2ce34189cea94aeb1a0c0035bce626e1db967f278661253847ea9ecc91fa59dd2d1397af8ea6b697ee18d0037f49bc57bb3182933d5f409798d6ad48c862af37747f75a0be4ed7674cc28de970c97a1b8c45c66b369ce915043893500a2320b674768e128e43db2a262170b9443d11e1a7879dd9d87f61400da2e9d53b4153b075d6298bc70225051b8e23b9fc20aade92c99c7577d7e8f667da07c464e63c20f224999b2b0e67b729af9a62813807ea29c3720483145f6be8558488430e7139cb311bdd518e0550c5beb33c1fd09e63bf5bfe20d37884828902ca469d2afc52a6fe858f15c48d8c86081db001596a7dbee66a63f22a24b8b0d256a17d86057cff4ff07189dfa7e37885ee69e36a37212b89fc26ce0834960a87eb3d0897954feaa77f020a79e1de5a6210fd8da0a0e25a7ff95ce541099d1034a11fa02e3973a6e9511ce32ba7564159f10b9593e9d2c3cab031dacef7de4212851fc0c1febf40e5f046e95a1aec065136c7e1737deb0013d6cbd32f2cae77bc620ce9b55dafa4c8dae2864bda180486887635c92448600e348749d7ce51941f7ef5d15a45d122c4d3cb00e6efe3640915d71c7d322f6b14345f520d2aab390f8bcb747b0442c93e993d04f1cf84cb2c9923965d5cd6fcfce0cc9a587596fb79c9ede77ecbbd8b10685ff93cb87ec7e2efc5192a238b51451a30b55018eac59c953cc0a48bd7124f70babdb30689af0406d11d82671333d4f61bf151a67a6ac4374bbdb18901bb90051cb83d8d657a0bd0c5212db5d1589fd6a2325438555c344f3b4080afcf6b6823ee327ff8838d10d6b741974e419f4731242efbfd6a5fe9bb5e43eced15b505547edb24ba12ea43474205e7a2d956bf0c77a70f9361d7a51ec7c13b51abfe98c264728ac71ac748c0e256a50c18e1265b1741c7e272eeb2ce51d9e50099c7d5aef2d6213f1b142109eebe4c75d116e92f0a68eafcf41bf85a1ffa3d34a6a5fa26c2a22d3750cca9c9d009865cabca661771bd6531dd26b502d565ea0ed2ac2587a7cfc05d91251f33c60e915c5d872885e037e1322059cfa653ab564b15afebe1453f1c07419960fe1774c88fb59a8554f3cf1c1feede348d49df8fbb32444fb247a9f6a16b391d01571b5c14485dbab1d8943cc0166745516ef01e805bd0dd2fec66c0e1be5d79e45094aafd6db5d6cc15195637a955e4b2533e47134d9190b9bb04d6de76ef4d539fc87a0d199fb12b23860fbbc499d68050da9b378c80d5c117f189ededc4e8a2ab68621dac2af7f4a7a57b28d74f696760118f19b20132433e42e91d24cce0bd63e4c2b7c463770689c1cdff822d9a40cab0bd0cb5b60730196582d6024651bf3b93782834ba7cc6faf2cedbaf0d2fb6b28566360173a5489ebc977e3663af2b379e8a326ee0e1add17f9e12f1b1a314042154627f225af485c626c597296ea6c3d1de85b62ae44a335369c74151252b7392780b58f333c258e49fa1eb1a785723a73c65b82f251b4ca01f8d9de5030be9d5e719a059c519aa154dbb88f8570a6b9913a9d1a1ea0de43d7eaba65af2b6a5f41f8110bd259189c91fe0e7ad5cb5d0d5a55a462287abaa0daa51483b27991050527cc8aaa4cee460137436cf6a9ba27d8f6d8f2c5778f46c2ade49221323e32c173289144de626269effb5e82521a8f85fd1b9fa335771393f547c0e873e004fd2d76cc9b8f6e1ae7bdfeac575dc46b252966275c37fd729f8e4aea764198176e52427cc7ce03885b9e9a3f7cd120d57927f1727cfbc8a659f0a6ce93100041c9f23f9438fd484f2beb92613ba92d3509625796852655c6fc31be08f838ea10006852ab151a7ed608aba94eb1af535f9ef24d6bf0ba580be167cc8a01c4dbd0eb50f12deb6cceb0dfdb0b2bc18c9197a3244a0c9dea5518c476e14579fabb6c1e42859bd82304c0044c0440659092a6e84d51b95111861a6e90dbf1b3ba6945f91d89f96d4cf55a1af168a663d7fb56d649ad9825c7d6321212adc7b21d98cc0feea3d6c5b44deb54de83cc30663b88d2985e760e063ff7d5e4754999b795ff00cac6249b3ef5b4818b643ca6226077b5cec771ef5db7cf1693f79c046c5b7e2eadf173737db706116e6a8964a1081e394914e1fc02486b4ad91380c5e2e239d714581496b0dfe7483c4d74da695e5c7d363877149199551f241e7c0548542905c4cdc81986ccadf46c561314ebf211a293a3fa6774b99bc3c3ac7c4a1cc7a9b2ff0987b08a962183d4de077cc54eb474023f0f38b874c891fef6156d11dea6dddb167fbbd646c7851de9782fe637d94469b533d08b684b6c885116a32cc9ba379ddc84f586afd0048d42837735f4dd1c54907c4b1216f752e4cfb8d7126549c8605f39f9c0692b1dda92233868c729f6acf8c287a40815d60f4432e79ab58d80f3a430df16a2d1f5d46f4b14e6b4f054a53ceeaf55dfc059961f16b63737659f725971becd93c9065a00fe35ce843464f790c6eb02b489a406008bbb92d3c99151ea69c06e74a24b3637a5e2d0727826e2a3fb5a0dd473ec800d35e8ca7e4b89e402c3f672bc71031dd065c9d9a389527bfc1a0007095c3c3f56dc54bcf36063e5007bc87b0d053a5df3195d6af230d1b46186737930f0223a9361178d0708b6b3a677fc8107a0b4346021ce8a46d8193571ab9611ad42f93326e1b109f638319714ca4e5f5170e705d712b5f67c68ac8509dd3f4d829137d10754585306d03e0d727be919d2e6c25e10913578ba187e127ced244ed93da1ff100c2df3c4d56c8c38d0f59c741c61ea5fb9d38a419ddad2ad055265211162c1d613057e3cbe0dde9e9a2b94affab1b23c72eea19e0dbf4d0a7f39950fb5dba421c31bce8a841318de667b28fe196837c240f1f72bb661ffd7e87000564a96b08fc15d78cf7332fd173f2a4fc255ff40bca3585942241a5155e221be41c3150aa9d4d22547c22743ef6f87b70d2acaa6b8bb8d5ccb3ca988c70c8e00e647ee4deec90c4f94c95529d908374360793c6faf7dda75d9744eef2abb1995d626d4c2b0756a22a35cacd6fd8b3252bf91af5f564bcdb32ba8cbe5918c4f07eb15449372113f8da03f67b60cca57d57f166605d8841997178ad27d0cbb345dd274e5b8737da3042f97e3948228c36b165e4b9b774ff255cd194f21b0195c5dd7d0a4b2f0f2d6ad44893ba757a28c023535aeb5555d58fa5b59029e5ae9bc428bf2ef817b139553fb566e1e86f44f92b01d806dd76a2bd2e871311beb660a833ec428ac7ab9dba774acaa0620a6ff12d24c2ef60b94b8126924286fdbb6850a101bec0e6772ea8fcee1a673c314bfc577582d1608efa35659bcc9c80aca724c40b120db22745e61166c9e83e2976b02b3218e15e3c1998ec7cbabf91523161bb74cf93995883858b1636841b3213dc606d934a5388a4f1dabf5c898f0fd824bbefbd1063baaf8c1139f8ddc615a075c1d257347bcdf7c21ce71e3c93c704388d591410976f001109fce4e78e5093c3c0e86a945ea31f7f9ec48cd5530284a70ae1f91627d3859f89e0eb053fbfe68bddeced67bd5b6f94305e10e457496f01e937d16a609ada06fca9966851a33f38f295e50f012a09c4f6c6978eafbbb4318c0520ca07a055de0b8550d69ecd1027e9f90be78564e342d455f7f571b731c2034451df5190112f4c06702c6fa074b34f4c1de28814624788d7e2eb0f2fca9cf7b430c5ed914ae3dea6cd5982e85e36055b8f8f31c146b7a17885c666c5297c14d49e20dd7413a6901fab8b3283f72d871b69db5dcede17a8cdbb4ce33d4df8f991be3ee7a0aaf96efc349a80878b49f66799289b1b907c3fdcd1854e8ef5aeda3fb735200c92f10eb139bbcd173c3a4020200e0775165ea94eebd7933fe9f0252d35969bb4454ab56992fcae0727afa025d7ee7be3aeb759159e441e04af653d31352589d053499726da70b0fdc6c6f34f982ff3a1334c7fa9d0673304e91d5f41f06c47dc5b4cbd7500e0b13cf1669671bfd83e06c5b2af9f776bd83493eda4f3453af7b3ceb78a67106d6f9a7754165d2fa635261fb7e4dd3055da0a649d737d443594c16aa1fdefb9cb5a5329f69dcfba0e3b8f4e796bf1b78b10e290922348e6563acf7cbe016b18e8d1d6b757a1d7c4ffda29f53938d2a5a9479bd3982f46dc4f538c77da05c234f77e2f39a56e7c631ecce2d50f953a99b44727ac505509744c50e102a2e208c40faec43f20e1f220167239a47e6dc970cb0efe79f8af0fb3b9678afaa274e0d30609a71c4a5eb977881e40a6200911f2210c862be29f5d353aa82a6fbff151f36559be7970379565b0f381927031b6636d38b536541f07602f9ef4b23d4963915fb8c6c8a905cad54f10675bf9104a4b54e235e3fc478f88e6abc3a54e939ba5b72abec070da925a03966648ff169a4b67b6de9b618ce7c88f400f2d1c607b4581f919435732588c455f9d856068957d69860f84b6fcbe9ac1ae916e5affbbc85658200a7a8c2e2f6cbb1d115014f9618aa00298bb9bf2b7158feb584240a8fe154abc4f22e44d286464b5d4ffb2e8ad442649cb30599e4150af17c5b4b562941b9da65eb1abe498a50d9799a31a68ce2bd5d84154f57f12fe8a85e0349d1855a34f052b001318eb118845a2a2702f2cb64357a015dc1cf85f29c83a141d3dac73a998cf214a3886d15639a6ae9bc2d641f34f6d53afeeca85bd8572a0216b72318574ef7674401667a5b5525c8b343a249fa2b7edd63b60710456b11162a246f95b0ae584221e7d03c9597bfe6431dfc4bbda23fda110b7e4d3eab0e025f00bfc657da48eb12416bc30745cacc531e27886e336a39823c5d421baea43d569752ea578761b28bb96d8c873431ef97726a08beb0eaf6dd269271f8ad59cb82466d0241857af18cb99ec3cafa23d1f71fed820af59c29f2982bd25ce57d2ee6bb40897503f690014ac7ce0fe9130a66deda4fe2e3881f9913bd2758a559a0f3350a0028c30e22bb97eec2780bf180643c29c3f229d5b46ef673e9dff20a765a527abe57dfc0e913f3bc541ffd7cf4fb6f2f39b55e8252bbe84d6b258db88b760d2850633704e46d0043cbf6103e06a9136812ffe6d9f8627f97df29f58c73c5f3a44ccbbec15a74ec37eb2aa76bb2355c4527f86ed84e25759262d39186c5058973982354a5b9206c1aa65655ae296895e43b19bd1c4961154b5b0e3b1a50f57919a3f4f8d3c6d6e72d53b7db4fa8d21bd58638974bdabb0a1429c6dc2d6b99f2e515e4b5be841c8d5ff8e6789eb37048c1caebf79e496e15adafc69cb03b865f3f7f263068b1b2c6ee15bab2ec0676cd43a181b063c279ad65b0d4f5890eb6ec446c508a8c5af29fdf7f086da6a9470bdf1a39b48ccd5e2cf0ed880c200c105580c588e4582a86f54cbf371ffd29012e94ef4b1ae56add390eadc07b38d31e4d18f99f9079409c364926e4bfcf6f1868ca85e478765cd58ce8fc29f95a1f9bf3485865bfe80b7713882c39442c8f769157e9b6cd1c8329fadec"}, {0x27, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0x1048, 0x5, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xcf3, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x805, 0x4}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xdc, 0x1c, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x87, 0x6, "8d1bb8af04bfd4dd4162c81f5d5722770e7fbca836a2cd622c9ae39cbdb6675ac0e2bb1cc32b0e834655c01f50ff14b417e8cd0084f1ab1790a2be29415caac278848bf90d930fd63bac6c9fea8d12241536efcd2c5eab1f870419e0f016876e838d677effa0da2da503accfd7654adada6b4ce6dc05e20a13da9edb5b3525b3b2ca0a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xec, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xb8, 0x6, "876de6ce5e7fc433db17f09bc792fe80244bfabb6c9fba2273c0b14d0a3943f6c069d6acfd594a0c54f07cfe763395317578ba1be0a788804cbf91aa8efaf631908812cc27cae7c71eb6705a9e341390661060b5cc09b20939f92fca42366b7c9aaf39b5cf16914f9abb8c969dcfa424a7a6857dea07f403069004ee8fc8ec10a053762ef54ade0497bab01e4567591d3406763d6ce94b1ea29b7a4d372857d127121cabb2ce6d863fdc49f6ee4b447566eb7a84"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x134, 0x6, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8001, 0x1, 0xfffffffffffffff5, 0x0, 0x3}}]}, {0xf4, 0x6, "e1bc03c9c355f3ffe21c8b1c6f1180040fec61bdb1ba8e567440a151c718832458bac0fbade531ccf20cb1e94f7d21141b6f5f51b77ff822c434c21ec2c1b6854058242c7d9ff9a533d02141d4225cba9aacec7dfbd74a6e55f86a8382cae89fbb541750557e2a76cac8f8ca77175e4c7a2c58037aeeca271f665fda0d7668df689df0aeace03a4c77b8853738039f8217b4e32ee0d6c051b4dc00fc99f602ff5c5e34ebff76b89daa79015145e7d229fcee6aeb19c058ca9450cf74bc0039e14863b817ec35a016280f639448bf2979beb80b6be613b9bcada1eb6fbc7e4515faeb394d329a492d2dba485d392c398a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x4270}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 755.389551ms ago: executing program 6 (id=3136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x63bff000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f00000000c0)=""/55, 0x37) getdents64(r7, &(0x7f0000002fc0)=""/4088, 0xff8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r8, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xf}]}, 0x30}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000300)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x4, 0x772e293a, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x20, 0x400, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'sit0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x5, 0x3, {{0x14, 0x4, 0x1, 0x34, 0x50, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x3a, 0x2, [{0x2, 0x6, "92e27d26"}, {0x5, 0xe, "48f0f2e5e7ed294fdce30d3b"}, {0x1, 0x3, 'u'}, {0x2, 0x2}, {0x6, 0x5, "b5a171"}, {0x1, 0x2}, {0x0, 0x11, "29ed0d03b6a2e26a9ea28ccb156489"}, {0x5, 0x3, "d4"}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000640)={@private1, 0x0}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x128, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x3}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c"], 0x20}}, 0x10) 526.268496ms ago: executing program 6 (id=3137): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24004814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000001a51811000059c6560df40d135a99b2307100ca4f7706c858af21a5a3093b8bff34", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff15000000bfa208000000000007020000f838ffffb703000008000d0000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r10 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r11, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 525.738076ms ago: executing program 4 (id=3138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x78, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439, 0xd5}) 525.328496ms ago: executing program 2 (id=3139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_setup(0xea, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x9, 0x3c, 0x64, 0x0, 0xf1, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x9, 0x0, 0x1, 0x400, 0x45, 0x20000000, 0x4e21, 0x4e21, 0x1, 0x3}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0xa6}}, 0x0) 463.44726ms ago: executing program 4 (id=3140): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 412.451683ms ago: executing program 6 (id=3141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) setresuid(0x0, 0x0, 0x0) 376.395306ms ago: executing program 6 (id=3142): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) rt_sigpending(0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000004c0)=0x80013) readv(r3, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setsig(r4, 0xa, 0x13) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 303.64323ms ago: executing program 2 (id=3143): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 206.713237ms ago: executing program 2 (id=3144): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000080)=ANY=[], 0x0, 0x400) 184.090768ms ago: executing program 2 (id=3145): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x28) fadvise64(r3, 0x7f, 0x1000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 171.054599ms ago: executing program 1 (id=3146): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 140.628471ms ago: executing program 4 (id=3147): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400360076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0xc000) 106.269133ms ago: executing program 1 (id=3148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 30.487578ms ago: executing program 1 (id=3149): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 21.400158ms ago: executing program 9 (id=3150): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000001b40)) timer_create(0x3, 0x0, &(0x7f0000000400)=0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26040041}, 0x40) sendmmsg$inet6(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002a00)="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"/556, 0x22c}, {&(0x7f0000000000)="d2cf4071ee038000007ad2e20539519ec6afbc0000", 0x15}], 0x2}}], 0x1, 0x4040001) close_range(r0, 0xffffffffffffffff, 0x0) 19.264158ms ago: executing program 1 (id=3151): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24004814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000001a51811000059c6560df40d135a99b2307100ca4f7706c858af21a5a3093b8bff34dd8b6adc93880db6ad147535f838cc4a", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff15000000bfa208000000000007020000f838ffffb703000008000d0000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r7 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 8.49393ms ago: executing program 4 (id=3152): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24004814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) sendto$inet6(r5, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000001a51811000059c6560df40d135a99b2307100ca4f7706c858af21a5a3093b8bff34", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff15000000bfa208000000000007020000f838ffffb703000008000d0000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) sendmmsg$inet(r3, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) r10 = io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x14e}) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r11, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 0s ago: executing program 9 (id=3153): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402, 0x3, 0x0, 0x0, 0x400, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x4000000000], 0x0, 0x0, 0x1}}, 0x40) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', &(0x7f0000000ac0)={0xc0000, 0x1, 0x2}, 0x18) unlinkat(r2, &(0x7f0000000b00)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}, 0x52) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x1c77b3ffb7919603, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000100}, 0x24000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) kernel console output (not intermixed with test programs): 7295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.6.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 144.316855][ T29] audit: type=1326 audit(1759907403.313:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="syz.6.2332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 144.317940][T10387] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2334: bg 0: block 345: padding at end of block bitmap is not set [ 144.355554][T10387] EXT4-fs (loop6): Remounting filesystem read-only [ 144.362190][ T422] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 144.409892][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.432234][T10392] macvtap0: refused to change device tx_queue_len [ 144.453257][T10392] loop6: detected capacity change from 0 to 2048 [ 144.464111][T10392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.465506][T10398] loop9: detected capacity change from 0 to 128 [ 144.576220][T10408] loop9: detected capacity change from 0 to 512 [ 144.593892][T10408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 144.608674][T10408] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.631350][T10414] loop5: detected capacity change from 0 to 1024 [ 144.646039][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.658162][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 144.716123][T10424] loop6: detected capacity change from 0 to 128 [ 144.728198][T10428] __nla_validate_parse: 7 callbacks suppressed [ 144.728214][T10428] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2349'. [ 144.810908][T10437] bio_check_eod: 102 callbacks suppressed [ 144.810923][T10437] syz.6.2347: attempt to access beyond end of device [ 144.810923][T10437] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 144.813946][T10436] loop9: detected capacity change from 0 to 1024 [ 144.822190][T10437] syz.6.2347: attempt to access beyond end of device [ 144.822190][T10437] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 144.852200][T10437] syz.6.2347: attempt to access beyond end of device [ 144.852200][T10437] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 144.880666][T10437] syz.6.2347: attempt to access beyond end of device [ 144.880666][T10437] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 144.901112][T10443] loop4: detected capacity change from 0 to 512 [ 144.909281][T10437] syz.6.2347: attempt to access beyond end of device [ 144.909281][T10437] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 144.923099][T10437] syz.6.2347: attempt to access beyond end of device [ 144.923099][T10437] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 144.927736][T10432] lo speed is unknown, defaulting to 1000 [ 144.937072][T10437] syz.6.2347: attempt to access beyond end of device [ 144.937072][T10437] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 144.958419][T10437] syz.6.2347: attempt to access beyond end of device [ 144.958419][T10437] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 144.972007][T10432] lo speed is unknown, defaulting to 1000 [ 144.973180][T10443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 145.007944][T10443] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.023933][T10437] syz.6.2347: attempt to access beyond end of device [ 145.023933][T10437] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 145.037422][T10437] syz.6.2347: attempt to access beyond end of device [ 145.037422][T10437] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 145.087922][T10452] loop1: detected capacity change from 0 to 1024 [ 145.117924][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 145.135210][T10453] Invalid option length (1797) for dns_resolver key [ 145.237889][T10469] loop9: detected capacity change from 0 to 1024 [ 145.266318][T10471] Invalid option length (1797) for dns_resolver key [ 145.292670][T10478] loop6: detected capacity change from 0 to 128 [ 145.360559][T10489] loop9: detected capacity change from 0 to 512 [ 145.371349][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 145.384166][T10487] loop1: detected capacity change from 0 to 512 [ 145.401803][T10489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 145.403395][T10487] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 145.427734][T10489] ext4 filesystem being mounted at /262/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.440233][T10487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2373: bg 0: block 104: invalid block bitmap [ 145.466654][T10487] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 145.481527][T10499] loop4: detected capacity change from 0 to 512 [ 145.505880][T10499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 145.522171][T10487] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2373: invalid indirect mapped block 1 (level 1) [ 145.539049][T10499] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.562374][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 145.575502][T10487] EXT4-fs (loop1): 1 truncate cleaned up [ 145.581762][T10487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.631153][T10516] macvtap0: refused to change device tx_queue_len [ 145.639434][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 145.651464][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.661104][T10516] loop9: detected capacity change from 0 to 2048 [ 145.674094][T10521] loop4: detected capacity change from 0 to 512 [ 145.681440][T10521] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 145.681990][T10516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.703721][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 145.713122][T10521] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2383: bg 0: block 104: invalid block bitmap [ 145.726472][T10521] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 145.736407][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 145.738641][T10521] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2383: invalid indirect mapped block 1 (level 1) [ 145.748319][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2386'. [ 145.770810][T10521] EXT4-fs (loop4): 1 truncate cleaned up [ 145.779296][T10521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.791653][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2386'. [ 145.828526][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.849687][T10533] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2387'. [ 145.859676][T10533] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2387'. [ 145.869219][T10533] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2387'. [ 145.881390][T10533] tmpfs: Too few inodes for current use [ 145.889816][T10533] sd 0:0:1:0: device reset [ 145.909395][T10533] lo speed is unknown, defaulting to 1000 [ 145.916138][T10533] lo speed is unknown, defaulting to 1000 [ 145.922996][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.948988][T10537] loop1: detected capacity change from 0 to 512 [ 145.959804][T10540] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 145.970366][T10540] SELinux: failed to load policy [ 145.972900][T10537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 145.988812][T10537] ext4 filesystem being mounted at /483/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.015936][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 146.103239][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2395'. [ 146.123609][T10555] loop9: detected capacity change from 0 to 512 [ 146.135217][T10555] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 146.147007][T10555] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2395: bg 0: block 104: invalid block bitmap [ 146.160298][T10555] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 146.169786][T10555] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2395: invalid indirect mapped block 1 (level 1) [ 146.183964][T10555] EXT4-fs (loop9): 1 truncate cleaned up [ 146.190224][T10555] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.218455][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.291732][T10576] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 146.304107][T10576] SELinux: failed to load policy [ 146.340261][T10583] loop1: detected capacity change from 0 to 512 [ 146.369274][T10583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.378024][T10588] loop4: detected capacity change from 0 to 2048 [ 146.388639][T10583] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.418492][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.429267][T10588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.444203][T10588] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.537330][T10596] loop6: detected capacity change from 0 to 2048 [ 146.581012][T10602] loop9: detected capacity change from 0 to 128 [ 146.625605][T10598] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2409: bg 0: block 345: padding at end of block bitmap is not set [ 146.642642][T10598] EXT4-fs (loop4): Remounting filesystem read-only [ 146.650128][ T274] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 146.673153][T10596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.699150][T10596] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.726266][T10610] Invalid option length (1797) for dns_resolver key [ 146.803424][T10614] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2411: bg 0: block 345: padding at end of block bitmap is not set [ 146.832934][T10614] EXT4-fs (loop6): Remounting filesystem read-only [ 146.877449][ T6913] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 146.926760][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.987324][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.019417][T10632] loop6: detected capacity change from 0 to 128 [ 147.276194][T10657] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 147.287173][T10657] SELinux: failed to load policy [ 147.355433][T10666] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 147.364240][T10666] ref_ctr increment failed for inode: 0x5ae offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881317c8000 [ 147.391748][T10672] loop6: detected capacity change from 0 to 128 [ 147.446797][T10681] loop4: detected capacity change from 0 to 128 [ 147.494161][T10689] macvtap0: refused to change device tx_queue_len [ 147.646659][T10712] loop9: detected capacity change from 0 to 128 [ 147.656382][T10710] loop6: detected capacity change from 0 to 512 [ 147.677125][T10716] macvtap0: refused to change device tx_queue_len [ 147.721785][T10727] loop5: detected capacity change from 0 to 512 [ 147.729312][T10727] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 147.739724][T10710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.754054][T10710] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.766517][T10727] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2459: bg 0: block 104: invalid block bitmap [ 147.781671][T10727] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 147.790768][T10727] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2459: invalid indirect mapped block 1 (level 1) [ 147.805725][T10727] EXT4-fs (loop5): 1 truncate cleaned up [ 147.811960][T10727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.834978][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.845432][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.847885][T10733] netlink: 'syz.9.2460': attribute type 10 has an invalid length. [ 147.863762][T10733] batman_adv: batadv0: Adding interface: veth1_vlan [ 147.870480][T10733] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.896747][T10733] batman_adv: batadv0: Interface activated: veth1_vlan [ 148.125093][T10758] loop6: detected capacity change from 0 to 128 [ 148.201911][T10766] macvtap0: refused to change device tx_queue_len [ 148.336456][T10770] SELinux: failed to load policy [ 148.601520][T10782] Invalid option length (1797) for dns_resolver key [ 148.645604][T10785] tmpfs: Too few inodes for current use [ 148.655975][T10785] sd 0:0:1:0: device reset [ 148.681565][T10785] lo speed is unknown, defaulting to 1000 [ 148.688634][T10785] lo speed is unknown, defaulting to 1000 [ 148.761653][T10791] loop9: detected capacity change from 0 to 512 [ 148.788430][T10791] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 148.802309][T10791] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.841170][T10796] loop4: detected capacity change from 0 to 128 [ 149.015851][T10809] loop4: detected capacity change from 0 to 128 [ 149.025797][T10809] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.039802][T10809] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.057807][T10809] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 149.066604][T10809] FAT-fs (loop4): Filesystem has been set read-only [ 149.074469][ T29] kauditd_printk_skb: 866 callbacks suppressed [ 149.074484][ T29] audit: type=1326 audit(1759907408.323:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.105436][ T29] audit: type=1326 audit(1759907408.353:9230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.129398][ T29] audit: type=1326 audit(1759907408.353:9231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.153159][ T29] audit: type=1326 audit(1759907408.353:9232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.179963][ T29] audit: type=1326 audit(1759907408.423:9233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.203505][ T29] audit: type=1326 audit(1759907408.423:9234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.227098][ T29] audit: type=1326 audit(1759907408.423:9235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.251283][ T29] audit: type=1326 audit(1759907408.493:9236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.274981][ T29] audit: type=1326 audit(1759907408.493:9237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10808 comm="syz.4.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.319713][ T29] audit: type=1326 audit(1759907408.563:9238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff36028eec9 code=0x7ffc0000 [ 149.360561][T10823] loop6: detected capacity change from 0 to 128 [ 149.402427][T10825] loop1: detected capacity change from 0 to 512 [ 149.425013][T10825] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.497479][T10832] loop4: detected capacity change from 0 to 1024 [ 149.504448][T10832] EXT4-fs: Ignoring removed bh option [ 149.509913][T10832] EXT4-fs: inline encryption not supported [ 149.548035][ T6913] Buffer I/O error on dev loop6, logical block 744, lost async page write [ 149.565266][T10832] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.592871][T10832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 149.614507][T10832] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2495: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.639234][T10838] siw: device registration error -23 [ 149.654709][T10837] netlink: 'syz.1.2496': attribute type 10 has an invalid length. [ 149.664067][T10837] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 149.847438][T10832] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2495: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.883874][T10832] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2495: Failed to acquire dquot type 0 [ 149.922291][T10832] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 149.952429][T10832] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2495: mark_inode_dirty error [ 149.985137][T10832] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 150.015998][T10832] EXT4-fs (loop4): 1 orphan inode deleted [ 150.134833][ T12] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.161529][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 150.187350][T10832] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 150.197181][T10832] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 150.399682][T10861] netlink: 'syz.4.2508': attribute type 10 has an invalid length. [ 150.407812][T10861] __nla_validate_parse: 16 callbacks suppressed [ 150.407832][T10861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2508'. [ 150.482784][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2510'. [ 150.492848][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2510'. [ 150.569315][T10870] loop4: detected capacity change from 0 to 128 [ 150.646155][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2513'. [ 150.658137][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2513'. [ 150.823703][T10886] loop5: detected capacity change from 0 to 512 [ 150.830708][T10886] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 150.840309][T10886] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2516: bg 0: block 104: invalid block bitmap [ 150.853600][T10886] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 150.863846][T10886] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2516: invalid indirect mapped block 1 (level 1) [ 150.878892][T10886] EXT4-fs (loop5): 1 truncate cleaned up [ 150.960729][T10893] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2519'. [ 150.971373][T10893] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2519'. [ 150.981235][T10893] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2519'. [ 150.992142][T10893] tmpfs: Too few inodes for current use [ 151.001658][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 151.019069][T10893] lo speed is unknown, defaulting to 1000 [ 151.027032][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 151.041689][T10893] lo speed is unknown, defaulting to 1000 [ 151.293049][T10911] tmpfs: Too few inodes for current use [ 151.302926][T10911] sd 0:0:1:0: device reset [ 151.335167][T10911] lo speed is unknown, defaulting to 1000 [ 151.341404][T10911] lo speed is unknown, defaulting to 1000 [ 151.619271][T10922] siw: device registration error -23 [ 151.858735][T10927] netlink: 'syz.1.2532': attribute type 10 has an invalid length. [ 151.868564][T10927] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 151.955578][T10933] loop5: detected capacity change from 0 to 1024 [ 151.962732][T10933] EXT4-fs: Ignoring removed bh option [ 151.968719][T10933] EXT4-fs: inline encryption not supported [ 151.984322][T10933] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.996125][T10933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 152.025306][T10943] loop9: detected capacity change from 0 to 128 [ 152.034283][T10933] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2535: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.115876][T10933] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2535: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.132529][T10933] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2535: Failed to acquire dquot type 0 [ 152.144797][T10933] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 152.156769][T10933] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2535: mark_inode_dirty error [ 152.202189][T10948] loop6: detected capacity change from 0 to 128 [ 152.208701][T10933] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 152.245322][T10933] EXT4-fs (loop5): 1 orphan inode deleted [ 152.274129][ T12] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.299592][T10943] bio_check_eod: 439 callbacks suppressed [ 152.299614][T10943] syz.9.2539: attempt to access beyond end of device [ 152.299614][T10943] loop9: rw=1, sector=153, nr_sectors = 8 limit=128 [ 152.319753][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 152.322259][T10943] syz.9.2539: attempt to access beyond end of device [ 152.322259][T10943] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 152.342594][T10933] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 152.355284][T10943] syz.9.2539: attempt to access beyond end of device [ 152.355284][T10943] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 152.387238][T10933] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 152.405311][T10943] syz.9.2539: attempt to access beyond end of device [ 152.405311][T10943] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 152.419330][T10943] syz.9.2539: attempt to access beyond end of device [ 152.419330][T10943] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 152.433679][T10943] syz.9.2539: attempt to access beyond end of device [ 152.433679][T10943] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 152.447628][T10943] syz.9.2539: attempt to access beyond end of device [ 152.447628][T10943] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 152.462399][T10943] syz.9.2539: attempt to access beyond end of device [ 152.462399][T10943] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 152.476104][T10943] syz.9.2539: attempt to access beyond end of device [ 152.476104][T10943] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 152.490363][T10943] syz.9.2539: attempt to access beyond end of device [ 152.490363][T10943] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 152.522399][T10959] macvtap0: refused to change device tx_queue_len [ 152.588282][T10964] tmpfs: Too few inodes for current use [ 152.615227][T10964] lo speed is unknown, defaulting to 1000 [ 152.621521][T10964] lo speed is unknown, defaulting to 1000 [ 152.643043][T10961] loop6: detected capacity change from 0 to 128 [ 152.650326][T10961] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.671455][T10961] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.694011][T10961] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 152.702684][T10961] FAT-fs (loop6): Filesystem has been set read-only [ 152.749532][T10970] macvtap0: refused to change device tx_queue_len [ 152.833867][T10978] 9pnet: Could not find request transport: f [ 152.913654][T10987] loop6: detected capacity change from 0 to 512 [ 152.943444][T10987] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.044742][T11008] loop4: detected capacity change from 0 to 128 [ 153.046941][T11006] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 153.068173][T11006] SELinux: failed to load policy [ 153.130550][T11021] netlink: 'syz.9.2567': attribute type 10 has an invalid length. [ 153.155720][T11025] loop4: detected capacity change from 0 to 128 [ 153.166334][T11027] loop5: detected capacity change from 0 to 512 [ 153.202094][T11027] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.220823][T11033] tmpfs: Too few inodes for current use [ 153.261326][T11033] lo speed is unknown, defaulting to 1000 [ 153.268252][T11033] lo speed is unknown, defaulting to 1000 [ 153.329202][ T12] Buffer I/O error on dev loop4, logical block 1032, lost async page write [ 153.389877][T11041] loop5: detected capacity change from 0 to 1024 [ 153.432675][T11044] loop9: detected capacity change from 0 to 2048 [ 153.462772][T11041] EXT4-fs: Ignoring removed bh option [ 153.468256][T11041] EXT4-fs: inline encryption not supported [ 153.480456][T11041] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.491661][T11041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 153.501210][T11041] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2575: lblock 2 mapped to illegal pblock 2 (length 1) [ 153.516237][T11041] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2575: lblock 0 mapped to illegal pblock 48 (length 1) [ 153.532098][T11041] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2575: Failed to acquire dquot type 0 [ 153.546421][T11041] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 153.556575][T11041] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2575: mark_inode_dirty error [ 153.568676][T11041] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 153.581875][T11041] EXT4-fs (loop5): 1 orphan inode deleted [ 153.594034][ T6907] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.608815][ T6907] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:13: Failed to release dquot type 0 [ 153.621203][T11041] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.637626][T11041] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 153.772570][T11061] netlink: 'syz.6.2581': attribute type 10 has an invalid length. [ 153.792236][T11063] macvtap0: refused to change device tx_queue_len [ 153.939083][T11073] loop6: detected capacity change from 0 to 1024 [ 153.946154][T11073] EXT4-fs: Ignoring removed bh option [ 153.951746][T11073] EXT4-fs: inline encryption not supported [ 153.958461][T11073] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.969849][T11073] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 153.979596][T11073] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2587: lblock 2 mapped to illegal pblock 2 (length 1) [ 153.995831][T11073] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2587: lblock 0 mapped to illegal pblock 48 (length 1) [ 154.010909][T11073] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2587: Failed to acquire dquot type 0 [ 154.022722][T11073] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 154.039406][T11073] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2587: mark_inode_dirty error [ 154.051557][T11073] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 154.061990][T11073] EXT4-fs (loop6): 1 orphan inode deleted [ 154.070906][ T422] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 154.085646][ T422] __quota_error: 378 callbacks suppressed [ 154.085666][ T422] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 154.099898][ T422] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 154.113176][T11073] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 154.273812][T11093] loop5: detected capacity change from 0 to 1024 [ 154.339134][ T29] audit: type=1326 audit(1759907413.583:9606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.363005][ T29] audit: type=1326 audit(1759907413.583:9607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.464726][T11104] loop4: detected capacity change from 0 to 128 [ 154.511640][ T29] audit: type=1326 audit(1759907413.633:9608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.535326][ T29] audit: type=1326 audit(1759907413.633:9609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.559143][ T29] audit: type=1326 audit(1759907413.633:9610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.583315][ T29] audit: type=1326 audit(1759907413.633:9611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.607143][ T29] audit: type=1326 audit(1759907413.633:9612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.630666][ T29] audit: type=1326 audit(1759907413.633:9613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.654648][ T29] audit: type=1326 audit(1759907413.633:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11098 comm="syz.5.2598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ec29ceec9 code=0x7ffc0000 [ 154.911997][T11117] loop6: detected capacity change from 0 to 128 [ 154.920092][T11117] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.933074][T11117] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.949465][T11117] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 154.958159][T11117] FAT-fs (loop6): Filesystem has been set read-only [ 154.975160][T11117] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 155.094166][T11129] loop6: detected capacity change from 0 to 1024 [ 155.100943][T11127] loop1: detected capacity change from 0 to 512 [ 155.107990][T11127] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 155.118390][T11127] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2606: bg 0: block 104: invalid block bitmap [ 155.131993][T11127] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 155.141289][T11127] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2606: invalid indirect mapped block 1 (level 1) [ 155.154993][T11127] EXT4-fs (loop1): 1 truncate cleaned up [ 155.181951][T11134] loop6: detected capacity change from 0 to 512 [ 155.195402][T11134] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.221124][T11136] loop1: detected capacity change from 0 to 128 [ 155.229695][T11136] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.241962][T11136] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.257039][T11136] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 155.265958][T11136] FAT-fs (loop1): Filesystem has been set read-only [ 155.276166][T11141] tmpfs: Too few inodes for current use [ 155.283295][T11136] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 155.287154][T11141] sd 0:0:1:0: device reset [ 155.320771][T11141] lo speed is unknown, defaulting to 1000 [ 155.327384][T11141] lo speed is unknown, defaulting to 1000 [ 155.585231][T11154] 9pnet: Could not find request transport: f [ 155.628212][T11162] loop6: detected capacity change from 0 to 128 [ 155.699827][T11167] netlink: 'syz.4.2620': attribute type 10 has an invalid length. [ 155.707801][T11167] __nla_validate_parse: 19 callbacks suppressed [ 155.707819][T11167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2620'. [ 155.736947][T11169] loop5: detected capacity change from 0 to 512 [ 155.756564][T11169] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.789440][T11176] loop4: detected capacity change from 0 to 1024 [ 155.826962][T11182] netlink: 'syz.4.2627': attribute type 10 has an invalid length. [ 155.834923][T11182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2627'. [ 155.897108][T11188] loop4: detected capacity change from 0 to 128 [ 155.904602][T11188] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.916976][T11188] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.931010][T11188] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 155.939872][T11188] FAT-fs (loop4): Filesystem has been set read-only [ 155.998397][T11195] macvtap0: refused to change device tx_queue_len [ 156.025267][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2632'. [ 156.036015][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2632'. [ 156.159274][T11201] loop4: detected capacity change from 0 to 128 [ 156.259704][T11204] netlink: 'syz.4.2634': attribute type 10 has an invalid length. [ 156.267800][T11204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2634'. [ 156.375391][T11210] loop4: detected capacity change from 0 to 1024 [ 156.403782][T11212] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2638'. [ 156.413269][T11212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2638'. [ 156.423977][T11212] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2638'. [ 156.434483][T11212] tmpfs: Too few inodes for current use [ 156.453209][T11212] lo speed is unknown, defaulting to 1000 [ 156.459320][T11212] lo speed is unknown, defaulting to 1000 [ 156.675321][T11215] 9pnet: Could not find request transport: f [ 156.730524][T11224] loop4: detected capacity change from 0 to 512 [ 156.742117][T11224] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 156.761659][T11224] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2643: bg 0: block 104: invalid block bitmap [ 156.779225][T11228] netlink: 'syz.6.2645': attribute type 10 has an invalid length. [ 156.783399][T11224] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 156.787236][T11228] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2645'. [ 156.805297][T11224] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2643: invalid indirect mapped block 1 (level 1) [ 156.819036][T11224] EXT4-fs (loop4): 1 truncate cleaned up [ 156.896768][T11236] loop6: detected capacity change from 0 to 128 [ 156.904128][T11236] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.916267][T11236] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.945370][T11236] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 156.954119][T11236] FAT-fs (loop6): Filesystem has been set read-only [ 156.965064][T11241] loop4: detected capacity change from 0 to 128 [ 156.994437][T11243] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2651'. [ 157.017022][T11243] lo speed is unknown, defaulting to 1000 [ 157.023878][T11243] lo speed is unknown, defaulting to 1000 [ 157.376945][T11261] SELinux: failed to load policy [ 157.488565][T11277] loop9: detected capacity change from 0 to 128 [ 157.561762][T11285] loop6: detected capacity change from 0 to 128 [ 157.635337][T11289] bio_check_eod: 551 callbacks suppressed [ 157.635355][T11289] syz.6.2667: attempt to access beyond end of device [ 157.635355][T11289] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 157.671971][T11291] lo speed is unknown, defaulting to 1000 [ 157.678324][T11289] syz.6.2667: attempt to access beyond end of device [ 157.678324][T11289] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 157.678390][T11291] lo speed is unknown, defaulting to 1000 [ 157.691722][T11289] syz.6.2667: attempt to access beyond end of device [ 157.691722][T11289] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 157.691766][T11289] syz.6.2667: attempt to access beyond end of device [ 157.691766][T11289] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 157.724230][T11289] syz.6.2667: attempt to access beyond end of device [ 157.724230][T11289] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 157.737799][T11289] syz.6.2667: attempt to access beyond end of device [ 157.737799][T11289] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 157.751354][T11289] syz.6.2667: attempt to access beyond end of device [ 157.751354][T11289] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 157.765237][T11289] syz.6.2667: attempt to access beyond end of device [ 157.765237][T11289] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 157.779150][T11289] syz.6.2667: attempt to access beyond end of device [ 157.779150][T11289] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 157.792408][T11289] syz.6.2667: attempt to access beyond end of device [ 157.792408][T11289] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 157.877678][T11302] 9pnet: Could not find request transport: f [ 157.949499][T11310] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 157.958493][T11310] ref_ctr increment failed for inode: 0x870 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810470dc00 [ 158.077056][T11323] loop5: detected capacity change from 0 to 512 [ 158.104975][T11323] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.220506][T11337] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 158.229424][T11337] ref_ctr increment failed for inode: 0x8a7 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810470b980 [ 158.289890][T11341] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 158.298704][T11341] ref_ctr increment failed for inode: 0x8ad offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881317c9140 [ 158.392220][T11346] loop5: detected capacity change from 0 to 128 [ 158.471723][T11354] loop5: detected capacity change from 0 to 1024 [ 158.503589][T11356] loop5: detected capacity change from 0 to 512 [ 158.514342][T11356] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.627645][T11372] Invalid option length (1797) for dns_resolver key [ 158.709217][T11379] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 158.718019][T11379] ref_ctr increment failed for inode: 0xb5c offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881317c9140 [ 158.738215][T11381] netlink: 'syz.5.2703': attribute type 10 has an invalid length. [ 158.812185][T11386] loop5: detected capacity change from 0 to 128 [ 158.873101][T11393] lo speed is unknown, defaulting to 1000 [ 158.879331][T11393] lo speed is unknown, defaulting to 1000 [ 158.946580][T11399] 9pnet: Could not find request transport: f [ 158.994179][T11410] Invalid option length (1797) for dns_resolver key [ 159.005358][T11408] SELinux: failed to load policy [ 159.028564][T11414] loop1: detected capacity change from 0 to 128 [ 159.099626][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 159.099642][ T29] audit: type=1326 audit(1759907418.343:10160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.129681][ T29] audit: type=1326 audit(1759907418.343:10161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.158185][ T29] audit: type=1326 audit(1759907418.403:10162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.182021][ T29] audit: type=1326 audit(1759907418.403:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.206010][ T29] audit: type=1326 audit(1759907418.403:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11413 comm="syz.1.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.274822][T11417] tmpfs: Too few inodes for current use [ 159.299335][T11417] lo speed is unknown, defaulting to 1000 [ 159.307580][T11417] lo speed is unknown, defaulting to 1000 [ 159.337067][ T29] audit: type=1326 audit(1759907418.583:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.361142][ T29] audit: type=1326 audit(1759907418.583:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.388228][ T29] audit: type=1326 audit(1759907418.583:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.412244][ T29] audit: type=1326 audit(1759907418.583:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.436229][ T29] audit: type=1326 audit(1759907418.583:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11430 comm="syz.1.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b90f9eec9 code=0x7ffc0000 [ 159.527410][T11439] loop1: detected capacity change from 0 to 512 [ 159.542866][T11440] Invalid option length (1797) for dns_resolver key [ 159.559187][T11439] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.620605][T11447] loop1: detected capacity change from 0 to 512 [ 159.642002][T11447] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 159.668180][T11447] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2726: bg 0: block 104: invalid block bitmap [ 159.681816][T11447] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 159.691145][T11447] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2726: invalid indirect mapped block 1 (level 1) [ 159.705349][T11447] EXT4-fs (loop1): 1 truncate cleaned up [ 159.728140][T11455] loop5: detected capacity change from 0 to 128 [ 159.815858][T11465] tmpfs: Too few inodes for current use [ 159.821807][T11467] macvtap0: refused to change device tx_queue_len [ 159.859365][T11465] lo speed is unknown, defaulting to 1000 [ 159.877853][T11465] lo speed is unknown, defaulting to 1000 [ 159.906390][T11474] lo speed is unknown, defaulting to 1000 [ 159.912805][T11474] lo speed is unknown, defaulting to 1000 [ 160.112136][T11489] loop1: detected capacity change from 0 to 512 [ 160.122816][T11489] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 160.156187][T11489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2741: bg 0: block 104: invalid block bitmap [ 160.170474][T11489] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 160.186294][T11489] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2741: invalid indirect mapped block 1 (level 1) [ 160.188454][T11501] loop9: detected capacity change from 0 to 128 [ 160.208795][T11489] EXT4-fs (loop1): 1 truncate cleaned up [ 160.219055][T11504] netlink: 'syz.5.2746': attribute type 10 has an invalid length. [ 160.241590][T11506] loop4: detected capacity change from 0 to 128 [ 160.370246][T11522] loop9: detected capacity change from 0 to 128 [ 160.377547][T11522] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.392807][T11522] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.406181][T11522] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 160.415070][T11522] FAT-fs (loop9): Filesystem has been set read-only [ 160.443578][T11525] loop1: detected capacity change from 0 to 128 [ 160.450986][T11525] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.464968][T11525] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.508153][T11525] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 160.516856][T11525] FAT-fs (loop1): Filesystem has been set read-only [ 160.536086][T11534] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 160.544884][T11534] ref_ctr increment failed for inode: 0x684 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881317c85c0 [ 160.678609][T11544] loop5: detected capacity change from 0 to 512 [ 160.692650][T11544] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 160.734309][T11544] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2761: bg 0: block 104: invalid block bitmap [ 160.764393][T11556] loop9: detected capacity change from 0 to 128 [ 160.771339][T11550] SELinux: failed to load policy [ 160.777248][T11544] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 160.787753][T11544] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2761: invalid indirect mapped block 1 (level 1) [ 160.810976][T11544] EXT4-fs (loop5): 1 truncate cleaned up [ 160.869603][T11563] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 160.880770][T11563] SELinux: failed to load policy [ 160.899075][T11558] SELinux: failed to load policy [ 160.914116][T11567] __nla_validate_parse: 22 callbacks suppressed [ 160.914136][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2771'. [ 160.962632][T11567] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2771'. [ 160.984278][T11575] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2774'. [ 160.993873][T11575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2774'. [ 160.997080][T11577] loop5: detected capacity change from 0 to 512 [ 161.003162][T11575] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2774'. [ 161.026299][T11575] tmpfs: Too few inodes for current use [ 161.026734][T11577] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.045233][T11575] sd 0:0:1:0: device reset [ 161.164407][T11588] Invalid option length (1797) for dns_resolver key [ 161.177666][T11595] loop1: detected capacity change from 0 to 1024 [ 161.204019][T11589] lo speed is unknown, defaulting to 1000 [ 161.210307][T11589] lo speed is unknown, defaulting to 1000 [ 161.216830][T11598] loop1: detected capacity change from 0 to 128 [ 161.241808][T11603] loop4: detected capacity change from 0 to 128 [ 161.338430][T11612] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2784'. [ 161.348294][ T6913] Buffer I/O error on dev loop1, logical block 600, lost async page write [ 161.350651][T11613] loop4: detected capacity change from 0 to 1024 [ 161.357670][T11612] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2784'. [ 161.373550][T11612] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2784'. [ 161.392403][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2786'. [ 161.404554][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2786'. [ 161.453487][T11612] lo speed is unknown, defaulting to 1000 [ 161.489488][T11612] lo speed is unknown, defaulting to 1000 [ 161.804931][T11643] SELinux: failed to load policy [ 161.879332][T11657] loop4: detected capacity change from 0 to 128 [ 161.934477][T11659] SELinux: failed to load policy [ 162.032728][T11667] loop6: detected capacity change from 0 to 1024 [ 162.081836][T11672] loop4: detected capacity change from 0 to 1024 [ 162.357876][T11697] loop1: detected capacity change from 0 to 1024 [ 162.364904][T11697] EXT4-fs: Ignoring removed bh option [ 162.370524][T11697] EXT4-fs: inline encryption not supported [ 162.377507][T11697] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.389016][T11697] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 162.397417][T11702] loop4: detected capacity change from 0 to 1024 [ 162.398726][T11697] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2819: lblock 2 mapped to illegal pblock 2 (length 1) [ 162.418830][T11697] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2819: lblock 0 mapped to illegal pblock 48 (length 1) [ 162.433495][T11697] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2819: Failed to acquire dquot type 0 [ 162.445667][T11697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 162.455360][T11697] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2819: mark_inode_dirty error [ 162.467643][T11697] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 162.479080][T11697] EXT4-fs (loop1): 1 orphan inode deleted [ 162.482844][T11706] 9pnet: Could not find request transport: f [ 162.485644][T11697] EXT4-fs mount: 41 callbacks suppressed [ 162.485662][T11697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.509714][ T6913] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 162.524231][ T6913] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:19: Failed to release dquot type 0 [ 162.545227][T11697] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 162.568333][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.581315][T11709] loop4: detected capacity change from 0 to 128 [ 162.670246][T11721] loop4: detected capacity change from 0 to 512 [ 162.678287][T11721] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 162.688134][T11721] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.2828: bg 0: block 104: invalid block bitmap [ 162.701079][T11721] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 162.710775][T11721] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2828: invalid indirect mapped block 1 (level 1) [ 162.724550][T11721] EXT4-fs (loop4): 1 truncate cleaned up [ 162.730921][T11721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.754267][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.832798][T11731] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 162.843300][T11731] SELinux: failed to load policy [ 162.884647][T11735] loop9: detected capacity change from 0 to 1024 [ 162.888691][T11737] lo speed is unknown, defaulting to 1000 [ 162.891744][T11735] EXT4-fs: Ignoring removed bh option [ 162.898206][T11737] lo speed is unknown, defaulting to 1000 [ 162.902892][T11735] EXT4-fs: inline encryption not supported [ 162.916011][T11735] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.928369][T11735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 162.938641][T11735] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.2834: lblock 2 mapped to illegal pblock 2 (length 1) [ 162.953227][T11735] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.2834: lblock 0 mapped to illegal pblock 48 (length 1) [ 162.968327][T11735] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.2834: Failed to acquire dquot type 0 [ 162.979931][T11735] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 162.989644][T11735] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.2834: mark_inode_dirty error [ 163.001534][T11735] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 163.011878][T11735] EXT4-fs (loop9): 1 orphan inode deleted [ 163.018260][T11735] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.031781][ T422] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 163.051476][ T422] EXT4-fs error (device loop9): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 163.064658][T11735] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 163.067087][T11741] 9pnet: Could not find request transport: f [ 163.081771][T11735] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 163.115369][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.218876][T11758] tmpfs: Too few inodes for current use [ 163.228188][T11758] sd 0:0:1:0: device reset [ 163.238823][T11760] loop9: detected capacity change from 0 to 1024 [ 163.250293][T11758] lo speed is unknown, defaulting to 1000 [ 163.256793][T11758] lo speed is unknown, defaulting to 1000 [ 163.292742][T11767] loop9: detected capacity change from 0 to 1024 [ 163.325833][T11770] netlink: 'syz.6.2847': attribute type 10 has an invalid length. [ 163.345342][T11772] loop9: detected capacity change from 0 to 512 [ 163.355113][T11772] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 163.367588][T11772] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2848: bg 0: block 104: invalid block bitmap [ 163.380786][T11772] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 163.390372][T11772] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2848: invalid indirect mapped block 1 (level 1) [ 163.396924][T11776] loop6: detected capacity change from 0 to 128 [ 163.409594][T11772] EXT4-fs (loop9): 1 truncate cleaned up [ 163.417107][T11772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.464739][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.485820][T11782] loop6: detected capacity change from 0 to 128 [ 163.572536][T11792] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 163.575847][T11790] lo speed is unknown, defaulting to 1000 [ 163.591800][T11790] lo speed is unknown, defaulting to 1000 [ 163.595380][T11797] loop9: detected capacity change from 0 to 2048 [ 163.605729][T11792] SELinux: failed to load policy [ 163.616596][T11797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.632355][T11797] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.672359][T11805] netlink: 'syz.5.2859': attribute type 10 has an invalid length. [ 163.717200][T11808] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2856: bg 0: block 345: padding at end of block bitmap is not set [ 163.755275][T11808] EXT4-fs (loop9): Remounting filesystem read-only [ 163.765040][ T6907] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 163.793190][T11816] loop6: detected capacity change from 0 to 128 [ 163.819907][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.890568][T11827] loop1: detected capacity change from 0 to 1024 [ 163.920179][T11825] SELinux: failed to load policy [ 163.925474][T11830] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 163.936453][T11830] SELinux: failed to load policy [ 163.966117][T11835] netlink: 'syz.1.2872': attribute type 10 has an invalid length. [ 163.975999][T11835] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 164.066251][T11847] loop1: detected capacity change from 0 to 128 [ 164.128731][T11852] loop1: detected capacity change from 0 to 1024 [ 164.154408][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 164.154427][ T29] audit: type=1326 audit(1759907423.403:10778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.185913][ T29] audit: type=1326 audit(1759907423.403:10779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.204698][T11858] loop6: detected capacity change from 0 to 128 [ 164.209706][ T29] audit: type=1326 audit(1759907423.403:10780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.239957][ T29] audit: type=1326 audit(1759907423.403:10781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.263858][ T29] audit: type=1326 audit(1759907423.403:10782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.287613][ T29] audit: type=1326 audit(1759907423.403:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.311664][ T29] audit: type=1326 audit(1759907423.403:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.335531][ T29] audit: type=1326 audit(1759907423.403:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.359329][ T29] audit: type=1326 audit(1759907423.403:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.382973][ T29] audit: type=1326 audit(1759907423.403:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.6.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 164.423123][T11861] loop1: detected capacity change from 0 to 512 [ 164.453852][T11858] bio_check_eod: 593 callbacks suppressed [ 164.453872][T11858] syz.6.2883: attempt to access beyond end of device [ 164.453872][T11858] loop6: rw=1, sector=153, nr_sectors = 8 limit=128 [ 164.473123][T11861] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 164.481878][T11858] syz.6.2883: attempt to access beyond end of device [ 164.481878][T11858] loop6: rw=1, sector=169, nr_sectors = 8 limit=128 [ 164.496859][T11858] syz.6.2883: attempt to access beyond end of device [ 164.496859][T11858] loop6: rw=1, sector=185, nr_sectors = 8 limit=128 [ 164.510525][T11858] syz.6.2883: attempt to access beyond end of device [ 164.510525][T11858] loop6: rw=1, sector=201, nr_sectors = 8 limit=128 [ 164.512635][T11861] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2884: bg 0: block 104: invalid block bitmap [ 164.524210][T11858] syz.6.2883: attempt to access beyond end of device [ 164.524210][T11858] loop6: rw=1, sector=217, nr_sectors = 8 limit=128 [ 164.537148][T11861] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 164.549878][T11858] syz.6.2883: attempt to access beyond end of device [ 164.549878][T11858] loop6: rw=1, sector=233, nr_sectors = 8 limit=128 [ 164.572442][T11858] syz.6.2883: attempt to access beyond end of device [ 164.572442][T11858] loop6: rw=1, sector=249, nr_sectors = 8 limit=128 [ 164.576232][T11867] netlink: 'syz.5.2886': attribute type 10 has an invalid length. [ 164.585950][T11858] syz.6.2883: attempt to access beyond end of device [ 164.585950][T11858] loop6: rw=1, sector=265, nr_sectors = 8 limit=128 [ 164.594494][T11861] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2884: invalid indirect mapped block 1 (level 1) [ 164.606943][T11858] syz.6.2883: attempt to access beyond end of device [ 164.606943][T11858] loop6: rw=1, sector=281, nr_sectors = 8 limit=128 [ 164.633480][T11858] syz.6.2883: attempt to access beyond end of device [ 164.633480][T11858] loop6: rw=1, sector=297, nr_sectors = 8 limit=128 [ 164.634627][T11861] EXT4-fs (loop1): 1 truncate cleaned up [ 164.654295][T11861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.703839][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.743756][T11875] tmpfs: Too few inodes for current use [ 164.749304][T11877] loop9: detected capacity change from 0 to 128 [ 164.759727][T11875] sd 0:0:1:0: device reset [ 164.783376][T11875] lo speed is unknown, defaulting to 1000 [ 164.792206][T11875] lo speed is unknown, defaulting to 1000 [ 164.851425][T11888] loop6: detected capacity change from 0 to 512 [ 164.874560][T11888] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 164.888513][T11888] EXT4-fs (loop6): 1 truncate cleaned up [ 164.895307][T11888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.913512][T11893] Invalid option length (1797) for dns_resolver key [ 164.935777][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.034611][T11902] loop5: detected capacity change from 0 to 1024 [ 165.118486][T11910] sel_write_load: 1 callbacks suppressed [ 165.118508][T11910] SELinux: failed to load policy [ 165.166478][T11915] loop5: detected capacity change from 0 to 1024 [ 165.173237][T11915] EXT4-fs: Ignoring removed bh option [ 165.178814][T11915] EXT4-fs: inline encryption not supported [ 165.187015][T11915] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.187361][T11920] loop1: detected capacity change from 0 to 1024 [ 165.209982][T11915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 165.225177][T11915] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2907: lblock 2 mapped to illegal pblock 2 (length 1) [ 165.242238][T11915] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2907: lblock 0 mapped to illegal pblock 48 (length 1) [ 165.261685][T11915] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2907: Failed to acquire dquot type 0 [ 165.282453][T11915] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 165.298075][T11915] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2907: mark_inode_dirty error [ 165.310125][T11915] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 165.320656][T11915] EXT4-fs (loop5): 1 orphan inode deleted [ 165.326996][T11915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.340142][ T3918] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.357705][ T3918] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 165.370194][T11915] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 165.382630][T11915] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 165.400162][ T5554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.466705][T11938] loop6: detected capacity change from 0 to 1024 [ 165.495255][T11941] netlink: 'syz.6.2917': attribute type 10 has an invalid length. [ 165.614434][T11957] loop6: detected capacity change from 0 to 1024 [ 165.621138][T11957] EXT4-fs: Ignoring removed oldalloc option [ 165.627284][T11957] EXT4-fs: Ignoring removed bh option [ 165.633535][T11957] EXT4-fs (loop6): stripe (3092) is not aligned with cluster size (16), stripe is disabled [ 165.653840][T11957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.687970][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.762966][T11964] loop6: detected capacity change from 0 to 1024 [ 165.769971][T11964] EXT4-fs: Ignoring removed bh option [ 165.775686][T11964] EXT4-fs: inline encryption not supported [ 165.781925][T11964] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.793276][T11964] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 165.802789][T11964] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2924: lblock 2 mapped to illegal pblock 2 (length 1) [ 165.817394][T11964] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2924: lblock 0 mapped to illegal pblock 48 (length 1) [ 165.831894][T11964] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2924: Failed to acquire dquot type 0 [ 165.843785][T11964] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 165.855600][T11964] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2924: mark_inode_dirty error [ 165.867623][T11964] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 165.877999][T11964] EXT4-fs (loop6): 1 orphan inode deleted [ 165.884478][T11964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.897678][ T3918] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 165.912786][ T3918] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 165.925906][T11964] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 165.935679][T11964] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 165.952801][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.978650][T11972] loop6: detected capacity change from 0 to 1024 [ 166.011195][T11976] netlink: 'syz.6.2929': attribute type 10 has an invalid length. [ 166.019313][T11976] __nla_validate_parse: 28 callbacks suppressed [ 166.019339][T11976] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2929'. [ 166.107121][T11984] loop6: detected capacity change from 0 to 8192 [ 166.129405][T11984] FAULT_INJECTION: forcing a failure. [ 166.129405][T11984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.142697][T11984] CPU: 1 UID: 0 PID: 11984 Comm: syz.6.2933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.142775][T11984] Tainted: [W]=WARN [ 166.142783][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.142799][T11984] Call Trace: [ 166.142807][T11984] [ 166.142818][T11984] __dump_stack+0x1d/0x30 [ 166.142844][T11984] dump_stack_lvl+0xe8/0x140 [ 166.142866][T11984] dump_stack+0x15/0x1b [ 166.142890][T11984] should_fail_ex+0x265/0x280 [ 166.142932][T11984] should_fail+0xb/0x20 [ 166.142970][T11984] should_fail_usercopy+0x1a/0x20 [ 166.143019][T11984] _copy_to_user+0x20/0xa0 [ 166.143050][T11984] simple_read_from_buffer+0xb5/0x130 [ 166.143071][T11984] proc_fail_nth_read+0x10e/0x150 [ 166.143108][T11984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.143144][T11984] vfs_read+0x1a5/0x770 [ 166.143238][T11984] ? __rcu_read_unlock+0x4f/0x70 [ 166.143270][T11984] ? __fget_files+0x184/0x1c0 [ 166.143299][T11984] ? kfree+0xdb/0x400 [ 166.143340][T11984] ksys_read+0xda/0x1a0 [ 166.143398][T11984] __x64_sys_read+0x40/0x50 [ 166.143427][T11984] x64_sys_call+0x27c0/0x3000 [ 166.143514][T11984] do_syscall_64+0xd2/0x200 [ 166.143537][T11984] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.143590][T11984] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.143642][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.143670][T11984] RIP: 0033:0x7fa3a75bd8dc [ 166.143762][T11984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 166.143781][T11984] RSP: 002b:00007fa3a601f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.143803][T11984] RAX: ffffffffffffffda RBX: 00007fa3a7815fa0 RCX: 00007fa3a75bd8dc [ 166.143818][T11984] RDX: 000000000000000f RSI: 00007fa3a601f0a0 RDI: 0000000000000005 [ 166.143834][T11984] RBP: 00007fa3a601f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.143849][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.143888][T11984] R13: 00007fa3a7816038 R14: 00007fa3a7815fa0 R15: 00007ffc90348d88 [ 166.143912][T11984] [ 166.248166][T11989] loop9: detected capacity change from 0 to 128 [ 166.348401][T11995] loop4: detected capacity change from 0 to 1024 [ 166.391945][T11997] lo speed is unknown, defaulting to 1000 [ 166.398807][T11997] lo speed is unknown, defaulting to 1000 [ 166.462817][T12006] binfmt_misc: register: failed to install interpreter file ./file0 [ 166.510878][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 166.519842][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.526290][T12012] netlink: 'syz.9.2945': attribute type 13 has an invalid length. [ 166.544786][T12012] gretap0: refused to change device tx_queue_len [ 166.551753][T12012] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.620123][T12015] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.630851][T12015] lo speed is unknown, defaulting to 1000 [ 166.636881][T12015] lo speed is unknown, defaulting to 1000 [ 166.648012][T12015] lo speed is unknown, defaulting to 1000 [ 166.655480][T12015] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 166.666428][T12015] lo speed is unknown, defaulting to 1000 [ 166.673697][T12015] lo speed is unknown, defaulting to 1000 [ 166.680309][T12015] lo speed is unknown, defaulting to 1000 [ 166.686763][T12015] lo speed is unknown, defaulting to 1000 [ 166.695224][T12015] lo speed is unknown, defaulting to 1000 [ 166.764831][T12025] loop6: detected capacity change from 0 to 1024 [ 166.777402][T12027] lo speed is unknown, defaulting to 1000 [ 166.788916][T12027] lo speed is unknown, defaulting to 1000 [ 166.792576][T12013] lo speed is unknown, defaulting to 1000 [ 166.796089][T12027] lo speed is unknown, defaulting to 1000 [ 166.800920][T12013] lo speed is unknown, defaulting to 1000 [ 166.816609][T12013] lo speed is unknown, defaulting to 1000 [ 166.854561][T12029] SELinux: failed to load policy [ 166.910332][T12032] SELinux: failed to load policy [ 166.996170][T12038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.037945][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2957'. [ 167.204645][T12038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.216768][T12041] IPVS: Error connecting to the multicast addr [ 167.266335][T12038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.345668][T12038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.368113][T12069] netlink: 'syz.6.2968': attribute type 13 has an invalid length. [ 167.380238][T12069] gretap0: refused to change device tx_queue_len [ 167.387628][T12069] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 167.403441][ T10] lo speed is unknown, defaulting to 1000 [ 167.427489][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.445023][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.462032][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.476086][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.664340][T12087] 9pnet: Could not find request transport: f [ 167.819531][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2978'. [ 167.830444][T12095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2978'. [ 167.985192][T12099] SELinux: failed to load policy [ 168.154120][T12104] lo speed is unknown, defaulting to 1000 [ 168.160247][T12104] lo speed is unknown, defaulting to 1000 [ 168.166562][T12104] lo speed is unknown, defaulting to 1000 [ 168.271552][T12111] FAULT_INJECTION: forcing a failure. [ 168.271552][T12111] name failslab, interval 1, probability 0, space 0, times 0 [ 168.284397][T12111] CPU: 1 UID: 0 PID: 12111 Comm: syz.9.2984 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 168.284490][T12111] Tainted: [W]=WARN [ 168.284498][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.284526][T12111] Call Trace: [ 168.284535][T12111] [ 168.284545][T12111] __dump_stack+0x1d/0x30 [ 168.284566][T12111] dump_stack_lvl+0xe8/0x140 [ 168.284593][T12111] dump_stack+0x15/0x1b [ 168.284612][T12111] should_fail_ex+0x265/0x280 [ 168.284666][T12111] should_failslab+0x8c/0xb0 [ 168.284731][T12111] __kmalloc_noprof+0xa5/0x570 [ 168.284754][T12111] ? sock_kmalloc+0x85/0xc0 [ 168.284779][T12111] sock_kmalloc+0x85/0xc0 [ 168.284850][T12111] ____sys_sendmsg+0xf8/0x4e0 [ 168.284878][T12111] ___sys_sendmsg+0x17b/0x1d0 [ 168.284917][T12111] __sys_sendmmsg+0x178/0x300 [ 168.285021][T12111] __x64_sys_sendmmsg+0x57/0x70 [ 168.285046][T12111] x64_sys_call+0x1c4a/0x3000 [ 168.285065][T12111] do_syscall_64+0xd2/0x200 [ 168.285111][T12111] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.285135][T12111] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.285176][T12111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.285205][T12111] RIP: 0033:0x7f8b5b85eec9 [ 168.285243][T12111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.285259][T12111] RSP: 002b:00007f8b5a2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 168.285276][T12111] RAX: ffffffffffffffda RBX: 00007f8b5bab5fa0 RCX: 00007f8b5b85eec9 [ 168.285287][T12111] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 168.285297][T12111] RBP: 00007f8b5a2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.285308][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.285374][T12111] R13: 00007f8b5bab6038 R14: 00007f8b5bab5fa0 R15: 00007ffe1b5bda58 [ 168.285391][T12111] [ 168.532514][T12117] loop5: detected capacity change from 0 to 128 [ 168.570599][T12124] loop1: detected capacity change from 0 to 128 [ 168.610691][T12127] loop4: detected capacity change from 0 to 1024 [ 168.649550][T12133] loop6: detected capacity change from 0 to 512 [ 168.666274][T12133] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 168.713142][T12133] EXT4-fs (loop6): 1 truncate cleaned up [ 168.722801][T12133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.816640][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.830339][ T5559] lo speed is unknown, defaulting to 1000 [ 168.836261][ T5559] syz0: Port: 1 Link DOWN [ 168.841705][T12163] netlink: 'syz.5.3004': attribute type 13 has an invalid length. [ 168.857709][T12163] gretap0: refused to change device tx_queue_len [ 168.864921][T12163] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 168.880593][ T5559] lo speed is unknown, defaulting to 1000 [ 168.886618][ T5559] syz0: Port: 1 Link ACTIVE [ 168.925201][T12170] loop6: detected capacity change from 0 to 128 [ 168.969762][ T3413] lo speed is unknown, defaulting to 1000 [ 168.976198][ T3413] syz0: Port: 1 Link DOWN [ 168.982375][T12175] netlink: 'syz.5.3009': attribute type 13 has an invalid length. [ 168.994829][T12175] gretap0: refused to change device tx_queue_len [ 169.001852][T12175] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.018379][ T3413] lo speed is unknown, defaulting to 1000 [ 169.024300][ T3413] syz0: Port: 1 Link ACTIVE [ 169.132921][T12185] netlink: 'syz.5.3012': attribute type 1 has an invalid length. [ 169.141204][T12185] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3012'. [ 169.185764][T12188] loop5: detected capacity change from 0 to 128 [ 169.200207][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3014'. [ 169.210113][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3012'. [ 169.220762][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3014'. [ 169.233746][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 169.233765][ T29] audit: type=1400 audit(1759907428.483:11427): avc: denied { read } for pid=12184 comm="syz.5.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.261585][ T29] audit: type=1400 audit(1759907428.483:11428): avc: denied { setopt } for pid=12184 comm="syz.5.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.281438][ T29] audit: type=1400 audit(1759907428.513:11429): avc: denied { mount } for pid=12184 comm="syz.5.3012" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 169.384035][ T29] audit: type=1326 audit(1759907428.633:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 169.408674][ T29] audit: type=1326 audit(1759907428.633:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 169.432715][ T29] audit: type=1326 audit(1759907428.633:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 169.456659][ T29] audit: type=1326 audit(1759907428.633:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 169.480913][ T29] audit: type=1326 audit(1759907428.633:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 169.504712][ T29] audit: type=1326 audit(1759907428.633:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 169.528751][ T29] audit: type=1326 audit(1759907428.633:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12194 comm="syz.6.3016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa3a75beec9 code=0x7ffc0000 [ 169.640667][T12207] 9pnet: Could not find request transport: f [ 169.668651][T12214] loop4: detected capacity change from 0 to 512 [ 169.676145][T12214] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.698003][T12214] EXT4-fs (loop4): 1 truncate cleaned up [ 169.712508][T12214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.755682][T12218] netlink: 'syz.1.3026': attribute type 13 has an invalid length. [ 169.763872][ T10] lo speed is unknown, defaulting to 1000 [ 169.769619][ T10] syz2: Port: 1 Link DOWN [ 169.779378][T12218] gretap0: refused to change device tx_queue_len [ 169.798715][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.814459][T12218] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 169.830264][ T3399] lo speed is unknown, defaulting to 1000 [ 169.836084][ T3399] syz2: Port: 1 Link ACTIVE [ 169.938479][ T6907] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.027633][ T6907] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.103008][ T6907] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.163175][T12229] lo speed is unknown, defaulting to 1000 [ 170.169852][T12229] lo speed is unknown, defaulting to 1000 [ 170.179330][ T6907] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.191129][T12229] lo speed is unknown, defaulting to 1000 [ 170.281283][T12229] chnl_net:caif_netlink_parms(): no params data found [ 170.525359][ T6907] bond0 (unregistering): Released all slaves [ 170.534168][ T6907] bond1 (unregistering): Released all slaves [ 170.559148][ T6907] tipc: Disabling bearer [ 170.564774][ T6907] tipc: Left network mode [ 170.588212][ T6907] hsr_slave_0: left promiscuous mode [ 170.594537][ T6907] hsr_slave_1: left promiscuous mode [ 170.600541][ T6907] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 170.607864][ T6907] batman_adv: batadv0: Removing interface: veth1_vlan [ 170.618697][ T6907] veth1_macvtap: left promiscuous mode [ 170.628097][ T6907] veth0_macvtap: left promiscuous mode [ 170.633960][ T6907] veth1_vlan: left promiscuous mode [ 170.639295][ T6907] veth0_vlan: left promiscuous mode [ 170.739978][T12229] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.747285][T12229] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.757269][T12229] bridge_slave_0: entered allmulticast mode [ 170.763715][T12229] bridge_slave_0: entered promiscuous mode [ 170.770475][ T3399] lo speed is unknown, defaulting to 1000 [ 170.776267][ T3399] infiniband syz0: ib_query_port failed (-19) [ 170.780643][T12260] lo speed is unknown, defaulting to 1000 [ 170.782782][T12229] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.795298][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.805005][T12229] bridge_slave_1: entered allmulticast mode [ 170.811960][T12229] bridge_slave_1: entered promiscuous mode [ 170.818495][T12260] lo speed is unknown, defaulting to 1000 [ 170.834733][T12229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.849364][T12229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.880428][T12229] team0: Port device team_slave_0 added [ 170.888492][T12229] team0: Port device team_slave_1 added [ 170.911255][T12229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.918582][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.944945][T12229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.958009][T12229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.965038][T12229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.991248][T12229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.044847][T12229] hsr_slave_0: entered promiscuous mode [ 171.044973][T12267] loop4: detected capacity change from 0 to 128 [ 171.061387][T12229] hsr_slave_1: entered promiscuous mode [ 171.098417][T12229] debugfs: 'hsr0' already exists in 'hsr' [ 171.104274][T12229] Cannot create hsr debugfs directory [ 171.139264][ T10] lo speed is unknown, defaulting to 1000 [ 171.145092][ T10] syz: Port: 1 Link DOWN [ 171.150225][T12274] netlink: 'syz.6.3043': attribute type 13 has an invalid length. [ 171.167643][T12274] gretap0: refused to change device tx_queue_len [ 171.190458][T12274] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 171.207184][ T10] lo speed is unknown, defaulting to 1000 [ 171.213030][ T10] syz: Port: 1 Link ACTIVE [ 171.235841][T12279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3044'. [ 171.249295][T12279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3044'. [ 171.316570][T12282] lo speed is unknown, defaulting to 1000 [ 171.333827][T12282] lo speed is unknown, defaulting to 1000 [ 171.361358][T12286] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3046'. [ 171.376411][T12286] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3046'. [ 171.387618][T12286] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3046'. [ 171.406295][T12286] tmpfs: Too few inodes for current use [ 171.421159][T12291] loop1: detected capacity change from 0 to 1024 [ 171.439885][T12286] lo speed is unknown, defaulting to 1000 [ 171.449214][T12286] lo speed is unknown, defaulting to 1000 [ 171.574751][T12300] 9pnet: Could not find request transport: f [ 171.668310][T12229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 171.678230][T12229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 171.688332][T12229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.700299][T12229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.744979][T12229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.758280][T12229] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.784602][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.791976][ T3918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.808544][T12319] netlink: 'syz.6.3055': attribute type 1 has an invalid length. [ 171.816428][T12319] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3055'. [ 171.828616][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.835764][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.896478][T12323] Invalid option length (1797) for dns_resolver key [ 171.907965][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3058'. [ 171.921107][T12326] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3058'. [ 171.960391][T12229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.039271][T12229] veth0_vlan: entered promiscuous mode [ 172.053148][T12229] veth1_vlan: entered promiscuous mode [ 172.057361][T12343] loop4: detected capacity change from 0 to 512 [ 172.070225][T12343] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.085820][T12229] veth0_macvtap: entered promiscuous mode [ 172.093323][T12229] veth1_macvtap: entered promiscuous mode [ 172.095564][T12346] loop6: detected capacity change from 0 to 128 [ 172.106194][T12229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.114973][T12343] EXT4-fs (loop4): 1 truncate cleaned up [ 172.121040][T12343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.138471][T12229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.158647][ T6913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.168100][ T6913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.176968][ T6913] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.186545][ T6913] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.186672][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.226533][T12349] lo speed is unknown, defaulting to 1000 [ 172.233015][T12349] lo speed is unknown, defaulting to 1000 [ 172.303815][T12358] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3065'. [ 172.338931][T12358] IPVS: Error connecting to the multicast addr [ 172.398626][T12365] Invalid option length (1797) for dns_resolver key [ 172.541112][T12366] lo speed is unknown, defaulting to 1000 [ 172.564200][T12366] lo speed is unknown, defaulting to 1000 [ 172.591520][T12385] loop6: detected capacity change from 0 to 512 [ 172.610365][T12385] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 172.622874][T12387] loop9: detected capacity change from 0 to 512 [ 172.633683][T12387] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 172.644454][T12385] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3071: bg 0: block 104: invalid block bitmap [ 172.667322][T12385] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 172.680322][T12385] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.3071: invalid indirect mapped block 1 (level 1) [ 172.681863][T12387] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.3073: bg 0: block 104: invalid block bitmap [ 172.706721][T12385] EXT4-fs (loop6): 1 truncate cleaned up [ 172.717930][T12385] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.718375][ T422] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.741829][T12387] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 172.751379][T12387] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3073: invalid indirect mapped block 1 (level 1) [ 172.752669][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.767030][T12387] EXT4-fs (loop9): 1 truncate cleaned up [ 172.780841][T12387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.803528][T12366] chnl_net:caif_netlink_parms(): no params data found [ 172.823358][ T422] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.835502][ T6571] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.874610][T12401] loop6: detected capacity change from 0 to 128 [ 172.875194][ T422] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.909753][T12366] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.917931][T12366] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.926232][T12366] bridge_slave_0: entered allmulticast mode [ 172.933382][T12366] bridge_slave_0: entered promiscuous mode [ 172.941075][T12366] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.948597][T12366] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.957056][T12366] bridge_slave_1: entered allmulticast mode [ 172.964345][T12366] bridge_slave_1: entered promiscuous mode [ 172.974025][ T422] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.008410][T12409] lo speed is unknown, defaulting to 1000 [ 173.010874][T12366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.024877][T12409] lo speed is unknown, defaulting to 1000 [ 173.032338][T12366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.072517][T12366] team0: Port device team_slave_0 added [ 173.079643][T12366] team0: Port device team_slave_1 added [ 173.110530][T12366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.117699][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.143776][T12366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.157832][T12366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.164972][T12366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.191083][T12366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.261095][T12415] Invalid option length (1797) for dns_resolver key [ 173.326279][ T422] bond0 (unregistering): Released all slaves [ 173.335411][ T422] bond1 (unregistering): Released all slaves [ 173.361988][ T3399] lo speed is unknown, defaulting to 1000 [ 173.367867][ T3399] syz: Port: 1 Link DOWN [ 173.370312][T12366] hsr_slave_0: entered promiscuous mode [ 173.373340][T12414] netlink: 'syz.6.3080': attribute type 13 has an invalid length. [ 173.379111][T12366] hsr_slave_1: entered promiscuous mode [ 173.392444][T12366] debugfs: 'hsr0' already exists in 'hsr' [ 173.398225][T12366] Cannot create hsr debugfs directory [ 173.406991][T12414] gretap0: refused to change device tx_queue_len [ 173.414197][T12414] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 173.429945][ T5559] lo speed is unknown, defaulting to 1000 [ 173.435831][ T5559] syz: Port: 1 Link ACTIVE [ 173.446958][ T422] hsr_slave_0: left promiscuous mode [ 173.456689][ T422] hsr_slave_1: left promiscuous mode [ 173.471769][ T422] veth1_macvtap: left promiscuous mode [ 173.477644][ T422] veth0_macvtap: left promiscuous mode [ 173.483447][ T422] veth1_vlan: left promiscuous mode [ 173.489028][ T422] veth0_vlan: left promiscuous mode [ 173.585130][T12427] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3084'. [ 173.608598][ T3399] lo speed is unknown, defaulting to 1000 [ 173.614581][ T3399] infiniband syz2: ib_query_port failed (-19) [ 173.625259][T12427] tmpfs: Too few inodes for current use [ 173.654904][T12427] sd 0:0:1:0: device reset [ 173.707443][T12427] lo speed is unknown, defaulting to 1000 [ 173.750023][T12434] loop6: detected capacity change from 0 to 128 [ 173.770266][T12436] loop2: detected capacity change from 0 to 128 [ 173.883987][T12451] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.887380][T12450] loop6: detected capacity change from 0 to 1024 [ 173.903407][T12450] EXT4-fs: Ignoring removed bh option [ 173.909030][T12450] EXT4-fs: inline encryption not supported [ 173.915672][T12450] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.934904][T12450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 173.949991][T12450] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.3092: lblock 2 mapped to illegal pblock 2 (length 1) [ 173.967396][T12450] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.3092: lblock 0 mapped to illegal pblock 48 (length 1) [ 173.984274][T12450] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3092: Failed to acquire dquot type 0 [ 173.996351][T12450] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 174.006015][T12450] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.3092: mark_inode_dirty error [ 174.018119][T12450] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 174.028470][T12450] EXT4-fs (loop6): 1 orphan inode deleted [ 174.035004][T12450] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.052226][ T6907] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 174.096052][ T6907] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:13: Failed to release dquot type 0 [ 174.131706][T12451] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.152525][T12450] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 174.189648][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.208156][T12451] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.237208][T12366] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.251243][T12366] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.262725][T12366] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.272642][T12366] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.279003][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 174.279022][ T29] audit: type=1326 audit(1759907433.523:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12462 comm="syz.2.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f32132beec9 code=0x7ffc0000 [ 174.310230][ T29] audit: type=1326 audit(1759907433.553:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12462 comm="syz.2.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32132beec9 code=0x7ffc0000 [ 174.333990][ T29] audit: type=1326 audit(1759907433.553:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12462 comm="syz.2.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32132beec9 code=0x7ffc0000 [ 174.363120][T12451] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.430592][T12481] netlink: 'syz.6.3100': attribute type 13 has an invalid length. [ 174.437497][T12483] loop4: detected capacity change from 0 to 128 [ 174.458342][T12481] gretap0: refused to change device tx_queue_len [ 174.467224][T12481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 174.491753][ T3918] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.516084][ T3918] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.527419][ T3918] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.538037][ T3918] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.551548][T12366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.567898][T12366] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.575956][T12489] 9pnet: Could not find request transport: f [ 174.583811][ T6907] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.588100][T12492] tmpfs: Too few inodes for current use [ 174.590952][ T6907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.606884][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.614161][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.621942][T12492] sd 0:0:1:0: device reset [ 174.703753][T12492] lo speed is unknown, defaulting to 1000 [ 174.718052][T12366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.755866][T12499] loop4: detected capacity change from 0 to 1024 [ 174.763086][T12499] EXT4-fs: Ignoring removed bh option [ 174.768861][T12499] EXT4-fs: inline encryption not supported [ 174.775425][T12499] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.790867][T12499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 174.815852][T12507] lo speed is unknown, defaulting to 1000 [ 174.823269][T12499] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3104: lblock 2 mapped to illegal pblock 2 (length 1) [ 174.838279][T12499] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 174.847119][T12499] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3104: lblock 0 mapped to illegal pblock 48 (length 1) [ 174.853240][T12366] veth0_vlan: entered promiscuous mode [ 174.867701][T12499] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 174.870825][T12366] veth1_vlan: entered promiscuous mode [ 174.876907][T12499] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3104: Failed to acquire dquot type 0 [ 174.894383][T12499] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 174.904668][T12499] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3104: mark_inode_dirty error [ 174.917695][T12366] veth0_macvtap: entered promiscuous mode [ 174.924891][T12499] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 174.925501][T12366] veth1_macvtap: entered promiscuous mode [ 174.939052][T12499] EXT4-fs (loop4): 1 orphan inode deleted [ 174.951688][T12499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.967626][T12366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.975246][ T3455] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 174.981134][T12366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.003150][ T3455] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 175.011831][ T3455] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 175.025161][ T3915] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.034703][T12499] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.050677][ T3915] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.070034][ T3915] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.085524][ T3915] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.175020][ T29] audit: type=1326 audit(1759907434.423:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32132beec9 code=0x7ffc0000 [ 175.185888][T12526] loop2: detected capacity change from 0 to 512 [ 175.198846][ T29] audit: type=1326 audit(1759907434.423:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32132beec9 code=0x7ffc0000 [ 175.198894][ T29] audit: type=1326 audit(1759907434.423:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32132beec9 code=0x7ffc0000 [ 175.234113][T12499] infiniband syz0: set down [ 175.252791][ T29] audit: type=1326 audit(1759907434.423:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12524 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32132beec9 code=0x7ffc0000 [ 175.257107][T12499] infiniband syz0: added bond_slave_0 [ 175.330351][T12526] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 175.339040][T12499] RDS/IB: syz0: added [ 175.340587][T12533] loop1: detected capacity change from 0 to 128 [ 175.343602][T12526] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.388507][T12539] loop1: detected capacity change from 0 to 512 [ 175.391821][T12526] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.3111: corrupted inode contents [ 175.410196][T12536] 9pnet: Could not find request transport: f [ 175.420101][T12539] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 175.430746][T12526] EXT4-fs (loop2): Remounting filesystem read-only [ 175.443532][T12526] EXT4-fs (loop2): 1 truncate cleaned up [ 175.459973][ T3915] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.470675][ T3915] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.482945][T12539] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3115: bg 0: block 104: invalid block bitmap [ 175.501828][T12539] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 175.531420][T12543] loop6: detected capacity change from 0 to 2048 [ 175.562187][ T3915] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 175.583831][T12539] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3115: invalid indirect mapped block 1 (level 1) [ 175.603869][T12526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.617044][T12539] EXT4-fs (loop1): 1 truncate cleaned up [ 175.633788][T12543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.647719][T12543] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.659134][T12539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.685679][T12229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.697542][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.715821][T12547] lo speed is unknown, defaulting to 1000 [ 175.733576][T12366] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.767382][T12551] tmpfs: Too few inodes for current use [ 175.797142][T12549] loop2: detected capacity change from 0 to 2048 [ 175.804790][T12554] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3116: bg 0: block 345: padding at end of block bitmap is not set [ 175.805471][T12551] sd 0:0:1:0: device reset [ 175.832672][T12554] EXT4-fs (loop6): Remounting filesystem read-only [ 175.841318][ T3915] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 175.863718][T12549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.864343][T12551] lo speed is unknown, defaulting to 1000 [ 175.882264][T12549] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.000973][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.006912][T12563] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3118: bg 0: block 345: padding at end of block bitmap is not set [ 176.024917][T12563] EXT4-fs (loop2): Remounting filesystem read-only [ 176.044194][ T12] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 176.088535][T12569] loop6: detected capacity change from 0 to 512 [ 176.132674][T12229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.132595][T12569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.132794][T12569] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.317503][T12583] siw: device registration error -23 [ 176.341347][T12584] lo: entered promiscuous mode [ 176.346482][T12584] lo: entered allmulticast mode [ 176.356751][T12584] tunl0: entered promiscuous mode [ 176.356769][T12584] tunl0: entered allmulticast mode [ 176.403936][T12584] gre0: entered promiscuous mode [ 176.403959][T12584] gre0: entered allmulticast mode [ 176.405114][T12584] gretap0: entered promiscuous mode [ 176.405133][T12584] gretap0: entered allmulticast mode [ 176.406411][T12584] erspan0: entered promiscuous mode [ 176.406436][T12584] erspan0: entered allmulticast mode [ 176.407512][T12584] ip_vti0: entered promiscuous mode [ 176.407531][T12584] ip_vti0: entered allmulticast mode [ 176.408772][T12584] ip6_vti0: entered promiscuous mode [ 176.408790][T12584] ip6_vti0: entered allmulticast mode [ 176.410096][T12584] sit0: entered promiscuous mode [ 176.410110][T12584] sit0: entered allmulticast mode [ 176.411161][T12584] ip6tnl0: entered promiscuous mode [ 176.411179][T12584] ip6tnl0: entered allmulticast mode [ 176.462264][T12584] ip6gre0: entered promiscuous mode [ 176.522998][T12584] ip6gre0: entered allmulticast mode [ 176.524286][T12584] syz_tun: entered promiscuous mode [ 176.524307][T12584] syz_tun: entered allmulticast mode [ 176.525717][T12584] ip6gretap0: entered promiscuous mode [ 176.546378][T12584] ip6gretap0: entered allmulticast mode [ 176.603522][T12584] bridge0: entered promiscuous mode [ 176.603540][T12584] bridge0: entered allmulticast mode [ 176.605160][T12584] vcan0: entered promiscuous mode [ 176.605239][T12584] vcan0: entered allmulticast mode [ 176.606262][T12584] bond0: entered promiscuous mode [ 176.606307][T12584] bond_slave_0: entered promiscuous mode [ 176.606371][T12584] bond_slave_1: entered promiscuous mode [ 176.606479][T12584] bond0: entered allmulticast mode [ 176.606492][T12584] bond_slave_0: entered allmulticast mode [ 176.606508][T12584] bond_slave_1: entered allmulticast mode [ 176.612084][T12584] team0: entered promiscuous mode [ 176.612105][T12584] team_slave_0: entered promiscuous mode [ 176.612176][T12584] team_slave_1: entered promiscuous mode [ 176.612317][T12584] team0: entered allmulticast mode [ 176.612332][T12584] team_slave_0: entered allmulticast mode [ 176.612346][T12584] team_slave_1: entered allmulticast mode [ 176.622497][T12584] dummy0: entered promiscuous mode [ 176.622545][T12584] dummy0: entered allmulticast mode [ 176.623636][T12584] nlmon0: entered promiscuous mode [ 176.623721][T12584] nlmon0: entered allmulticast mode [ 176.630673][T12584] caif0: entered promiscuous mode [ 176.630707][T12584] caif0: entered allmulticast mode [ 176.630826][T12584] batadv0: entered promiscuous mode [ 176.630839][T12584] batadv0: entered allmulticast mode [ 176.636205][T12584] vxcan0: entered promiscuous mode [ 176.636228][T12584] vxcan0: entered allmulticast mode [ 176.638219][T12584] vxcan1: entered promiscuous mode [ 176.638238][T12584] vxcan1: entered allmulticast mode [ 176.642781][T12584] veth0: entered promiscuous mode [ 176.642866][T12584] veth0: entered allmulticast mode [ 176.645587][T12584] veth1: entered promiscuous mode [ 176.645637][T12584] veth1: entered allmulticast mode [ 176.648580][T12584] wg0: entered promiscuous mode [ 176.648669][T12584] wg0: entered allmulticast mode [ 176.651470][T12584] wg1: entered promiscuous mode [ 176.651485][T12584] wg1: entered allmulticast mode [ 176.655372][T12584] wg2: entered promiscuous mode [ 176.655392][T12584] wg2: entered allmulticast mode [ 176.659477][T12584] veth0_to_bridge: entered promiscuous mode [ 176.659497][T12584] veth0_to_bridge: entered allmulticast mode [ 176.667425][T12584] veth1_to_bridge: entered promiscuous mode [ 176.667498][T12584] veth1_to_bridge: entered allmulticast mode [ 176.675616][T12584] veth0_to_bond: entered promiscuous mode [ 176.675703][T12584] veth0_to_bond: entered allmulticast mode [ 176.681277][T12584] veth1_to_bond: entered promiscuous mode [ 176.681325][T12584] veth1_to_bond: entered allmulticast mode [ 176.689684][T12584] veth0_to_team: entered promiscuous mode [ 176.689723][T12584] veth0_to_team: entered allmulticast mode [ 176.717293][T12584] veth1_to_team: entered promiscuous mode [ 176.717317][T12584] veth1_to_team: entered allmulticast mode [ 176.728584][T12584] veth0_to_batadv: entered promiscuous mode [ 176.728626][T12584] veth0_to_batadv: entered allmulticast mode [ 176.732579][T12584] batadv_slave_0: entered promiscuous mode [ 176.732604][T12584] batadv_slave_0: entered allmulticast mode [ 176.743731][T12584] veth1_to_batadv: entered promiscuous mode [ 176.743784][T12584] veth1_to_batadv: entered allmulticast mode [ 176.744869][T12584] batadv_slave_1: entered promiscuous mode [ 176.744885][T12584] batadv_slave_1: entered allmulticast mode [ 176.757765][T12584] xfrm0: entered promiscuous mode [ 176.757787][T12584] xfrm0: entered allmulticast mode [ 176.758878][T12584] veth0_to_hsr: entered promiscuous mode [ 176.758896][T12584] veth0_to_hsr: entered allmulticast mode [ 176.760070][T12584] hsr_slave_0: entered allmulticast mode [ 176.761026][T12584] veth1_to_hsr: entered promiscuous mode [ 176.761043][T12584] veth1_to_hsr: entered allmulticast mode [ 176.767213][T12591] loop4: detected capacity change from 0 to 2048 [ 176.853268][T12584] hsr_slave_1: entered allmulticast mode [ 177.053853][T12591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.058914][T12584] hsr0: entered promiscuous mode [ 177.061215][T12591] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.066069][T12584] hsr0: entered allmulticast mode [ 177.152261][T12584] veth1_virt_wifi: entered promiscuous mode [ 177.152290][T12584] veth1_virt_wifi: entered allmulticast mode [ 177.153745][T12584] veth0_virt_wifi: entered promiscuous mode [ 177.170424][T12584] veth0_virt_wifi: entered allmulticast mode [ 177.192031][T12584] veth1_vlan: entered allmulticast mode [ 177.198518][T12599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3131: bg 0: block 345: padding at end of block bitmap is not set [ 177.202862][T12584] veth0_vlan: entered allmulticast mode [ 177.220643][T12584] vlan0: entered promiscuous mode [ 177.225885][T12584] vlan0: entered allmulticast mode [ 177.232631][T12584] vlan1: entered promiscuous mode [ 177.237764][T12584] vlan1: entered allmulticast mode [ 177.242807][T12599] EXT4-fs (loop4): Remounting filesystem read-only [ 177.244844][T12584] macvlan0: entered promiscuous mode [ 177.250893][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.255463][T12584] macvlan0: entered allmulticast mode [ 177.270681][ T422] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 177.301753][T12584] macvlan1: entered promiscuous mode [ 177.307282][T12584] macvlan1: entered allmulticast mode [ 177.315912][T12602] loop6: detected capacity change from 0 to 512 [ 177.335549][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.335953][T12584] ipvlan0: entered promiscuous mode [ 177.349908][T12584] ipvlan0: entered allmulticast mode [ 177.355452][T12584] ipvlan1: entered promiscuous mode [ 177.360870][T12584] ipvlan1: entered allmulticast mode [ 177.366350][T12584] veth1_macvtap: entered allmulticast mode [ 177.373645][T12602] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 177.386514][T12602] EXT4-fs (loop6): 1 truncate cleaned up [ 177.393229][T12602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.406458][T12584] veth0_macvtap: entered allmulticast mode [ 177.413825][T12584] macvtap0: entered promiscuous mode [ 177.419363][T12584] macvtap0: entered allmulticast mode [ 177.441489][ T5760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.452630][T12584] macsec0: entered promiscuous mode [ 177.458043][T12584] macsec0: entered allmulticast mode [ 177.467247][T12584] geneve0: entered promiscuous mode [ 177.472548][T12584] geneve0: entered allmulticast mode [ 177.479597][T12584] geneve1: entered promiscuous mode [ 177.485016][T12584] geneve1: entered allmulticast mode [ 177.492394][T12584] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 177.499743][T12584] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 177.509612][T12584] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 177.517142][T12584] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 177.527069][T12584] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 177.534478][T12584] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 177.543438][T12609] __nla_validate_parse: 14 callbacks suppressed [ 177.543455][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3135'. [ 177.559967][T12584] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 177.567644][T12584] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 177.575436][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3136'. [ 177.608302][T12598] lo speed is unknown, defaulting to 1000 [ 177.638761][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3137'. [ 177.665321][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3137'. [ 177.761923][T12620] loop4: detected capacity change from 0 to 1024 [ 177.799652][T12620] EXT4-fs: Ignoring removed bh option [ 177.813668][T12620] EXT4-fs: inline encryption not supported [ 177.820121][T12620] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 177.841144][T12620] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 177.851811][T12620] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.3140: lblock 2 mapped to illegal pblock 2 (length 1) [ 177.869212][T12620] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.3140: lblock 0 mapped to illegal pblock 48 (length 1) [ 177.893613][T12620] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3140: Failed to acquire dquot type 0 [ 177.908275][T12620] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 177.922362][T12620] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3140: mark_inode_dirty error [ 177.934229][T12620] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 177.945130][T12620] EXT4-fs (loop4): 1 orphan inode deleted [ 177.951610][T12620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.964421][ T6907] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 178.002361][ T6907] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:13: Failed to release dquot type 0 [ 178.025355][T12620] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 178.056212][ T6792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.066128][T12637] loop2: detected capacity change from 0 to 2048 [ 178.105515][T12639] netlink: 'syz.4.3147': attribute type 32 has an invalid length. [ 178.105710][T12637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.132790][T12637] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.193646][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3151'. [ 178.209887][T12651] netlink: 'syz.9.3153': attribute type 10 has an invalid length. [ 178.214201][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3152'. [ 178.218220][T12651] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3153'. [ 178.234554][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3151'. [ 178.255038][T12654] ================================================================== [ 178.263170][T12654] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 178.270414][T12654] [ 178.272770][T12654] read-write to 0xffff888106ea2470 of 8 bytes by task 12637 on cpu 0: [ 178.280982][T12654] __xa_set_mark+0xd2/0x1a0 [ 178.285532][T12654] __folio_mark_dirty+0x384/0x4a0 [ 178.290604][T12654] mark_buffer_dirty+0x11e/0x210 [ 178.295575][T12654] folio_zero_new_buffers+0x28c/0x2e0 [ 178.300994][T12654] block_write_end+0x200/0x210 [ 178.305816][T12654] ext4_da_write_end+0x1d3/0x800 [ 178.310816][T12654] generic_perform_write+0x30f/0x490 [ 178.316290][T12654] ext4_buffered_write_iter+0x1ee/0x3c0 [ 178.321910][T12654] ext4_file_write_iter+0x387/0xf60 [ 178.327257][T12654] vfs_write+0x527/0x960 [ 178.331535][T12654] ksys_write+0xda/0x1a0 [ 178.335821][T12654] __x64_sys_write+0x40/0x50 [ 178.340598][T12654] x64_sys_call+0x2802/0x3000 [ 178.345348][T12654] do_syscall_64+0xd2/0x200 [ 178.349900][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.355850][T12654] [ 178.358196][T12654] read to 0xffff888106ea2470 of 8 bytes by task 12654 on cpu 1: [ 178.366028][T12654] xas_find_marked+0x218/0x620 [ 178.371023][T12654] find_get_entry+0x5d/0x380 [ 178.375754][T12654] filemap_get_folios_tag+0x13b/0x210 [ 178.381172][T12654] mpage_prepare_extent_to_map+0x320/0xc00 [ 178.387066][T12654] ext4_do_writepages+0xa05/0x2750 [ 178.392271][T12654] ext4_writepages+0x176/0x300 [ 178.397156][T12654] do_writepages+0x1c6/0x310 [ 178.401798][T12654] __filemap_fdatawrite_range+0xfb/0x140 [ 178.407493][T12654] generic_fadvise+0x312/0x430 [ 178.412329][T12654] __x64_sys_fadvise64+0xcb/0x110 [ 178.417497][T12654] x64_sys_call+0x29c5/0x3000 [ 178.422296][T12654] do_syscall_64+0xd2/0x200 [ 178.426840][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.432771][T12654] [ 178.433792][T12653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3152'. [ 178.435157][T12654] value changed: 0x0000ffffffffffff -> 0x0007ffffffffffff [ 178.451311][T12654] [ 178.453653][T12654] Reported by Kernel Concurrency Sanitizer on: [ 178.459845][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.2.3145 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.471256][T12654] Tainted: [W]=WARN [ 178.475095][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.485301][T12654] ================================================================== [ 178.503806][T12654] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3145: bg 0: block 345: padding at end of block bitmap is not set [ 178.521773][T12654] EXT4-fs (loop2): Remounting filesystem read-only [ 178.528415][ T3915] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 178.625770][T12229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.