last executing test programs: 9m30.562449475s ago: executing program 4 (id=177): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 9m30.471897184s ago: executing program 4 (id=179): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x20, 0x0, [{0x0, 0x8, "5e000000ff00"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r5}]}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000004c0)={[{@noblock_validity}, {}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@norecovery}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x4}}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}], [{@euid_gt={'euid>', r5}}]}, 0x2, 0x584, &(0x7f00000008c0)="$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") r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd000000100001000b0808004149004001040800", 0x58}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r10}, 0x18) chroot(&(0x7f0000000000)='./file0/../file0\x00') sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000440)={r9}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000340)={r11, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x7a2c, @empty, 0xc}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r9, 0xcc}, &(0x7f0000000080)=0x8) 9m29.586360934s ago: executing program 4 (id=192): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000002000000020000130400000004000000080000000e000000020000000c00000000008001005f2e612e"], 0x0, 0x42, 0x0, 0x1}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x40001}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41, 0xfffffffd}}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r5) sendmsg$NFC_CMD_LLC_SDREQ(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf25130000000400138008000100ac"], 0x20}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r8}, 0x18) r9 = memfd_secret(0x80000) fcntl$setlease(r9, 0x400, 0x0) close(r9) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') readv(r10, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000380)={[{@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}, {@init_itable}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") 9m29.472066516s ago: executing program 4 (id=196): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x1c9042, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) writev(r2, &(0x7f0000001500)=[{&(0x7f0000001080)="0284d2b06688137cb6", 0x9}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r1, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f0000001080)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1d, 0x21, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000057000000185500000e0000000000000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000001040)='syzkaller\x00', 0x6, 0xc0, &(0x7f0000001300)=""/192, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001900)=[r4, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001940)=[{0x0, 0x5, 0x8, 0xa}], 0x10, 0x6f23}, 0x94) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x7ff, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300000000000d850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) 9m29.241963269s ago: executing program 4 (id=199): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x1, 0xe, 0x20, @private2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1, 0x7, 0x6, 0x3}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x3, [@const={0x10}, @union={0x8, 0x5, 0x0, 0x5, 0x1, 0x1, [{0x5, 0x3, 0x10001}, {0x0, 0x5}, {0x7, 0x5, 0x7ff}, {0xf, 0x3, 0x1}, {0xa, 0x5, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f00000008c0)=""/239, 0x6f, 0xef, 0x1, 0x0, 0x10000}, 0x28) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r2, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400"], 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xcd, 0xfa, 0x8, 0x52, @dev={0xfe, 0x80, '\x00', 0x26}, @empty, 0x7, 0x7800, 0x10000, 0x8}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x108, 0x108, 0x7, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x40, 0x1}, {0xe, 0x4}, {0xf, 0x3}, {0x9, 0x5}, {0x10, 0x4}, {0xe, 0x5}, {0x6, 0x1}, {0x6, 0x1}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x2}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @func={0x6, 0x0, 0x0, 0xc, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x2}, @enum64={0xe, 0x6, 0x0, 0x13, 0x0, 0x8, [{0xa, 0xe1, 0x6}, {0x10, 0x8001}, {0xc, 0x75, 0xa}, {0xf, 0x0, 0x5}, {0x8, 0x400, 0x2}, {0x4, 0x10000, 0xe0e}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x0, 0x5f]}}, &(0x7f0000000580)=""/132, 0x127, 0x84, 0x0, 0x1000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9ed8, 0x0, r3, 0x3ff, '\x00', r5, r6, 0x0, 0x5, 0x2}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x13, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 9m28.724866791s ago: executing program 4 (id=202): syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x2, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xe1, 0x2, 0xae}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x9a, 0x0, 0x20, 0x4}, 0xf4, &(0x7f0000000100)={0x5, 0xf, 0xf4, 0x2, [@generic={0xe8, 0x10, 0x2, "90fb38af31b3167e7b406a51199701dfce4b1e23704eec858829d975b2867f09b3a064a2129383a3d2d0982bd46f3326780fa304dd403aad7372980ec1277e64d7226000eda8b9af37754d6012b6795e664212129836eab67aa9e81d4804d07680d5f776f8025f914f10426e1aa3f9080ade8010417e609d8a7fdfe1a96877778364ee23ca4a5bd2f7dabeec502e0c60cfcf62b474ac6fe020374d5211bb44678817991aff187950583c3cfddd91a2eb6f8811adf4b897adff4ce4649d8337207c72ebdadc248466f8980cb8b34c1dfb40833ac51657da7597c01332c3d2d4efba5717e11f"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x1, 0x7070}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40e}}, {0x9, &(0x7f0000000240)=@string={0x9, 0x3, "791dd6991b7fd7"}}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x145) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x20, 0x4008, 0xb, 0x2, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 9m28.648064729s ago: executing program 32 (id=202): syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x1, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x2, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0xe1, 0x2, 0xae}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x9a, 0x0, 0x20, 0x4}, 0xf4, &(0x7f0000000100)={0x5, 0xf, 0xf4, 0x2, [@generic={0xe8, 0x10, 0x2, "90fb38af31b3167e7b406a51199701dfce4b1e23704eec858829d975b2867f09b3a064a2129383a3d2d0982bd46f3326780fa304dd403aad7372980ec1277e64d7226000eda8b9af37754d6012b6795e664212129836eab67aa9e81d4804d07680d5f776f8025f914f10426e1aa3f9080ade8010417e609d8a7fdfe1a96877778364ee23ca4a5bd2f7dabeec502e0c60cfcf62b474ac6fe020374d5211bb44678817991aff187950583c3cfddd91a2eb6f8811adf4b897adff4ce4649d8337207c72ebdadc248466f8980cb8b34c1dfb40833ac51657da7597c01332c3d2d4efba5717e11f"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x1, 0x7070}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40e}}, {0x9, &(0x7f0000000240)=@string={0x9, 0x3, "791dd6991b7fd7"}}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@block_validity}, {@minixdf}, {@noblock_validity}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$eJzs3M1vFOUfAPDvTLctLz9+rYgvIEgVjcSXlpYXOXjRaMJBExM9YDzVtpDKQg2tiRCi1QMeDYl3439hPOnFqBdNvOrdkBDDBdTLmtmZKUvZLVu67QL7+STTPs/M0z7Pd2ae2Wfm2d0AetZI9iOJ+F9E/B4RQ3n25gIj+a/rVy9M/X31wlQStdpbfyX1cteuXpgqi5Z/tzXP1GpFfrBJvRffjZisVmfOFvmxhdMfjM2fO//C7OnJkzMnZ85MHD166OCegSMThzsSZxbXtV0fz+3eeeydS29MHb/03k9JJfK4Y1kcnTKS792mnu50ZV22rSFd37FL9v5yI93sTKCb+iIiO1z99f4/FH2xeWnbULz2WVcbB6yrWq1WW+GqvFgD7mNJdLsFQHcUtwD1+99y2cDhR9ddeTm/Acrivl4s+ZZKpHlib/+y+9tOGomI44v/fJUtsU7PIQAAGn2XjX+ebzb+S+PhPDGQ/fh/MYcyHBEPRMT2iHgwInZExEMR9bKPRMSjq6x/+QzJreOf9PIdB9eGbPz3UjG3dfP4Ly2LDPcVuW31+PuTE7PVmQPFPtkf/YMnZpOZ8RXq+P7V375ota1x/JctWf3lWLBox+XK4Kab/mZ6cmFyTUE3uPJpxK5Ks/iTKKdxkojYGRG77rCO2WcrLbfdPv4VtP63bat9HfFMfvwXY1n8paTl/OT4i0cmDo9tiurMgbHyrLjVz79efLNV/WuKvwOy47+l6fm/FP9wsili/tz5U/X52vnV13Hxj89b3tO0d/4vZY5tK87/geTt+oqBYsNHkwsLZ8cjBpLXb10/ceO/lfmyfBb//n3N+//2uLEnHouI3RGxJyIez24Ki7Y/ERFPRsS+FeL/8ZWn3l99/BszV5rFP3274x+Nx3/1ib5TP3x7+/iza1yr43+ontpfrGnn+tduA9ey7wAAAOBekdbfA5+ko0mlSKfp6Gj+Hv4dsSWtzs0vPHdi7sMz0/l75YejPy2fdA01PA8dL54Nl/mJZfmDxXPjL/s21/OjU3PV6W4HDz1ua9n/l64Fef/P/NnX7dYB664D82jAPUr/h96l/0NvSvR/6Gn6P/SuZv3/k5alR79Z18YAG8rrP/SuNvr/Yv6r9agAuDd5/Yfepf9DT2r52fh0TR/53/DEv8X3Gd4t7bn/E5HeFc24/xOVtr/MYhWJ2lDe/7M1g03LdPvKBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bn/BQAA///T8uXN") seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, 0x0, 0x145) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x20, 0x4008, 0xb, 0x2, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') getdents64(r0, &(0x7f0000001f00)=""/4111, 0x100f) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 9m19.892358528s ago: executing program 1 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x18, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000220", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8080) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x1, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x2000, &(0x7f00000000c0)={&(0x7f0000004880)={0x24, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x8c}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}]}]}, 0x24}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYBLOB="f67673dd66e342a38d58144941a7d6714a5706"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x700, 0x700, 0x3, 0x8, {{0x27, 0x4, 0x1, 0x3, 0x9c, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @remote, {[@rr={0x7, 0x23, 0xd7, [@remote, @broadcast, @local, @loopback, @multicast1, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @remote]}, @timestamp_addr={0x44, 0xc, 0x4b, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x1}]}, @cipso={0x86, 0x46, 0x3, [{0x5, 0xf, "4d1657ebfb600e906356a032fb"}, {0x0, 0xb, "17bfdd86f1656a0807"}, {0x7, 0xf, "57e11ea400e69e6908c43d8939"}, {0x1, 0x10, "e5bb95dda4f0bb7417eccfbe1bbd"}, {0x2, 0x7, "209f53f750"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x2f, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x8, 0x2, 0x0, r5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x44, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xf, 0x62, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000600)=[r5, r9, r10, r5, r5, r5], &(0x7f0000000740)=[{0x5, 0x4, 0x2, 0x6}, {0x4, 0x4, 0x4, 0x7}, {0x4, 0x4, 0x4, 0x8}, {0x4, 0x1, 0x4, 0x9}, {0x5, 0x2, 0xd, 0x8}], 0x10, 0x2}, 0x94) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) 9m19.732087845s ago: executing program 1 (id=291): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x0) 9m19.665199941s ago: executing program 1 (id=292): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e21600669f10961d237a00", @ANYRES16=r4, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000800000000000800020001000000"], 0x2c}}, 0x8000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000001ac0)={0x0, 0xfffffffffffffe4a, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 9m19.559382982s ago: executing program 1 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='tracefs\x00', 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000480)={0x0, 0x0, {0x3, 0x3, 0xffffffff, 0x3, 0x8}, 0x5}) 9m18.524807127s ago: executing program 1 (id=296): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a9", 0xae}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="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", 0x1e3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99aea4", 0x2c}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18de", 0x7e}, {&(0x7f0000000380)="ba78a730565fdeecaa98beb39bb0a1e4a46f0808ce0b5b03542d54303591031ad9f9073b1dff296b9df9eca8a08c6bf80659214737633acdcd8a7f2cfbeeaf58ac4f24a24f362b8356f278b8bd35ea4252eaa3cd4d77c9732606a6ef391938556550996483853a6837", 0x69}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957ba5e2bc45ca7d4f548d3047668babc1aa77359561ad300aa22747c2c20e931f550338780b4ea9c94cebf4782a806c6597cd580c33aa71e2da2e50bdfa67c555d8d5634e4a3e713031b6f8301a9faca9289841978f0ce2dd429d0909ae0111", 0x84}, {&(0x7f0000000880)="e11b12d8e463a0b8dd59326154501ecf0819f23ca714", 0x16}], 0x5}}], 0x3, 0x54004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x4102) 9m18.308972399s ago: executing program 1 (id=300): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006321010027bd7000fcdbdf250800450073727000ee45660f380a78c8d6384f4dd70a6c080ef67417d8e9133c743b558269bcb7b3c0a699a475387f78c9fa6e82be427bb9ac8048398967c317069c5bec833655f61e5723d069"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00']) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b000100627269646765000004000280efff0a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) 9m18.30137939s ago: executing program 33 (id=300): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r4, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000006321010027bd7000fcdbdf250800450073727000ee45660f380a78c8d6384f4dd70a6c080ef67417d8e9133c743b558269bcb7b3c0a699a475387f78c9fa6e82be427bb9ac8048398967c317069c5bec833655f61e5723d069"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000840), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000800), 0x2000022, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',ignoreqv,debrg=0x0000000000000007,pcr=00000000000000000011,smackfsroot=,fcname=-%#@}!&+,dont_appraise,permit_directio,fscontext=root,\x00']) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x0, 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b000100627269646765000004000280efff0a00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) 8m50.777940094s ago: executing program 3 (id=677): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "7cff0000080094cf", '\x00', ']G\x00', "5e33931677e0f2d7"}, 0x28) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r3, 0x0, 0x200000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000600)={0x9, 0x3, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x60b74000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb8"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x9, 0x6, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x700, 0x7800, 0x7, 0x8}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="0a00000010000000", @ANYRES32=r3, @ANYBLOB="de34f767879d1dbc999d243b65e6", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x6, 0x6f76, 0x7, 0xbb92, 0x1, 0x8, 0x7f, 0x3}) 8m50.682007184s ago: executing program 3 (id=679): msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) 8m50.604855862s ago: executing program 3 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) sendto$inet6(r5, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r5) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000f77600000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000818cec9000000000000200000004"], 0xfc}}, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x12, &(0x7f0000000000), 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x3f, 0x0, 0x78d1, r8, 0x0, 0x0, 0x0, 0x0, 0x2, r8}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="183a000c0500000000000000000000008500000053000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc8, &(0x7f00000007c0)=""/200, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x10, 0x10001, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, 0xffffffffffffffff, r1, r2, r1, r1]}, 0x94) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001004000000000000000fc020000000000000000000000fdff01fe8000000000f054f79700000000003a000000004e2100000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000306010400000000000000000700000205000100070000008c13e827f54f3dba4e598fddf68e86a2c9d7cae2ebfc7cc16bb9249971358168dbd5c2ec84c806c0ab4ae9963125d655abf41abbef5907a90000d391d90f5f41ea5a34"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 8m49.976087596s ago: executing program 3 (id=683): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0x6, {0x0, 0xfa}, 0x5, 0xd0aa}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socket$xdp(0x2c, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x368, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x3, &(0x7f0000000340)) r8 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x20000, 0x2, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000e00)=0x0) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) 8m48.579638078s ago: executing program 3 (id=691): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001a00010000000000080000000200000000000000000000000c0009000b000107", @ANYRES32=0x0, @ANYBLOB="3c71611034ee0ce6a6b4f68f1490b38b3f138f83e58298e02c7d3b87e9b55cc67c5c4cb406f6a73a4775d7b87e9e7ec40f4f411ac494923d43a081a267bf43281c68e99062f1cd102faea047187ab26f44870fee01807b914221d98589fc67c9b61113cbd1e66de578e528809f8e3bfc9149f29eba55c9141f5251a0e3e2a63cf4aea72198b2354c07743591577eb1aae647c3c5d4f15126e1e0b4a7e377f6d728551889"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, r6, 0x92466e9f5370a8b3, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x200}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000200)={0x1d, r0, 0x1, {0x0, 0x1, 0x3}, 0x2}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000ed0001050000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0000000100000000000000000000001fc47fed00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r13}, 0x10) splice(r7, 0x0, r11, 0x0, 0x7ff, 0x0) splice(r10, 0x0, r9, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x20008810) 8m47.684961428s ago: executing program 3 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @private}, &(0x7f0000000040)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x4004743c, 0xf0ff1f00000000) 8m47.684614129s ago: executing program 34 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x200000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @private}, &(0x7f0000000040)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r2, 0x4004743c, 0xf0ff1f00000000) 37.436972305s ago: executing program 5 (id=7547): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 37.335220215s ago: executing program 5 (id=7549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="cf"], 0x4c}}, 0x20048051) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, 0x0) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x1000, 0xba, &(0x7f0000000a00)="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", &(0x7f0000000340)=""/186, 0x5, 0x0, 0x2e, 0x21, &(0x7f0000000180)="9d246e917ff4f93559bba27cf6157c30316a41302dcd45ecc2c94b260368725b25245474f39735658e97fe93a41d", &(0x7f0000000200)="b3e5d65ef8b25cf35074b1c9bf3b1d2b5a8e643d70a91593be3b3cc101c9d42de3", 0x5, 0x0, 0x8}, 0x50) ptrace$cont(0x21, r2, 0x80000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") io_uring_enter(r3, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 37.288515199s ago: executing program 5 (id=7551): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYRES32=r0], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x90b4, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x1, 0x0, 0x5, 0x30, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xa, 0x8, 0x2}, 0x10, 0x19622, r1, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000200)=[{0x4, 0x5, 0xf, 0x1}], 0x10, 0x83}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x198, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7faf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x64}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ad65e2a0e5cb981144d97ac345591b2eb6605f2f6526daa3023ab5c97a1bc546b0"}}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f10}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x8040) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0xfffffffa, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a00)={r5, &(0x7f0000000980)="cc31b01fcd3d271b84b475a8601803c765", &(0x7f00000009c0)=@udp, 0x2}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000100000a00"/20], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 36.973615551s ago: executing program 5 (id=7559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x8, &(0x7f0000000340)=0x0) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) 36.813963217s ago: executing program 5 (id=7560): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) 32.608230744s ago: executing program 5 (id=7597): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "7cff0000080094cf", '\x00', ']G\x00', "5e33931677e0f2d7"}, 0x28) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r3, 0x0, 0x200000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000600)={0x9, 0x3, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb8"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x9, 0x6, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x700, 0x7800, 0x7, 0x8}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="de34f767879d1dbc999d243b65e6", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x6, 0x6f76, 0x7, 0xbb92, 0x1, 0x8, 0x7f, 0x3}) 32.567096948s ago: executing program 35 (id=7597): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "7cff0000080094cf", '\x00', ']G\x00', "5e33931677e0f2d7"}, 0x28) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r3, 0x0, 0x200000}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000600)={0x9, 0x3, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb8"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x9, 0x6, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x700, 0x7800, 0x7, 0x8}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="de34f767879d1dbc999d243b65e6", @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0x6, 0x6f76, 0x7, 0xbb92, 0x1, 0x8, 0x7f, 0x3}) 18.035357982s ago: executing program 8 (id=7704): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40408, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000800)="e8e0e07cf66e383779f33474b41b6be4", 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a00000004001d"], 0x38}}, 0x40000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f000007", @ANYRES64=r0, @ANYRESOCT=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='console\x00', r5}, 0x18) syz_usbip_server_init(0x5) r6 = syz_io_uring_setup(0x117b, &(0x7f0000000340)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0xffffffffffffffed, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0, 0x0, 0x4}, {0x0}]}, 0x4}, 0x1) r9 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r9, 0x0, 0x0, 0x0, 0x20044081, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x70) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r11, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) close_range(r10, r11, 0x0) io_uring_enter(r6, 0x2762, 0x0, 0x43, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x8}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) writev(0xffffffffffffffff, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x3}, 0x4) write$binfmt_misc(r0, &(0x7f0000000280)="2380ccd6c62b4eaab3a7cb8a587b9d0f9a56b0e5f30e6b8f39e45899f1ed0f778c83f1713a32950f5c095a55a3e99daadd105d9ba11795df00f04b919abb95a433a6fdefba1928e50b2557a098a580201d8b4784c308ab9a8d53b816f000175813d5a6ce903da63571d815dead2dbcdd67f8d8bc27c8944ae8ad99be9c3e25a7903da556db68a063e83cb298b2ceb9a9f5c8d3b128022cb3924ae96afe7e", 0x9e) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x3}, 0x4) 17.180986128s ago: executing program 8 (id=7711): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) 17.026812354s ago: executing program 8 (id=7712): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf593}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = memfd_secret(0x80000) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 16.990897897s ago: executing program 8 (id=7714): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioprio_set$pid(0x2, 0x0, 0x4007) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b40)={[{@nogrpid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@barrier}, {@bh}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") fchownat(r5, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) close_range(r8, r9, 0x0) syz_clone(0x40800000, &(0x7f00000000c0)="6fb6678e6b05fee79c132981d6b633123ecde4571b7356fa6abdd5", 0x1b, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="f779a0d258ac8f96bc8488a1462f5e5a34692d0d9b9650bec457f6d8dcb4517f797a4b8a7fd2402f45675ad7eaa5ad7285c9bcd075c1ca20dd49cdf9f846547d845026b2894031751f93415c50c90f46a931f0595e89aebf5e4c") keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010004000000010000000900faec3c000380140002007663616e30000000000000000000000008000300000000000800010001000000140006"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 16.728336614s ago: executing program 8 (id=7716): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/cpu_byteorder', 0x0, 0x18) read$char_usb(r0, &(0x7f0000000100)=""/174, 0xae) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000240)={'netdevsim0\x00', 0x7}) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x84, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x280000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) setresuid(0x0, 0xee00, 0xffffffffffffffff) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffd8a, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.432618394s ago: executing program 8 (id=7724): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) 16.432256044s ago: executing program 36 (id=7724): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) 4.953461528s ago: executing program 7 (id=7826): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf9a0, 0x7}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2, 0x0, 0x7fffdfff}, 0x18) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r4, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, 0x0) tkill(r3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read$qrtrtun(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 3.703138445s ago: executing program 7 (id=7839): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf9a0, 0x7}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4, 0x0, 0x7fffdfff}, 0x18) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r6, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r5, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x4b8, &(0x7f0000000140)={0x0, 0x77be, 0x80, 0x5, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) read$qrtrtun(r7, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 3.477511308s ago: executing program 2 (id=7843): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000099010000000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000080)='./file0\x00', r3}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x2, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r6 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r5, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRESDEC=r9]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000d80)=ANY=[@ANYRESOCT, @ANYBLOB="a22d14e35ba4c33d5eeef77180b73ccf883d7a4f7c479d4fde92b363aacf585a04bc34cf9080a65b8b818b7953643d18d73755ba778a54b3caae7645bfddfc4d240b", @ANYRES32, @ANYRESHEX=r4], &(0x7f00000002c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 3.325936983s ago: executing program 2 (id=7847): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x280000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$eJzs3V1vG1kdx/HfOE7iZNFqBahUVR9OW1ZKRXHHzjZVVCTWjMfJgO2xZhyUSEirsk1WVZ0utEWiuVlyw4O0vAHuuOGCF4HE9b4LbhBIK7hD4mbQPDl2/dRs3XSXfj/Rrscz/znnP3Nc/zWJ51gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECWU7ftiqWm197ZNZM59cBvTdmetraoG+nCjZn9Slb8n0olnU9Xnf/myeZz8f+u6WL67KJK8UNJR2+de+fuN4qFfP8pCX0ROm2DT54dPbzX6+0/foHYBZ26+ddJhXxpJRuTMUFbbtsLfa9V23KNF/pmc2PDvrXdCE3Da7rhXth1W8YJ3ELXD8yac8NUNjfXjVve83faW/Va081X3vlu1bY3zA+X04GWVA6dba/Z9NpbSUy8OY65Yz79SRrg1lrGHDzo7a/POpI4qPIiQdVZQVW7Wq1UqtXKxu3N23dsuziywo5Zdp9GIub+osVXzHzeuIE5KMT1/2+W1FRJbe1oV2bsj6O6AvlqTdieyev/u7fcqf0O1v+8yp+Xvp9tvqCk/l9On12eVP8n5GJkkh3GbbEmrD/dz2KSkdETPdORHuqeeuppX4/n0LaRuTKXVs7gZ0uu2vIUypenlmrJGpOtMdrUhjZk6wNtq6FQRg15aspVqD2F6spNXlGOArmqqStfgYzW5OiGjCra1KbWZeSqrD352lFbW6qrpv9EUXSgB8l5X5+So/KgyoSA5cGg6pSWJtX/n36Svk6z+m9T/99U6etgOX34bFoM8CUQZdf/gwqzd7vy6jICAAAAAADzZiW/fbeSv91fkhSp4TVd+3WnBQAAAAAA5shStKyLsuLrf0mXZHH9DwAAAADA/xsrucfOkrSafKjfOrkT6kV+CbBwBikCAAAAAICXlNz5f3lJipJJK67IOtX1PwAAAAAA+Ar47cAc+8V8jt0o/7N+QVLYWbb+8q9lBYvWcWf329ZhLd5SO8xiRj4B0G1csN7OJupNHpYkJc8c96KV9ZZNgtmfd/Dzg1lz/VvBcwksLQw2MCEBK+55o5g906e6mu5yNZtn/v5RQcmWtJfVhtd0y47fvFtRrfZ2oevudn/x6MEvpaB/nAcPevvlDz/u3U9yOY5XHR/GjX4ylE5h/Mk4yeVpMt9Ccs/FuCNeUSPv8nft1qqV9Gvnx7+g2mFhsKNpA3DS5691LR2za6tp7OpRf8b9+PhL8fFXysmQDR19sGidZFF5/sjHDcSELEpJFtfTmOtr11X9e7rcH4WCVfrOglQtj47BUBbVwSxmnwvr3yPnYiCL5CHfMnAu1uMs/ho3NCGL9dNlMTIiAPC6HOiSknehS0omMe9XoVJWd/PykL+pfaG6M7u6vz9c3Z/+IYqSHRakYva3iam9lBS/o69ZSR1aSg+peGHMO7qd1ZWSJryj2y9R3eK+/nzyHUhZ2iNZ/DeKoruVpN/fP1dV/zjU3Ui/YbO6EJ/CW08Pf5ZMgB/7aP+j/UfV6vqG/Z5t365qMTmM7GFB1B4AwIjZ37EzM8J6T1fTiKv3//luujRU8b7e/0hBWR/qY/V0XzfzrxC4Mr7V1YGPIdxMr1o1cNVqzr1zN/leuuHYim5OvKpLaulAbLUfu6h8l+FKfRK7/opHAQCAs3VtRh0eX/9LQ/X/ptbSiLULY6+7h2t5dnXcv6SfFFuZnfz78z4bAAC8Gdzgc2u1+xsrCLzOB5XNzUqtu+2awHd+ZAKvvuUar911A2e71t5yTSfwu77jN00n0LJXd0MT7nQ6ftA1DT8wHT/0dpNvfjfZV7+HbqvW7npO2Gm6tdA1jt/u1pyuqXuhYzo7P2h64bYbJDuHHdfxGp5T63p+24T+TuC4ZWNC1x0I9Opuu+s1vHixbTqB16oFe+bHfnOn5Zq6GzqB1+n6aYN5X1674QetpNlyMRr3eQEAAN44T54dPbzX6+0/fn5hJb40T9cca0LM6MKSnjyLr8rjNcVsE3MEAQDwJXNSwE+xU+kVJgQAAAAAAAAAAAAAAAAAAAAAAEbMvqXvlAuL424WlPprfv52tka/0skthiPtWFqcc2KnWSicdq/8loijh59NCV7JF/IZBzUYc3xmB/iPr0lvJWv0+Fu77YM4k3n3tTJlcF/FwvcO0jM6MSbeOHbTcn8sivP/5xAvPPrThE1RFEXTd18ePodL0w5weKEYj+nSSwzBmb8VAThj/wsAAP//EHYw2w==") socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 2.555048611s ago: executing program 7 (id=7855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nombcache}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 2.496695837s ago: executing program 0 (id=7857): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) move_mount(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000280)='./bus\x00', 0x300) sendfile(r1, r0, 0x0, 0x7ffff000) 2.446930772s ago: executing program 2 (id=7858): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000099010000000000"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000080)='./file0\x00', r3}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x2, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$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") r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r6 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r5, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r6, 0x4d10, 0x2, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRESDEC=r9]) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000d80)=ANY=[@ANYRESOCT, @ANYBLOB="a22d14e35ba4c33d5eeef77180b73ccf883d7a4f7c479d4fde92b363aacf585a04bc34cf9080a65b8b818b7953643d18d73755ba778a54b3caae7645bfddfc4d240b", @ANYRES32, @ANYRESHEX=r4], &(0x7f00000002c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 2.407798546s ago: executing program 7 (id=7859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf593}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 2.259291521s ago: executing program 7 (id=7861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600000000000800050000000300"], 0xd0}}, 0x0) epoll_create1(0x0) 2.113665016s ago: executing program 7 (id=7862): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0xffd7, 0x25, 0x1, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xf0}, 0x510d, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000080)={[{@quota}, {@nogrpid}, {@nombcache}, {@nobh}]}, 0x1, 0x519, &(0x7f0000000780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r8, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r9, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 2.056228822s ago: executing program 2 (id=7864): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf9a0, 0x7}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2, 0x0, 0x7fffdfff}, 0x18) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r4, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read$qrtrtun(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 1.840787084s ago: executing program 9 (id=7866): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="10000000040000000400000006"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001000"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000009d8e0020000000000000c784a8bf3cfc600e9db6f1d0719d1dbe864dafe8f946241f761afbcaa2e505f475e6eea58dda5fb39321e1805b31a216d09690496fda4cc81e9dfb693a71ddd06758924bc9bcdcf67e03c12282e859a90d9e79c49d79d154f0497e156f09e95834ac265adecc85ff1aa4d8ffc77bc16f4a145a4d46f1a66a8da868703edb2112c5aa2d5feb13aae0d9370ced4961d2d2cdbf850542d79c733b2d34", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 1.68044s ago: executing program 9 (id=7867): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (fail_nth: 2) 1.611575367s ago: executing program 0 (id=7868): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180100180000000000000010000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000100000000000000ff010000000000000000000600000001ff020000000000000000000000000001030006000000000002000000ffffffff000000000000000008001900000000000a"], 0xc0}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0/file0\x00', 0x100008a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio}, {@stripe={'stripe', 0x3d, 0xf9}}, {@nodiscard}, {@sb={'sb', 0x3d, 0xd98}}, {@noinit_itable}]}, 0x1, 0x47d, &(0x7f0000000440)="$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") ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000002840)=""/4103, 0x1007) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000001000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x2902b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r5, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) 1.593304359s ago: executing program 6 (id=7869): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x280000, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES32, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b744912af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x69d, &(0x7f0000001c00)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.472765271s ago: executing program 0 (id=7870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nombcache}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x5, 0x5, 0x7f}) 1.38324091s ago: executing program 9 (id=7871): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf9a0, 0x7}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = syz_io_uring_setup(0x4b8, &(0x7f0000000140)={0x0, 0x77be, 0x80, 0x5, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) read$qrtrtun(r2, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 1.183024281s ago: executing program 2 (id=7872): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000600)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x400, @multicast2}}}, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) unshare(0x20060400) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/user\x00') ioctl$NS_GET_PARENT(r5, 0x8004b708, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000300003040005060004fffe0000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280080012000900000008001e0000000000b8ff110006000000", @ANYRES16=r3, @ANYRESHEX=r4], 0x54}, 0x1, 0x2000000000000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x41, 0x79a2, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, 0x700, 0x40, 0x1, 0xc8a}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="02"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r9}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x210000, &(0x7f00000003c0)={[], [{@flag='ro'}]}, 0xfd, 0x580, &(0x7f0000000bc0)="$eJzs3V9rW+UfAPDvSdv9636/djCGeiGDXTgZS9fWPxOEzUvR6UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZelSZPV1MTl84GzPU/OSZ7nyXO+5zzPOUkTwNA6nv6Ti3gxIr5MIiYa1o1GtvL45nbrj2/OpUsSGxsf/ZbEuabXSrL/x7PMCxHx0+cRp3Lby62sri0WSqXicpafqi5dm6qsrp2+slRYKC4Ur87Mzp59fXbmrTff6FlbX734xzcf3n/37Bcn1r/+4eGRu0mcj8PZurRdPSjiVmPmeOGvLDUW55s2nO5BYYMk6XcF2JWRLM7HIj0GTMRIFvXA8++ziNgAhlQi/mFI1ccB9bl9j+bB/xmP3tmcAG1v/+jmtZE4UJsbHVpPnpoZpfPdyR6Un5bx46/37qZL7Hwd4mCHPMAzuXU7Is6Mjm4//iXZ8W/3zkR80Om6YHMZw3b+gX66n45/klsR2+I/tzX+iRbjn/EWsbsbneM/97AHxbSVjv/ebjn+3bppNTmS5f5XG/ONJZevlIpnIuL/EXEyxvan+Z3u55xdf7DRbl3j+C9d0vLrY8GsHg9H9z/9nPlCtfBP2tzo0e2Il1qOf5Ot/k9a9H/6flzssoxjxXsvt1vXuf17a+P7iFda9v+TM1ey8/3Jqdr+MFXfK7b7/c6xn9uV3+/2p/1/aOf2TyaN92srz17Gdwf+LLZbt9v9f1/ycS29L3vsRqFaXZ6O2Je8Pzre/PjMk+fW8/Xt0/afPNE6/nfa/9PJ1yddtv/O0TttNx2E/p/vov9Tm/2/tSN0nXjw3qfftiu/qf3142RT/79WS53MHunm+NdtBXfzngEAAAAAAMCgykXE4Uhy+a10LpfPb36+42gcypXKleqpy+WVq/NR+67sZIzl6ne6Jxo+DzGdfR62np9pys9GxJGI+GrkYC2fnyuX5vvdeAAAAAAAAAAAAAAAAAAAABgQ422+/5/6ZaTftQP2XO2HDfb3uxZAP3T8yf9e/NITMJA6xj/w3Hr2+HdlAJ4Xzv8wvMQ/DC/xD8Or2/gfm9jjigD/Oud/GF7iHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq4oUL6bKx/vjmXJqfv766sli+fnq+WFnML63M5efKy9fyC+XyQqmYnysvdXq9Url8bXomVm5MVYuV6lRlde3SUnnlavXSlaXCgbhUHPPHhgEAAAAAAAAAAAAAAAAAAGCbyuraYqFUKi5LtE2ci4Goxl42cNOunj46KK2Q6GmizwcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjwdwAAAP//Rf8sdQ==") r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000600)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 1.133645965s ago: executing program 0 (id=7873): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf9a0, 0x7}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4, 0x0, 0x7fffdfff}, 0x18) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r6, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r5, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r9 = syz_io_uring_setup(0x4b8, &(0x7f0000000140)={0x0, 0x77be, 0x80, 0x5, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) read$qrtrtun(r7, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x0, 0x0}) io_uring_enter(r9, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 885.112831ms ago: executing program 2 (id=7874): syz_usb_connect(0x5, 0x2a9, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000640)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x906, 0xfffffffffffffffd, 0x8, 0x0, 0x4, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000580), 0x5}, 0x0, 0x3fb, 0x64, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000002140012800b0001006970766c616e0000040002800800050005eed2a877b1349afc7e455e0939578c97d33f6d7787043feb3a325645f1f035c1e70999de9b2f761e296860b4010a722510", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240040d4}, 0x4054) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x8b25714e) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) accept4(r1, 0x0, 0x0, 0x0) 708.960689ms ago: executing program 6 (id=7875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x8, &(0x7f0000000340)=0x0) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) 623.820797ms ago: executing program 9 (id=7876): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf593}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) 604.900689ms ago: executing program 9 (id=7877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff85000000040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) 591.52063ms ago: executing program 9 (id=7878): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000340)=[{{&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) move_mount(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000280)='./bus\x00', 0x300) sendfile(r1, r0, 0x0, 0x7ffff000) 514.079138ms ago: executing program 6 (id=7879): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000600)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x400, @multicast2}}}, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) unshare(0x20060400) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/user\x00') ioctl$NS_GET_PARENT(r4, 0x8004b708, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000300003040005060004fffe0000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280080012000900000008001e0000000000b8ff110006000000", @ANYRES16=r2, @ANYRESHEX=r3], 0x54}, 0x1, 0x2000000000000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x41, 0x79a2, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, 0x700, 0x40, 0x1, 0xc8a}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="02"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000600)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 388.177341ms ago: executing program 6 (id=7880): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180100180000000000000010000000030005000000000002000000e000000200000000000000000800120000000000000000000000000006000000000000000100000000000000ff010000000000000000000600000001ff020000000000000000000000000001030006000000000002000000ffffffff000000000000000008001900000000000a"], 0xc0}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file0/file0\x00', 0x100008a, &(0x7f00000001c0)={[{@usrjquota}, {@journal_ioprio}, {@stripe={'stripe', 0x3d, 0xf9}}, {@nodiscard}, {@sb={'sb', 0x3d, 0xd98}}, {@noinit_itable}]}, 0x1, 0x47d, &(0x7f0000000440)="$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") ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r1, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/key-users\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000002840)=""/4103, 0x1007) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000001000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x2902b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000140)={0x1d, r5, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) 341.993876ms ago: executing program 6 (id=7881): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x45, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x8, &(0x7f0000000340)=0x0) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) 165.697454ms ago: executing program 6 (id=7882): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x10, 0x3, 0x0, 0x0, 0x0, 0x2, 0x300, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf9a0, 0x7}, 0x100, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2, 0x0, 0x7fffdfff}, 0x18) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r4, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r3, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read$qrtrtun(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) 48.409806ms ago: executing program 0 (id=7883): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000009d8e0020000000000000c784a8bf3cfc600e9db6f1d0719d1dbe864dafe8f946241f761afbcaa2e505f475e6eea58dda5fb39321e1805b31a216d09690496fda4cc81e9dfb693a71ddd06758924bc9bcdcf67e03c12282e859a90d9e79c49d79d154f0497e156f09e95834ac265adecc85ff1aa4d8ffc77bc16f4a145a4d46f1a66a8da868703edb2112c5aa2d5feb13aae0d9370ced4961d2d2cdbf850542d79c733b2d34", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 0s ago: executing program 0 (id=7884): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, &(0x7f0000000600)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x400, @multicast2}}}, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) unshare(0x20060400) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000740)='ns/user\x00') ioctl$NS_GET_PARENT(r5, 0x8004b708, 0x0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000300003040005060004fffe0000000001", @ANYRES32=0x0, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280080012000900000008001e0000000000b8ff110006000000", @ANYRES16=r3, @ANYRESHEX=r4], 0x54}, 0x1, 0x2000000000000000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x41, 0x79a2, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, @empty, 0x700, 0x40, 0x1, 0xc8a}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="02"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r9}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x210000, &(0x7f00000003c0)={[], [{@flag='ro'}]}, 0xfd, 0x580, &(0x7f0000000bc0)="$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") r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000600)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) kernel console output (not intermixed with test programs): =0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.6.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 574.922231][T26543] set_capacity_and_notify: 12 callbacks suppressed [ 574.922248][T26543] loop6: detected capacity change from 0 to 512 [ 574.930707][ T29] audit: type=1326 audit(1768103875.552:44162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.6.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 574.937806][T26543] ext4: Unknown parameter 'uid>00000000000000000000' [ 574.943668][ T29] audit: type=1326 audit(1768103875.552:44163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.6.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 574.997807][ T29] audit: type=1326 audit(1768103875.552:44164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.6.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 575.021455][ T29] audit: type=1326 audit(1768103875.552:44165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.6.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 575.045191][ T29] audit: type=1326 audit(1768103875.552:44166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.6.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 575.068806][ T29] audit: type=1326 audit(1768103875.552:44167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26538 comm="syz.6.7501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 575.237080][ T3492] IPVS: starting estimator thread 0... [ 575.242016][T26560] FAULT_INJECTION: forcing a failure. [ 575.242016][T26560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.255768][T26560] CPU: 0 UID: 0 PID: 26560 Comm: syz.5.7508 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 575.255798][T26560] Tainted: [W]=WARN [ 575.255804][T26560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.255816][T26560] Call Trace: [ 575.255823][T26560] [ 575.255887][T26560] __dump_stack+0x1d/0x30 [ 575.255908][T26560] dump_stack_lvl+0x95/0xd0 [ 575.255925][T26560] dump_stack+0x15/0x1b [ 575.255941][T26560] should_fail_ex+0x265/0x280 [ 575.255962][T26560] should_fail+0xb/0x20 [ 575.256023][T26560] should_fail_usercopy+0x1a/0x20 [ 575.256042][T26560] strncpy_from_user+0x27/0x260 [ 575.256068][T26560] getname_flags+0xae/0x3b0 [ 575.256088][T26560] do_sys_openat2+0x60/0x150 [ 575.256179][T26560] __x64_sys_openat+0xf2/0x120 [ 575.256202][T26560] x64_sys_call+0x2b07/0x3000 [ 575.256222][T26560] do_syscall_64+0xca/0x2b0 [ 575.256258][T26560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.256376][T26560] RIP: 0033:0x7fb42940f749 [ 575.256390][T26560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.256417][T26560] RSP: 002b:00007fb427e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.256433][T26560] RAX: ffffffffffffffda RBX: 00007fb429665fa0 RCX: 00007fb42940f749 [ 575.256455][T26560] RDX: 000000000000275a RSI: 0000200000000040 RDI: 0000000000000003 [ 575.256465][T26560] RBP: 00007fb427e77090 R08: 0000000000000000 R09: 0000000000000000 [ 575.256476][T26560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.256486][T26560] R13: 00007fb429666038 R14: 00007fb429665fa0 R15: 00007fff0c274528 [ 575.256502][T26560] [ 575.460488][T26567] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7510'. [ 575.464872][T26556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.480971][T26559] IPVS: using max 2544 ests per chain, 127200 per kthread [ 575.493903][T26556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.498580][T26571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7511'. [ 575.518429][T21070] Bluetooth: hci0: Frame reassembly failed (-84) [ 575.529145][T26570] loop5: detected capacity change from 0 to 512 [ 575.543109][T26570] EXT4-fs: Ignoring removed nobh option [ 575.572608][T26570] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 575.999086][T26586] loop7: detected capacity change from 0 to 512 [ 576.141740][T26595] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 576.151958][T26588] IPVS: stopping backup sync thread 26595 ... [ 576.181416][T26599] netlink: 'syz.6.7520': attribute type 1 has an invalid length. [ 576.210140][T26599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.218789][T26594] loop7: detected capacity change from 0 to 512 [ 576.238406][T26594] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 576.250788][T26594] EXT4-fs (loop7): 1 truncate cleaned up [ 576.279444][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7521'. [ 576.300066][T26607] FAULT_INJECTION: forcing a failure. [ 576.300066][T26607] name failslab, interval 1, probability 0, space 0, times 0 [ 576.312763][T26607] CPU: 1 UID: 0 PID: 26607 Comm: syz.7.7522 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 576.312871][T26607] Tainted: [W]=WARN [ 576.312879][T26607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.312947][T26607] Call Trace: [ 576.312960][T26607] [ 576.312969][T26607] __dump_stack+0x1d/0x30 [ 576.312996][T26607] dump_stack_lvl+0x95/0xd0 [ 576.313019][T26607] dump_stack+0x15/0x1b [ 576.313039][T26607] should_fail_ex+0x265/0x280 [ 576.313131][T26607] should_failslab+0x8c/0xb0 [ 576.313152][T26607] kmem_cache_alloc_noprof+0x69/0x4b0 [ 576.313175][T26607] ? key_alloc+0x27d/0x9a0 [ 576.313234][T26607] key_alloc+0x27d/0x9a0 [ 576.313261][T26607] request_key_and_link+0x43a/0xd70 [ 576.313336][T26607] ? __pfx_key_default_cmp+0x10/0x10 [ 576.313363][T26607] ? __pfx_keyring_search_iterator+0x10/0x10 [ 576.313473][T26607] __se_sys_request_key+0x1df/0x290 [ 576.313502][T26607] ? fput+0x8f/0xc0 [ 576.313596][T26607] __x64_sys_request_key+0x55/0x70 [ 576.313628][T26607] x64_sys_call+0x2321/0x3000 [ 576.313723][T26607] do_syscall_64+0xca/0x2b0 [ 576.313756][T26607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.313849][T26607] RIP: 0033:0x7f648116f749 [ 576.313866][T26607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.313889][T26607] RSP: 002b:00007f647fbd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 576.313910][T26607] RAX: ffffffffffffffda RBX: 00007f64813c5fa0 RCX: 00007f648116f749 [ 576.313999][T26607] RDX: 0000200000000500 RSI: 00002000000004c0 RDI: 0000200000000400 [ 576.314013][T26607] RBP: 00007f647fbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 576.314074][T26607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.314088][T26607] R13: 00007f64813c6038 R14: 00007f64813c5fa0 R15: 00007ffc79773e78 [ 576.314109][T26607] [ 576.526191][T26613] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7523'. [ 576.580070][T26619] loop7: detected capacity change from 0 to 512 [ 576.587869][T26619] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 576.596184][T26619] EXT4-fs (loop7): orphan cleanup on readonly fs [ 576.603059][T26619] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 576.617855][T26619] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 576.624896][T26619] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #16: comm syz.7.7526: invalid fast symlink length 9000 [ 576.637354][T26619] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.7526: couldn't read orphan inode 16 (err -117) [ 576.711064][T26628] loop7: detected capacity change from 0 to 512 [ 576.857753][T26637] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 576.867649][T26632] IPVS: stopping backup sync thread 26637 ... [ 576.869905][T26638] netlink: 'syz.2.7532': attribute type 30 has an invalid length. [ 576.920575][T26639] netlink: 'syz.2.7532': attribute type 21 has an invalid length. [ 576.932163][T26639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7532'. [ 576.941978][T26639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7532'. [ 576.992751][T26645] bridge0: entered promiscuous mode [ 576.999024][T26645] bridge0: port 1(macsec1) entered blocking state [ 577.005552][T26645] bridge0: port 1(macsec1) entered disabled state [ 577.012531][T26645] macsec1: entered allmulticast mode [ 577.017917][T26645] bridge0: entered allmulticast mode [ 577.025384][T26645] macsec1: left allmulticast mode [ 577.030490][T26645] bridge0: left allmulticast mode [ 577.036810][T26645] bridge0: left promiscuous mode [ 577.162452][T26648] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7536'. [ 577.327104][T26653] loop2: detected capacity change from 0 to 512 [ 577.335631][T26653] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 577.344211][T26653] EXT4-fs (loop2): orphan cleanup on readonly fs [ 577.350942][T26653] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 577.366208][T26653] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 577.373480][T26653] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.7538: invalid fast symlink length 9000 [ 577.385997][T26653] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7538: couldn't read orphan inode 16 (err -117) [ 577.423379][T26658] netlink: 'syz.2.7539': attribute type 1 has an invalid length. [ 577.439619][T26658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 577.581092][ T3518] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 577.974283][T26661] loop2: detected capacity change from 0 to 1024 [ 577.995956][T26661] IPv6: Can't replace route, no match found [ 578.153279][T26667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7542'. [ 578.169761][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bf07400: rx timeout, send abort [ 578.169908][T26667] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.178047][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811c469a00: rx timeout, send abort [ 578.178230][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bf07400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 578.178287][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811c469a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 578.225598][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104a95600: rx timeout, send abort [ 578.233831][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bd4a800: rx timeout, send abort [ 578.242512][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104a95600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 578.257132][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bd4a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 578.326154][T26667] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.395109][T26667] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.468095][T26667] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.551146][T26680] FAULT_INJECTION: forcing a failure. [ 578.551146][T26680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.564287][T26680] CPU: 0 UID: 0 PID: 26680 Comm: syz.6.7545 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 578.564318][T26680] Tainted: [W]=WARN [ 578.564324][T26680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.564336][T26680] Call Trace: [ 578.564344][T26680] [ 578.564352][T26680] __dump_stack+0x1d/0x30 [ 578.564412][T26680] dump_stack_lvl+0x95/0xd0 [ 578.564474][T26680] dump_stack+0x15/0x1b [ 578.564494][T26680] should_fail_ex+0x265/0x280 [ 578.564537][T26680] should_fail+0xb/0x20 [ 578.564611][T26680] should_fail_usercopy+0x1a/0x20 [ 578.564665][T26680] _copy_from_user+0x1c/0xb0 [ 578.564705][T26680] memdup_sockptr_noprof+0x95/0x100 [ 578.564729][T26680] ipv6_set_mcast_msfilter+0x90/0x170 [ 578.564752][T26680] do_ipv6_setsockopt+0xfe6/0x2160 [ 578.564792][T26680] ? kstrtoull+0x111/0x140 [ 578.564811][T26680] ? avc_has_perm_noaudit+0xab/0x130 [ 578.564856][T26680] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 578.564944][T26680] ipv6_setsockopt+0x59/0x130 [ 578.565000][T26680] udpv6_setsockopt+0x99/0xb0 [ 578.565025][T26680] sock_common_setsockopt+0x69/0x80 [ 578.565044][T26680] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 578.565065][T26680] __sys_setsockopt+0x184/0x200 [ 578.565095][T26680] __x64_sys_setsockopt+0x64/0x80 [ 578.565119][T26680] x64_sys_call+0x21d5/0x3000 [ 578.565143][T26680] do_syscall_64+0xca/0x2b0 [ 578.565172][T26680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.565258][T26680] RIP: 0033:0x7f903ebdf749 [ 578.565276][T26680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.565295][T26680] RSP: 002b:00007f903d605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 578.565322][T26680] RAX: ffffffffffffffda RBX: 00007f903ee36180 RCX: 00007f903ebdf749 [ 578.565385][T26680] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000007 [ 578.565396][T26680] RBP: 00007f903d605090 R08: 0000000000000401 R09: 0000000000000000 [ 578.565455][T26680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.565469][T26680] R13: 00007f903ee36218 R14: 00007f903ee36180 R15: 00007ffca57c0fc8 [ 578.565491][T26680] [ 578.803288][T26668] loop5: detected capacity change from 0 to 32768 [ 578.851589][T26668] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 578.856895][T21091] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.863848][T26668] loop5: p1 start 460800 is beyond EOD, truncated [ 578.871623][T26668] loop5: p2 size 83886080 extends beyond EOD, truncated [ 578.882686][T26668] loop5: p5 start 460800 is beyond EOD, truncated [ 578.889202][T26668] loop5: p6 size 83886080 extends beyond EOD, truncated [ 578.890956][T21091] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.911121][T21091] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.930964][T21091] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.951606][T26682] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7546'. [ 578.983900][T26686] loop2: detected capacity change from 0 to 512 [ 578.990650][T26686] ext4: Unknown parameter 'uid>00000000000000000000' [ 579.035294][T26690] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 579.043643][T26690] EXT4-fs (loop5): orphan cleanup on readonly fs [ 579.050138][T26690] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 579.065216][T26690] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 579.072016][T26690] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #16: comm syz.5.7549: invalid fast symlink length 9000 [ 579.084537][T26690] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7549: couldn't read orphan inode 16 (err -117) [ 579.103576][T26695] netlink: 'syz.2.7550': attribute type 1 has an invalid length. [ 579.123938][T26695] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.137961][T26695] 8021q: adding VLAN 0 to HW filter on device bond8 [ 579.145399][T26695] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 579.164699][T26695] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 579.445944][T26715] EXT4-fs (loop5): orphan cleanup on readonly fs [ 579.452718][T26715] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7559: bad orphan inode 13 [ 579.463175][T26715] ext4_test_bit(bit=12, block=18) = 1 [ 579.468568][T26715] is_bad_inode(inode)=0 [ 579.472766][T26715] NEXT_ORPHAN(inode)=2130706432 [ 579.477626][T26715] max_ino=32 [ 579.480848][T26715] i_nlink=1 [ 579.489061][T26715] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 579.592420][T22429] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 579.616812][T22429] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 579.818677][T26721] ext4: Unknown parameter 'uid>00000000000000000000' [ 580.296917][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 580.296933][ T29] audit: type=1400 audit(1768103880.952:44479): avc: denied { read } for pid=26733 comm="syz.0.7565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 580.357705][ C1] vcan0: j1939_tp_rxtimer: 0xffff888126fe8a00: rx timeout, send abort [ 580.366176][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881044cc800: rx timeout, send abort [ 580.374622][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888126fe8a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 580.388939][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881044cc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 580.404698][T26742] __nla_validate_parse: 2 callbacks suppressed [ 580.404713][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7567'. [ 580.434168][T26744] FAULT_INJECTION: forcing a failure. [ 580.434168][T26744] name failslab, interval 1, probability 0, space 0, times 0 [ 580.447110][T26744] CPU: 0 UID: 0 PID: 26744 Comm: syz.0.7569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 580.447141][T26744] Tainted: [W]=WARN [ 580.447146][T26744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.447210][T26744] Call Trace: [ 580.447214][T26744] [ 580.447220][T26744] __dump_stack+0x1d/0x30 [ 580.447236][T26744] dump_stack_lvl+0x95/0xd0 [ 580.447247][T26744] dump_stack+0x15/0x1b [ 580.447258][T26744] should_fail_ex+0x265/0x280 [ 580.447271][T26744] should_failslab+0x8c/0xb0 [ 580.447298][T26744] __kmalloc_noprof+0xb9/0x5a0 [ 580.447311][T26744] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 580.447327][T26744] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 580.447392][T26744] genl_family_rcv_msg_doit+0x48/0x1b0 [ 580.447453][T26744] ? selinux_capable+0x31/0x40 [ 580.447465][T26744] ? security_capable+0x83/0x90 [ 580.447528][T26744] ? ns_capable+0x7d/0xb0 [ 580.447544][T26744] genl_rcv_msg+0x422/0x460 [ 580.447558][T26744] ? __pfx_batadv_pre_doit+0x10/0x10 [ 580.447652][T26744] ? __pfx_batadv_netlink_tp_meter_start+0x10/0x10 [ 580.447665][T26744] ? __pfx_batadv_post_doit+0x10/0x10 [ 580.447677][T26744] netlink_rcv_skb+0x123/0x220 [ 580.447693][T26744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 580.447766][T26744] genl_rcv+0x28/0x40 [ 580.447777][T26744] netlink_unicast+0x5c0/0x690 [ 580.447850][T26744] netlink_sendmsg+0x58b/0x6b0 [ 580.447867][T26744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.447889][T26744] __sock_sendmsg+0x145/0x180 [ 580.447901][T26744] ____sys_sendmsg+0x31e/0x4a0 [ 580.447918][T26744] ___sys_sendmsg+0x17b/0x1d0 [ 580.447988][T26744] __x64_sys_sendmsg+0xd4/0x160 [ 580.448005][T26744] x64_sys_call+0x17ba/0x3000 [ 580.448018][T26744] do_syscall_64+0xca/0x2b0 [ 580.448085][T26744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.448128][T26744] RIP: 0033:0x7fea64eef749 [ 580.448215][T26744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.448226][T26744] RSP: 002b:00007fea63957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.448297][T26744] RAX: ffffffffffffffda RBX: 00007fea65145fa0 RCX: 00007fea64eef749 [ 580.448304][T26744] RDX: 0000000020040084 RSI: 0000200000000300 RDI: 0000000000000005 [ 580.448314][T26744] RBP: 00007fea63957090 R08: 0000000000000000 R09: 0000000000000000 [ 580.448321][T26744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.448328][T26744] R13: 00007fea65146038 R14: 00007fea65145fa0 R15: 00007fff95c34808 [ 580.448339][T26744] [ 580.722115][T26748] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7571'. [ 580.816716][T26751] netlink: 'syz.0.7572': attribute type 1 has an invalid length. [ 580.841235][T26751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.857333][T26751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 580.865054][T26751] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 580.877985][T26751] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 580.895355][T26757] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 580.895585][T26749] IPVS: stopping backup sync thread 26757 ... [ 580.914261][T26755] siw: device registration error -23 [ 581.037057][T26760] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7574'. [ 581.046836][T26764] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 581.047358][T26760] IPVS: stopping backup sync thread 26764 ... [ 581.122019][T26770] netlink: 'syz.7.7577': attribute type 12 has an invalid length. [ 581.304048][T26774] set_capacity_and_notify: 3 callbacks suppressed [ 581.304066][T26774] loop2: detected capacity change from 0 to 512 [ 581.318655][T26774] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 581.326758][T26774] EXT4-fs (loop2): orphan cleanup on readonly fs [ 581.333782][T26774] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 581.348616][T26774] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 581.355609][T26774] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.7578: invalid fast symlink length 9000 [ 581.368248][T26774] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7578: couldn't read orphan inode 16 (err -117) [ 581.382466][ T29] audit: type=1400 audit(1768103882.042:44480): avc: denied { create } for pid=26777 comm="syz.7.7579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 581.410462][ T29] audit: type=1400 audit(1768103882.062:44481): avc: denied { bind } for pid=26777 comm="syz.7.7579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 581.488367][T26785] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7582'. [ 581.520710][T26786] loop7: detected capacity change from 0 to 512 [ 581.541876][T26786] EXT4-fs (loop7): orphan cleanup on readonly fs [ 581.550012][T26786] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.7581: bad orphan inode 13 [ 581.560452][T26786] ext4_test_bit(bit=12, block=18) = 1 [ 581.565874][T26786] is_bad_inode(inode)=0 [ 581.570024][T26786] NEXT_ORPHAN(inode)=2130706432 [ 581.574899][T26786] max_ino=32 [ 581.578101][T26786] i_nlink=1 [ 581.612220][T26786] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 581.632351][T26786] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 581.642686][T26780] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 581.705520][T26793] loop0: detected capacity change from 0 to 512 [ 581.717638][T26793] ext4: Bad value for 'journal_dev' [ 581.792189][T26796] loop0: detected capacity change from 0 to 2048 [ 581.803186][T26796] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.879599][T26800] siw: device registration error -23 [ 581.881610][T26796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.913045][T26796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.486839][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812154cc00: rx timeout, send abort [ 582.495334][ C0] vcan0: j1939_tp_rxtimer: 0xffff88812154c600: rx timeout, send abort [ 582.510945][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812154cc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 582.525272][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88812154c600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 582.983526][T26811] siw: device registration error -23 [ 583.228481][T26817] loop2: detected capacity change from 0 to 512 [ 583.255387][T26817] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 583.283279][T26817] EXT4-fs (loop2): orphan cleanup on readonly fs [ 583.299230][T26817] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 583.332854][T26817] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 583.365894][T26817] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.7591: invalid fast symlink length 9000 [ 583.402690][T26821] netlink: 'syz.6.7592': attribute type 4 has an invalid length. [ 583.411387][T26817] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7591: couldn't read orphan inode 16 (err -117) [ 583.435620][T26821] IPv6: NLM_F_CREATE should be specified when creating new route [ 583.580754][T26826] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7594'. [ 583.804314][T21624] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.201381][T26795] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 584.226376][T26795] EXT4-fs (loop0): Remounting filesystem read-only [ 584.237250][T21624] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.302630][T21624] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.402693][T21624] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.514037][T26852] loop2: detected capacity change from 0 to 512 [ 584.520647][T26852] EXT4-fs: Ignoring removed i_version option [ 584.526751][T26852] EXT4-fs: Ignoring removed bh option [ 584.553120][T26852] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.582038][T21624] bridge_slave_1: left allmulticast mode [ 584.587726][T21624] bridge_slave_1: left promiscuous mode [ 584.593514][T21624] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.611942][T21624] bridge_slave_0: left allmulticast mode [ 584.617660][T21624] bridge_slave_0: left promiscuous mode [ 584.623405][T21624] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.757147][T21624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.766175][T21091] smc: removing ib device syz2 [ 584.782619][T21624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.795951][T21624] bond0 (unregistering): Released all slaves [ 584.809390][T21624] bond1 (unregistering): Released all slaves [ 584.830422][T21624] bond2 (unregistering): Released all slaves [ 584.850553][T21624] bond3 (unregistering): Released all slaves [ 584.991313][T21194] EXT4-fs unmount: 56 callbacks suppressed [ 584.991331][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.032890][T26839] chnl_net:caif_netlink_parms(): no params data found [ 585.046719][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b11d000: rx timeout, send abort [ 585.054962][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b11ca00: rx timeout, send abort [ 585.063791][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b11d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 585.078117][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b11ca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 585.106838][T26864] bridge0: entered promiscuous mode [ 585.118842][T26864] bridge0: port 3(macsec1) entered blocking state [ 585.125345][T26864] bridge0: port 3(macsec1) entered disabled state [ 585.135840][T26867] loop0: detected capacity change from 0 to 512 [ 585.155413][T26864] macsec1: entered allmulticast mode [ 585.160756][T26864] bridge0: entered allmulticast mode [ 585.199331][T26868] loop6: detected capacity change from 0 to 1024 [ 585.201240][T26864] macsec1: left allmulticast mode [ 585.210806][T26864] bridge0: left allmulticast mode [ 585.229187][T26868] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 585.241594][T26864] bridge0: left promiscuous mode [ 585.396388][T26875] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7607'. [ 585.421507][T21624] hsr_slave_0: left promiscuous mode [ 585.430021][T26880] loop6: detected capacity change from 0 to 512 [ 585.443741][T26880] ext4: Unknown parameter 'uid>00000000000000000000' [ 585.451420][T21624] hsr_slave_1: left promiscuous mode [ 585.541352][ T29] audit: type=1326 audit(1768103886.192:44482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.544118][T21624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.564980][ T29] audit: type=1326 audit(1768103886.202:44483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.572414][T21624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.607529][ T29] audit: type=1326 audit(1768103886.252:44484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.631209][ T29] audit: type=1326 audit(1768103886.252:44485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.631668][T21624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.654917][ T29] audit: type=1326 audit(1768103886.252:44486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.654944][ T29] audit: type=1326 audit(1768103886.252:44487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.662336][T21624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.719309][ T29] audit: type=1326 audit(1768103886.342:44488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.742999][ T29] audit: type=1326 audit(1768103886.352:44489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.786658][ T29] audit: type=1326 audit(1768103886.442:44490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.810591][ T29] audit: type=1326 audit(1768103886.442:44491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26884 comm="syz.6.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 585.845745][T21624] veth1_macvtap: left promiscuous mode [ 585.861826][T21624] veth0_macvtap: left promiscuous mode [ 585.898849][T26885] loop6: detected capacity change from 0 to 128 [ 585.906231][T21624] veth1_vlan: left promiscuous mode [ 585.927258][T21624] veth0_vlan: left promiscuous mode [ 585.938287][T26885] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 586.017283][T26885] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 586.158159][T21624] team0 (unregistering): Port device team_slave_1 removed [ 586.188933][T21081] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 586.235051][T26890] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 586.252109][T21624] team0 (unregistering): Port device team_slave_0 removed [ 586.365867][T20666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.381975][T26890] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7612: Invalid block bitmap block 0 in block_group 0 [ 586.491147][T26890] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 586.516540][T26839] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.523786][T26839] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.531398][T26890] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.7612: attempt to clear invalid blocks 983261 len 1 [ 586.568513][T26839] bridge_slave_0: entered allmulticast mode [ 586.582956][T26890] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7612: Invalid inode table block 0 in block_group 0 [ 586.597664][T26839] bridge_slave_0: entered promiscuous mode [ 586.621156][T26839] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.628446][T26839] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.638747][T26890] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 586.660873][T26890] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 586.681168][T26839] bridge_slave_1: entered allmulticast mode [ 586.702387][T26890] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7612: Invalid inode table block 0 in block_group 0 [ 586.724614][T26839] bridge_slave_1: entered promiscuous mode [ 586.773014][T26890] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 586.819270][T26839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.829832][T26890] EXT4-fs error (device loop6): ext4_truncate:4635: inode #11: comm syz.6.7612: mark_inode_dirty error [ 586.847628][T21624] IPVS: stop unused estimator thread 0... [ 586.863056][T26900] netlink: 'syz.7.7615': attribute type 30 has an invalid length. [ 586.874965][T26839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.891657][T26890] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 586.930147][T26890] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7612: Invalid inode table block 0 in block_group 0 [ 586.973053][T26890] EXT4-fs (loop6): 1 truncate cleaned up [ 586.996912][T26890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.065765][T26839] team0: Port device team_slave_0 added [ 587.078129][T26839] team0: Port device team_slave_1 added [ 587.093613][T26904] set_capacity_and_notify: 1 callbacks suppressed [ 587.093629][T26904] loop7: detected capacity change from 0 to 512 [ 587.112481][T26839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.119467][T26839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.145502][T26839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.160728][T26839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.167772][T26839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.193848][T26839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.275440][T26839] hsr_slave_0: entered promiscuous mode [ 587.302619][T26839] hsr_slave_1: entered promiscuous mode [ 587.315907][T26839] debugfs: 'hsr0' already exists in 'hsr' [ 587.321727][T26839] Cannot create hsr debugfs directory [ 587.328184][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.354511][T26912] loop0: detected capacity change from 0 to 512 [ 587.362205][T26917] bridge0: entered promiscuous mode [ 587.369363][T26917] bridge0: port 3(macsec1) entered blocking state [ 587.375860][T26917] bridge0: port 3(macsec1) entered disabled state [ 587.384665][T26917] macsec1: entered allmulticast mode [ 587.389966][T26917] bridge0: entered allmulticast mode [ 587.396176][T26912] EXT4-fs (loop0): orphan cleanup on readonly fs [ 587.396272][T26917] macsec1: left allmulticast mode [ 587.407731][T26917] bridge0: left allmulticast mode [ 587.418676][T26912] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.7620: bad orphan inode 13 [ 587.433498][T26917] bridge0: left promiscuous mode [ 587.434009][T26924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7624'. [ 587.447861][T26912] ext4_test_bit(bit=12, block=18) = 1 [ 587.453344][T26912] is_bad_inode(inode)=0 [ 587.457537][T26912] NEXT_ORPHAN(inode)=2130706432 [ 587.462497][T26912] max_ino=32 [ 587.465776][T26912] i_nlink=1 [ 587.469130][T26922] loop7: detected capacity change from 0 to 2048 [ 587.474056][T26912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 587.493743][T26922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 587.503163][T26912] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 587.532523][T26922] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 587.587361][T26922] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 587.599671][T26922] EXT4-fs (loop7): This should not happen!! Data will be lost [ 587.599671][T26922] [ 587.609502][T26922] EXT4-fs (loop7): Total free blocks count 0 [ 587.615883][T26922] EXT4-fs (loop7): Free/Dirty block details [ 587.621922][T26922] EXT4-fs (loop7): free_blocks=2415919104 [ 587.627652][T26922] EXT4-fs (loop7): dirty_blocks=16 [ 587.632828][T26922] EXT4-fs (loop7): Block reservation details [ 587.638810][T26922] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 587.679287][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7625'. [ 587.703574][T26931] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 587.713280][T26928] IPVS: stopping backup sync thread 26931 ... [ 587.719005][T26839] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 587.727110][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.739361][T26839] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 587.753156][T26839] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 587.762708][T26839] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 587.799657][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.893936][T26839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.908516][T26839] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.920534][T21070] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.924044][T26948] FAULT_INJECTION: forcing a failure. [ 587.924044][T26948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.927614][T21070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.940680][T26948] CPU: 1 UID: 0 PID: 26948 Comm: syz.7.7630 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 587.940712][T26948] Tainted: [W]=WARN [ 587.940771][T26948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.940784][T26948] Call Trace: [ 587.940791][T26948] [ 587.940800][T26948] __dump_stack+0x1d/0x30 [ 587.940858][T26948] dump_stack_lvl+0x95/0xd0 [ 587.940880][T26948] dump_stack+0x15/0x1b [ 587.940902][T26948] should_fail_ex+0x265/0x280 [ 587.940957][T26948] should_fail+0xb/0x20 [ 587.941006][T26948] should_fail_usercopy+0x1a/0x20 [ 587.941030][T26948] _copy_to_iter+0x251/0xe70 [ 587.941052][T26948] ? __rcu_read_unlock+0x4f/0x70 [ 587.941103][T26948] ? __kfree_skb+0x109/0x150 [ 587.941171][T26948] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 587.941200][T26948] __skb_datagram_iter+0xc6/0x690 [ 587.941228][T26948] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 587.941312][T26948] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 587.941337][T26948] skb_copy_datagram_iter+0x3d/0x110 [ 587.941366][T26948] ipv6_recv_error+0x125/0x9b0 [ 587.941538][T26948] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 587.941563][T26948] udpv6_recvmsg+0x147/0xca0 [ 587.941608][T26948] ? selinux_socket_recvmsg+0x175/0x1b0 [ 587.941649][T26948] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 587.941753][T26948] inet6_recvmsg+0x143/0x290 [ 587.941839][T26948] ? should_failslab+0x8c/0xb0 [ 587.941863][T26948] sock_recvmsg_nosec+0x5f/0x130 [ 587.941884][T26948] ____sys_recvmsg+0x26f/0x280 [ 587.941961][T26948] ___sys_recvmsg+0x11f/0x370 [ 587.941998][T26948] do_recvmmsg+0x1ef/0x540 [ 587.942031][T26948] ? fput+0x8f/0xc0 [ 587.942065][T26948] __x64_sys_recvmmsg+0xe5/0x170 [ 587.942106][T26948] x64_sys_call+0x2b75/0x3000 [ 587.942137][T26948] do_syscall_64+0xca/0x2b0 [ 587.942171][T26948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.942192][T26948] RIP: 0033:0x7f648116f749 [ 587.942208][T26948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.942228][T26948] RSP: 002b:00007f647fbd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 587.942247][T26948] RAX: ffffffffffffffda RBX: 00007f64813c5fa0 RCX: 00007f648116f749 [ 587.942276][T26948] RDX: 000000000000002a RSI: 0000200000000f80 RDI: 0000000000000003 [ 587.942289][T26948] RBP: 00007f647fbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 587.942301][T26948] R10: 0000000040012020 R11: 0000000000000246 R12: 0000000000000001 [ 587.942392][T26948] R13: 00007f64813c6038 R14: 00007f64813c5fa0 R15: 00007ffc79773e78 [ 587.942411][T26948] [ 587.953954][T26945] loop0: detected capacity change from 0 to 512 [ 587.972220][T26839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.218062][T26839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.375286][T21070] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.382395][T21070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.494700][T26952] loop6: detected capacity change from 0 to 512 [ 588.552123][T26952] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 588.656540][T26839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.688841][T26952] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7631: Invalid block bitmap block 0 in block_group 0 [ 588.728988][T26952] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 588.752649][T26952] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.7631: attempt to clear invalid blocks 983261 len 1 [ 588.781204][T26952] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7631: Invalid inode table block 0 in block_group 0 [ 588.812838][T26952] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 588.831387][T26952] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 588.850125][T26952] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7631: Invalid inode table block 0 in block_group 0 [ 588.880364][T26952] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 588.900399][T26952] EXT4-fs error (device loop6): ext4_truncate:4635: inode #11: comm syz.6.7631: mark_inode_dirty error [ 588.916452][T26839] veth0_vlan: entered promiscuous mode [ 588.926475][T26839] veth1_vlan: entered promiscuous mode [ 588.932117][T26952] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 588.947185][T26945] EXT4-fs (loop0): orphan cleanup on readonly fs [ 588.951045][T26973] loop7: detected capacity change from 0 to 512 [ 588.961199][T26952] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.7631: Invalid inode table block 0 in block_group 0 [ 588.978715][T26945] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.7629: bad orphan inode 13 [ 588.990193][T26839] veth0_macvtap: entered promiscuous mode [ 588.998373][T26945] ext4_test_bit(bit=12, block=18) = 1 [ 589.003833][T26945] is_bad_inode(inode)=0 [ 589.007985][T26945] NEXT_ORPHAN(inode)=2130706432 [ 589.012900][T26945] max_ino=32 [ 589.016093][T26945] i_nlink=1 [ 589.024102][T26839] veth1_macvtap: entered promiscuous mode [ 589.030270][T26952] EXT4-fs (loop6): 1 truncate cleaned up [ 589.038441][T26952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.051088][T26945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 589.074497][T26945] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 589.106122][T26839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.116600][T26839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.165453][T26976] bridge0: entered promiscuous mode [ 589.174620][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.188613][T26976] bridge0: port 3(macsec1) entered blocking state [ 589.195108][T26976] bridge0: port 3(macsec1) entered disabled state [ 589.210541][T26978] loop7: detected capacity change from 0 to 1024 [ 589.217010][T26976] macsec1: entered allmulticast mode [ 589.222347][T26976] bridge0: entered allmulticast mode [ 589.228553][T26978] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 589.238295][T26976] macsec1: left allmulticast mode [ 589.243351][T26976] bridge0: left allmulticast mode [ 589.249057][T26976] bridge0: left promiscuous mode [ 589.265870][ T4601] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.296889][ T4601] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.318056][ T4601] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.337728][ T4601] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.385711][T26984] netlink: 'syz.8.7636': attribute type 30 has an invalid length. [ 589.552096][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.573083][T26987] bridge0: entered promiscuous mode [ 589.579944][T26987] bridge0: port 3(macsec1) entered blocking state [ 589.586565][T26987] bridge0: port 3(macsec1) entered disabled state [ 589.593241][T26987] macsec1: entered allmulticast mode [ 589.598552][T26987] bridge0: entered allmulticast mode [ 589.634077][T26992] loop6: detected capacity change from 0 to 1024 [ 589.641182][T26992] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 589.678603][T26987] macsec1: left allmulticast mode [ 589.684827][T26987] bridge0: left allmulticast mode [ 589.691052][T26989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7637'. [ 589.744922][T26997] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7641'. [ 589.777152][ T4601] Bluetooth: hci0: Frame reassembly failed (-84) [ 590.231090][T26987] bridge0: left promiscuous mode [ 590.241797][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7638'. [ 590.241813][T27007] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 590.320599][T27011] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7644'. [ 590.349900][T27015] loop6: detected capacity change from 0 to 512 [ 590.361306][T27015] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 590.369497][T27015] EXT4-fs (loop6): orphan cleanup on readonly fs [ 590.377413][T27015] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 590.393687][T27015] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 590.400666][T27015] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #16: comm syz.6.7646: invalid fast symlink length 9000 [ 590.416114][T27015] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.7646: couldn't read orphan inode 16 (err -117) [ 590.429682][T27015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.458615][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.495259][T27021] loop6: detected capacity change from 0 to 512 [ 590.512755][T27021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.526259][T27021] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.822287][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.500884][T27028] FAULT_INJECTION: forcing a failure. [ 591.500884][T27028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.514034][T27028] CPU: 0 UID: 0 PID: 27028 Comm: syz.6.7649 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 591.514138][T27028] Tainted: [W]=WARN [ 591.514146][T27028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 591.514160][T27028] Call Trace: [ 591.514192][T27028] [ 591.514201][T27028] __dump_stack+0x1d/0x30 [ 591.514223][T27028] dump_stack_lvl+0x95/0xd0 [ 591.514242][T27028] dump_stack+0x15/0x1b [ 591.514286][T27028] should_fail_ex+0x265/0x280 [ 591.514311][T27028] should_fail+0xb/0x20 [ 591.514331][T27028] should_fail_usercopy+0x1a/0x20 [ 591.514351][T27028] copy_to_user_nofault+0x7f/0x120 [ 591.514394][T27028] bpf_probe_write_user+0x83/0xc0 [ 591.514418][T27028] bpf_prog_f26ae291ee3ebee3+0x41/0x49 [ 591.514433][T27028] bpf_trace_run3+0x10f/0x1e0 [ 591.514460][T27028] ? iocb_destroy+0xc4/0x140 [ 591.514556][T27028] ? iocb_destroy+0xc4/0x140 [ 591.514583][T27028] kmem_cache_free+0x327/0x3a0 [ 591.514604][T27028] iocb_destroy+0xc4/0x140 [ 591.514705][T27028] io_submit_one+0xba0/0x1210 [ 591.514793][T27028] __se_sys_io_submit+0xfb/0x280 [ 591.514890][T27028] __x64_sys_io_submit+0x43/0x50 [ 591.514910][T27028] x64_sys_call+0x2e40/0x3000 [ 591.514934][T27028] do_syscall_64+0xca/0x2b0 [ 591.515014][T27028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.515033][T27028] RIP: 0033:0x7f903ebdf749 [ 591.515046][T27028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.515061][T27028] RSP: 002b:00007f903d647038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 591.515081][T27028] RAX: ffffffffffffffda RBX: 00007f903ee35fa0 RCX: 00007f903ebdf749 [ 591.515096][T27028] RDX: 0000200000000540 RSI: 0000000000000001 RDI: 00007f903f970000 [ 591.515112][T27028] RBP: 00007f903d647090 R08: 0000000000000000 R09: 0000000000000000 [ 591.515123][T27028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.515133][T27028] R13: 00007f903ee36038 R14: 00007f903ee35fa0 R15: 00007ffca57c0fc8 [ 591.515153][T27028] [ 591.831041][T24436] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 591.851475][ T4601] Bluetooth: hci0: Frame reassembly failed (-84) [ 591.865052][T27030] EXT4-fs: Ignoring removed nobh option [ 591.874905][T27032] EXT4-fs (loop7): orphan cleanup on readonly fs [ 591.881941][T27032] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.7652: bad orphan inode 13 [ 591.892518][T27032] ext4_test_bit(bit=12, block=18) = 1 [ 591.898174][T27032] is_bad_inode(inode)=0 [ 591.902369][T27032] NEXT_ORPHAN(inode)=2130706432 [ 591.902826][T27040] EXT4-fs: Ignoring removed i_version option [ 591.907329][T27032] max_ino=32 [ 591.913431][T27040] EXT4-fs: Ignoring removed bh option [ 591.922071][T27032] i_nlink=1 [ 591.922964][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 591.923013][ T29] audit: type=1326 audit(1768103892.552:44561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm="syz.6.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 591.925779][T27032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 591.931423][ T29] audit: type=1326 audit(1768103892.552:44562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm="syz.6.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 591.957790][T27030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.967612][ T29] audit: type=1326 audit(1768103892.552:44563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm="syz.6.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 591.967641][ T29] audit: type=1326 audit(1768103892.552:44564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 591.993775][T27040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.003883][ T29] audit: type=1326 audit(1768103892.552:44565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 592.035440][T27030] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 592.051157][ T29] audit: type=1326 audit(1768103892.552:44566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 592.051183][ T29] audit: type=1326 audit(1768103892.552:44567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 592.084281][T27040] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 592.087277][ T29] audit: type=1326 audit(1768103892.552:44568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 592.151045][ T3518] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 592.155609][ T29] audit: type=1326 audit(1768103892.552:44569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 592.180590][T24436] Bluetooth: hci1: command 0x1003 tx timeout [ 592.185270][ T29] audit: type=1326 audit(1768103892.552:44570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27039 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 592.244922][T27032] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 592.312242][T27047] set_capacity_and_notify: 3 callbacks suppressed [ 592.312253][T27047] loop8: detected capacity change from 0 to 1024 [ 592.332144][T27047] EXT4-fs: inline encryption not supported [ 592.339065][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.349981][T27047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.431581][T26839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.449172][T27051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7655'. [ 592.458609][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.468421][T27051] IPVS: stopping backup sync thread 27055 ... [ 592.471008][T27055] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 592.490029][T27057] netlink: 'syz.7.7657': attribute type 1 has an invalid length. [ 592.506487][T27057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.527981][T27057] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.535770][T27057] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 592.547847][T27057] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 593.124263][ T4636] Bluetooth: hci1: Frame reassembly failed (-84) [ 593.588164][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bfb4a00: rx timeout, send abort [ 593.596536][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bfb5e00: rx timeout, send abort [ 593.604782][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bfb4a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 593.619357][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bfb5e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 593.650360][T27084] bridge0: entered promiscuous mode [ 593.661507][T27084] bridge0: port 3(macsec1) entered blocking state [ 593.667972][T27084] bridge0: port 3(macsec1) entered disabled state [ 593.674965][T27084] macsec1: entered allmulticast mode [ 593.680241][T27084] bridge0: entered allmulticast mode [ 593.687803][T27084] macsec1: left allmulticast mode [ 593.692976][T27084] bridge0: left allmulticast mode [ 593.701074][T27084] bridge0: left promiscuous mode [ 593.711648][T27085] loop8: detected capacity change from 0 to 1024 [ 593.720098][T27085] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 593.822563][T27091] loop8: detected capacity change from 0 to 1024 [ 593.840710][T27091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.874228][T27091] IPv6: Can't replace route, no match found [ 593.901480][T10929] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 594.085695][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7670'. [ 594.095821][T27098] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 594.105545][T27096] IPVS: stopping backup sync thread 27098 ... [ 594.193182][T27102] FAULT_INJECTION: forcing a failure. [ 594.193182][T27102] name failslab, interval 1, probability 0, space 0, times 0 [ 594.206212][T27102] CPU: 0 UID: 0 PID: 27102 Comm: syz.0.7671 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 594.206248][T27102] Tainted: [W]=WARN [ 594.206254][T27102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.206267][T27102] Call Trace: [ 594.206274][T27102] [ 594.206281][T27102] __dump_stack+0x1d/0x30 [ 594.206306][T27102] dump_stack_lvl+0x95/0xd0 [ 594.206328][T27102] dump_stack+0x15/0x1b [ 594.206385][T27102] should_fail_ex+0x265/0x280 [ 594.206409][T27102] should_failslab+0x8c/0xb0 [ 594.206448][T27102] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 594.206473][T27102] ? __alloc_skb+0x2ff/0x4b0 [ 594.206564][T27102] __alloc_skb+0x2ff/0x4b0 [ 594.206633][T27102] ? __alloc_skb+0x228/0x4b0 [ 594.206653][T27102] nldev_get_chardev+0x2b9/0x620 [ 594.206698][T27102] ? __pfx_nldev_get_chardev+0x10/0x10 [ 594.206718][T27102] rdma_nl_rcv+0x47c/0x5a0 [ 594.206815][T27102] ? __netlink_deliver_tap+0x27/0x500 [ 594.206847][T27102] netlink_unicast+0x5c0/0x690 [ 594.206957][T27102] netlink_sendmsg+0x58b/0x6b0 [ 594.206991][T27102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.207022][T27102] __sock_sendmsg+0x145/0x180 [ 594.207041][T27102] ____sys_sendmsg+0x31e/0x4a0 [ 594.207134][T27102] ___sys_sendmsg+0x17b/0x1d0 [ 594.207175][T27102] __x64_sys_sendmsg+0xd4/0x160 [ 594.207204][T27102] x64_sys_call+0x17ba/0x3000 [ 594.207278][T27102] do_syscall_64+0xca/0x2b0 [ 594.207306][T27102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.207359][T27102] RIP: 0033:0x7fea64eef749 [ 594.207376][T27102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.207394][T27102] RSP: 002b:00007fea63957038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.207412][T27102] RAX: ffffffffffffffda RBX: 00007fea65145fa0 RCX: 00007fea64eef749 [ 594.207488][T27102] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 594.207501][T27102] RBP: 00007fea63957090 R08: 0000000000000000 R09: 0000000000000000 [ 594.207515][T27102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.207528][T27102] R13: 00007fea65146038 R14: 00007fea65145fa0 R15: 00007fff95c34808 [ 594.207624][T27102] [ 594.209515][T27101] netlink: 'syz.6.7672': attribute type 1 has an invalid length. [ 594.452071][T20666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.495625][T27101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.506861][T27106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7674'. [ 594.697674][T26839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.126017][T27123] loop6: detected capacity change from 0 to 512 [ 595.133936][T27123] EXT4-fs (loop6): orphan cleanup on readonly fs [ 595.140606][T27123] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7678: bad orphan inode 13 [ 595.150962][T27123] ext4_test_bit(bit=12, block=18) = 1 [ 595.156445][T27123] is_bad_inode(inode)=0 [ 595.160583][T27123] NEXT_ORPHAN(inode)=2130706432 [ 595.165477][T27123] max_ino=32 [ 595.168758][T27123] i_nlink=1 [ 595.172356][T27123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.180962][ T3518] Bluetooth: hci1: command 0x1003 tx timeout [ 595.190835][T24436] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 595.190852][T27123] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 595.225912][T27123] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 595.245344][T27121] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 595.358359][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.411522][T27134] loop0: detected capacity change from 0 to 512 [ 595.418729][T27134] EXT4-fs: Ignoring removed i_version option [ 595.424909][T27134] EXT4-fs: Ignoring removed bh option [ 595.444272][T27134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.457475][T27134] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.677801][T21077] Bluetooth: hci0: Frame reassembly failed (-84) [ 595.679598][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bfc7800: rx timeout, send abort [ 595.692658][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bfc6200: rx timeout, send abort [ 595.693122][T27144] loop6: detected capacity change from 0 to 512 [ 595.701407][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bfc7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 595.707928][T27144] EXT4-fs: Ignoring removed nobh option [ 595.721792][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bfc6200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 595.754318][T27144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.767764][T27144] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.818206][T27149] loop8: detected capacity change from 0 to 512 [ 595.844967][T27149] EXT4-fs (loop8): orphan cleanup on readonly fs [ 595.858019][T27152] ip6gre1: entered promiscuous mode [ 595.863343][T27152] ip6gre1: entered allmulticast mode [ 595.868942][T27149] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.7685: bad orphan inode 13 [ 595.887259][T27149] ext4_test_bit(bit=12, block=18) = 1 [ 595.892707][T27149] is_bad_inode(inode)=0 [ 595.896887][T27149] NEXT_ORPHAN(inode)=2130706432 [ 595.901796][T27149] max_ino=32 [ 595.904983][T27149] i_nlink=1 [ 595.909085][T27149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.924565][T27149] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 596.020629][T26839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.084529][T27158] netlink: 'syz.8.7688': attribute type 1 has an invalid length. [ 596.126544][T27162] loop7: detected capacity change from 0 to 512 [ 596.129484][T27158] gretap1: entered promiscuous mode [ 596.133522][T27162] EXT4-fs: Ignoring removed i_version option [ 596.144755][T27162] EXT4-fs: Ignoring removed bh option [ 596.164882][T27162] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.177867][T27162] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.304194][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.324267][T27167] loop0: detected capacity change from 0 to 1024 [ 596.343022][T27167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.358804][T27167] IPv6: Can't replace route, no match found [ 596.760560][T27173] loop8: detected capacity change from 0 to 512 [ 596.768797][T27173] EXT4-fs: Ignoring removed i_version option [ 596.774867][T27173] EXT4-fs: Ignoring removed bh option [ 596.806059][T27173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.819258][T27173] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 597.013920][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.359771][T27179] loop7: detected capacity change from 0 to 1024 [ 597.389437][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.401219][T27179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.428549][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 597.428611][ T29] audit: type=1326 audit(1768103898.082:44705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.458904][ T29] audit: type=1326 audit(1768103898.082:44706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.482738][ T29] audit: type=1326 audit(1768103898.082:44707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.506554][ T29] audit: type=1326 audit(1768103898.082:44708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.530206][ T29] audit: type=1326 audit(1768103898.082:44709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.553845][ T29] audit: type=1326 audit(1768103898.092:44710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.577585][ T29] audit: type=1326 audit(1768103898.092:44711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.601265][ T29] audit: type=1326 audit(1768103898.092:44712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.625004][ T29] audit: type=1326 audit(1768103898.092:44713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.648671][ T29] audit: type=1326 audit(1768103898.092:44714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27182 comm="syz.0.7694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 597.681137][T27186] loop0: detected capacity change from 0 to 512 [ 597.688264][T27186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 597.741860][ T3518] Bluetooth: hci0: command 0x1003 tx timeout [ 597.743274][T24436] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 597.758643][T26839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.769071][T27186] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7695: Invalid block bitmap block 0 in block_group 0 [ 597.782844][T27186] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 597.791824][T27186] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.7695: attempt to clear invalid blocks 983261 len 1 [ 597.805932][T27186] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.7695: Invalid inode table block 0 in block_group 0 [ 597.818993][T27186] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 597.832584][T27186] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 597.842046][T27186] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.7695: Invalid inode table block 0 in block_group 0 [ 597.855090][T27186] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 597.866035][T27186] EXT4-fs error (device loop0): ext4_truncate:4635: inode #11: comm syz.0.7695: mark_inode_dirty error [ 597.877429][T27186] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 597.886467][T27193] loop2: detected capacity change from 0 to 512 [ 597.886626][T27186] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.7695: Invalid inode table block 0 in block_group 0 [ 597.897625][ T3492] IPVS: starting estimator thread 0... [ 597.905813][T27186] EXT4-fs (loop0): 1 truncate cleaned up [ 597.917289][T27186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.932553][T27193] EXT4-fs (loop2): orphan cleanup on readonly fs [ 597.939460][T27193] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7697: bad orphan inode 13 [ 597.953136][T27193] ext4_test_bit(bit=12, block=18) = 1 [ 597.958648][T27193] is_bad_inode(inode)=0 [ 597.962920][T27193] NEXT_ORPHAN(inode)=2130706432 [ 597.968027][T27193] max_ino=32 [ 597.971329][T27193] i_nlink=1 [ 598.009601][T27193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 598.022547][T27194] IPVS: using max 2352 ests per chain, 117600 per kthread [ 598.033382][T27189] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 598.046244][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.056217][T27189] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 598.082270][T27189] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 598.104900][T27200] loop8: detected capacity change from 0 to 512 [ 598.132427][T27200] EXT4-fs (loop8): orphan cleanup on readonly fs [ 598.149317][T27200] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.7699: bad orphan inode 13 [ 598.176815][T27208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7701'. [ 598.181129][T27200] ext4_test_bit(bit=12, block=18) = 1 [ 598.191106][T27200] is_bad_inode(inode)=0 [ 598.195288][T27200] NEXT_ORPHAN(inode)=2130706432 [ 598.200268][T27200] max_ino=32 [ 598.203569][T27200] i_nlink=1 [ 598.207149][T27200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 598.225505][T27200] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 598.296751][T27208] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7701'. [ 598.307530][T20666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.324035][T27208] loop0: detected capacity change from 0 to 164 [ 598.337097][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.353602][T27210] netlink: 'syz.2.7702': attribute type 1 has an invalid length. [ 598.362709][T26839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.379553][T27210] 8021q: adding VLAN 0 to HW filter on device bond9 [ 598.387649][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.398853][T27210] 8021q: adding VLAN 0 to HW filter on device bond9 [ 598.406248][T27210] bond9: (slave vxcan7): The slave device specified does not support setting the MAC address [ 598.418024][T27210] bond9: (slave vxcan7): Error -95 calling set_mac_address [ 598.438083][T27215] netlink: 'syz.8.7704': attribute type 29 has an invalid length. [ 598.452556][T27215] netlink: 400 bytes leftover after parsing attributes in process `syz.8.7704'. [ 598.484833][T27220] --map-set only usable from mangle table [ 598.508793][T27220] loop6: detected capacity change from 0 to 1024 [ 598.525725][T27220] ext4: Bad value for 'resgid' [ 598.530594][T27220] ext4: Bad value for 'resgid' [ 598.535592][T27221] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 598.542093][T27221] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 598.549860][T27221] vhci_hcd vhci_hcd.0: Device attached [ 598.629737][T27222] vhci_hcd: connection closed [ 598.629920][T21082] vhci_hcd vhci_hcd.8: stop threads [ 598.640022][T21082] vhci_hcd vhci_hcd.8: release socket [ 598.645423][T21082] vhci_hcd vhci_hcd.8: disconnect device [ 598.678514][T27227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7707'. [ 598.724747][T27229] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7708'. [ 598.926587][T27235] loop7: detected capacity change from 0 to 512 [ 598.933330][T27235] EXT4-fs: Ignoring removed bh option [ 598.939107][T27235] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 599.092391][T27235] EXT4-fs (loop7): 1 truncate cleaned up [ 599.098874][T27235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.256068][T27244] loop8: detected capacity change from 0 to 512 [ 599.282335][T27244] EXT4-fs: Ignoring removed i_version option [ 599.288392][T27244] EXT4-fs: Ignoring removed bh option [ 599.302712][T27244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.315553][T27244] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.371532][T26839] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.418450][T27253] loop8: detected capacity change from 0 to 1024 [ 599.426109][T27253] EXT4-fs: Ignoring removed bh option [ 599.442671][T27253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.462825][T27256] loop2: detected capacity change from 0 to 512 [ 599.470888][T27256] EXT4-fs (loop2): orphan cleanup on readonly fs [ 599.478019][T27256] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7713: bad orphan inode 13 [ 599.488569][T27256] ext4_test_bit(bit=12, block=18) = 1 [ 599.494051][T27256] is_bad_inode(inode)=0 [ 599.498286][T27256] NEXT_ORPHAN(inode)=2130706432 [ 599.503237][T27256] max_ino=32 [ 599.506630][T27256] i_nlink=1 [ 599.510333][T27256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 599.524729][T27256] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 599.541513][T27256] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 599.551642][T27256] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 599.625902][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.654510][T27260] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.7714: Allocating blocks 497-513 which overlap fs metadata [ 599.669919][T27260] EXT4-fs (loop8): Remounting filesystem read-only [ 599.670027][T27262] EXT4-fs (loop7): orphan cleanup on readonly fs [ 599.683796][T27262] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.7715: bad orphan inode 13 [ 599.694857][T27262] ext4_test_bit(bit=12, block=18) = 1 [ 599.700304][T27262] is_bad_inode(inode)=0 [ 599.704527][T27262] NEXT_ORPHAN(inode)=2130706432 [ 599.709401][T27262] max_ino=32 [ 599.712612][T27262] i_nlink=1 [ 599.716269][T27262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 599.736193][T27262] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 599.745886][T20666] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.767454][T27266] --map-set only usable from mangle table [ 599.778426][T27266] ext4: Bad value for 'resgid' [ 599.783281][T27266] ext4: Bad value for 'resgid' [ 599.824457][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.862188][T27260] EXT4-fs (loop8): pa ffff888107dfebd0: logic 256, phys. 385, len 8 [ 599.892490][T27260] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.909313][T27278] netlink: 'syz.0.7723': attribute type 1 has an invalid length. [ 599.923308][T27276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.937123][T27278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.950058][T21082] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.962833][T27276] IPv6: Can't replace route, no match found [ 599.976781][T27278] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.984654][T27278] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 599.996548][T27278] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 600.035748][T21082] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.109730][T21082] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.166964][T21082] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.270636][T21082] bridge_slave_1: left allmulticast mode [ 600.276451][T21082] bridge_slave_1: left promiscuous mode [ 600.282165][T21082] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.302129][T21082] bridge_slave_0: left allmulticast mode [ 600.307927][T21082] bridge_slave_0: left promiscuous mode [ 600.313736][T21082] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.404752][T21082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.417069][T21082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.427345][T21082] bond0 (unregistering): Released all slaves [ 600.543287][T21082] hsr_slave_0: left promiscuous mode [ 600.549161][T21082] hsr_slave_1: left promiscuous mode [ 600.554997][T21082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.562433][T21082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.570192][T21082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.577794][T21082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.589783][T21082] veth1_macvtap: left promiscuous mode [ 600.601297][T21082] veth0_macvtap: left promiscuous mode [ 600.607413][T21082] veth1_vlan: left promiscuous mode [ 600.613484][T21082] veth0_vlan: left promiscuous mode [ 600.615542][T27301] EXT4-fs: Ignoring removed i_version option [ 600.625012][T27301] EXT4-fs: Ignoring removed bh option [ 600.655313][T27301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.674179][T27301] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 600.788467][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.852183][T21082] team0 (unregistering): Port device team_slave_1 removed [ 600.865427][T27309] netlink: 'syz.2.7729': attribute type 1 has an invalid length. [ 600.876037][T21082] team0 (unregistering): Port device team_slave_0 removed [ 600.918990][T27309] 8021q: adding VLAN 0 to HW filter on device bond10 [ 600.953107][T27313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 600.960587][T27313] bond10: (slave vxcan7): The slave device specified does not support setting the MAC address [ 600.973832][T27313] bond10: (slave vxcan7): Error -95 calling set_mac_address [ 601.017481][T27315] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 601.035781][T27310] bridge0: entered promiscuous mode [ 601.043297][T27310] bridge0: port 3(macsec1) entered blocking state [ 601.049862][T27310] bridge0: port 3(macsec1) entered disabled state [ 601.057019][T27310] macsec1: entered allmulticast mode [ 601.062353][T27310] bridge0: entered allmulticast mode [ 601.069158][T27310] macsec1: left allmulticast mode [ 601.074289][T27310] bridge0: left allmulticast mode [ 601.080248][T27310] bridge0: left promiscuous mode [ 601.095187][T27287] chnl_net:caif_netlink_parms(): no params data found [ 601.189340][T27287] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.196622][T27287] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.206401][T27287] bridge_slave_0: entered allmulticast mode [ 601.213947][T27287] bridge_slave_0: entered promiscuous mode [ 601.221807][T27287] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.229185][T27287] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.236995][T27287] bridge_slave_1: entered allmulticast mode [ 601.244277][T27287] bridge_slave_1: entered promiscuous mode [ 601.274079][T27287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.286834][T27287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.314867][T27287] team0: Port device team_slave_0 added [ 601.323183][T27287] team0: Port device team_slave_1 added [ 601.351931][T27287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.358915][T27287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.384905][T27287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.397955][T27287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.404980][T27287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.431875][T27287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.500500][T27287] hsr_slave_0: entered promiscuous mode [ 601.507475][T27287] hsr_slave_1: entered promiscuous mode [ 601.517227][T27287] debugfs: 'hsr0' already exists in 'hsr' [ 601.523013][T27287] Cannot create hsr debugfs directory [ 601.615102][T21082] IPVS: stop unused estimator thread 0... [ 601.723560][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.724654][T27287] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 601.741870][T27287] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 601.752544][T27287] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 601.763079][T27287] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 601.809433][T27287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.825021][T27287] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.836599][T21089] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.843680][T21089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.854840][T27332] EXT4-fs: Ignoring removed i_version option [ 601.860993][T27332] EXT4-fs: Ignoring removed bh option [ 601.872340][T27335] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7733'. [ 601.873386][T21089] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.888933][T21089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.911947][T27332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.951374][T27332] ext4 filesystem being mounted at /429/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 601.968172][T27342] netlink: 'syz.7.7735': attribute type 1 has an invalid length. [ 602.074959][T27342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 602.090621][T27345] 8021q: adding VLAN 0 to HW filter on device bond5 [ 602.098152][T27345] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 602.109514][T27345] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 602.210342][T27357] netlink: 'syz.6.7737': attribute type 1 has an invalid length. [ 602.223395][T27287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.243920][T27357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 602.277756][T27361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 602.286383][T27361] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 602.299288][T27361] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 602.413667][T27287] veth0_vlan: entered promiscuous mode [ 602.422088][T27287] veth1_vlan: entered promiscuous mode [ 602.437429][T27287] veth0_macvtap: entered promiscuous mode [ 602.447777][T27287] veth1_macvtap: entered promiscuous mode [ 602.461742][T27287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.473323][T27287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.484759][ T4636] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.498341][ T4636] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.511352][ T4636] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.525610][ T4636] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.562821][T27374] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7725'. [ 602.600868][T27376] set_capacity_and_notify: 6 callbacks suppressed [ 602.600881][T27376] loop9: detected capacity change from 0 to 512 [ 602.615703][T27376] EXT4-fs (loop9): orphan cleanup on readonly fs [ 602.623537][T27376] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7738: bad orphan inode 13 [ 602.633852][T27376] ext4_test_bit(bit=12, block=18) = 1 [ 602.639316][T27376] is_bad_inode(inode)=0 [ 602.643542][T27376] NEXT_ORPHAN(inode)=2130706432 [ 602.648493][T27376] max_ino=32 [ 602.651712][T27376] i_nlink=1 [ 602.665499][T27376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 602.682933][T27376] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 602.750683][T27384] bridge0: entered promiscuous mode [ 602.758058][T27384] bridge0: port 3(macsec1) entered blocking state [ 602.764671][T27384] bridge0: port 3(macsec1) entered disabled state [ 602.772851][T27382] IPv6: Can't replace route, no match found [ 602.789166][T27384] macsec1: entered allmulticast mode [ 602.794748][T27384] bridge0: entered allmulticast mode [ 602.803096][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 602.803108][ T29] audit: type=1326 audit(1768103903.462:45006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27385 comm="syz.7.7743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648116f749 code=0x7ffc0000 [ 602.808498][T27389] netlink: 'syz.9.7742': attribute type 10 has an invalid length. [ 602.835706][ T29] audit: type=1326 audit(1768103903.462:45007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27385 comm="syz.7.7743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f648116f749 code=0x7ffc0000 [ 602.865119][ T29] audit: type=1326 audit(1768103903.462:45008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27385 comm="syz.7.7743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648116f749 code=0x7ffc0000 [ 602.889409][T27384] macsec1: left allmulticast mode [ 602.892280][T27390] netlink: 'syz.9.7742': attribute type 10 has an invalid length. [ 602.894560][T27384] bridge0: left allmulticast mode [ 602.919362][T27384] bridge0: left promiscuous mode [ 602.926725][T27392] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7744'. [ 602.937581][ T29] audit: type=1326 audit(1768103903.582:45009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.6.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 602.961336][ T29] audit: type=1326 audit(1768103903.582:45010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.6.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 602.985355][ T29] audit: type=1326 audit(1768103903.582:45011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.6.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 603.009372][ T29] audit: type=1326 audit(1768103903.582:45012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.6.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 603.033177][ T29] audit: type=1326 audit(1768103903.582:45013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.6.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 603.057423][ T29] audit: type=1326 audit(1768103903.582:45014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.6.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 603.081886][ T29] audit: type=1326 audit(1768103903.582:45015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27393 comm="syz.6.7745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f903ebdf749 code=0x7ffc0000 [ 603.199875][T27389] team0: Port device dummy0 added [ 603.208720][T27390] team0: Port device dummy0 removed [ 603.223097][T27390] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 603.277682][T27400] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7747'. [ 603.842927][T27409] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7748'. [ 603.962788][T27414] loop9: detected capacity change from 0 to 8192 [ 604.025268][T27416] loop9: detected capacity change from 0 to 512 [ 604.037718][T27416] vfat: Bad value for 'shortname' [ 604.189884][T27420] loop7: detected capacity change from 0 to 512 [ 604.202977][T27416] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 604.216003][T27416] vhci_hcd vhci_hcd.2: invalid port number 96 [ 604.222266][T27416] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 604.242754][T27420] vfat: Bad value for 'shortname' [ 604.285597][T27424] netlink: 'syz.2.7755': attribute type 1 has an invalid length. [ 604.317420][T27424] 8021q: adding VLAN 0 to HW filter on device bond11 [ 604.345961][T27424] 8021q: adding VLAN 0 to HW filter on device bond11 [ 604.361110][T27424] bond11: (slave vxcan7): The slave device specified does not support setting the MAC address [ 604.385180][T27428] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 604.404819][T27428] vhci_hcd vhci_hcd.2: invalid port number 96 [ 604.411245][T27428] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 604.426030][T27424] bond11: (slave vxcan7): Error -95 calling set_mac_address [ 604.637839][T27437] bridge0: entered promiscuous mode [ 604.644564][T27437] bridge0: port 3(macsec1) entered blocking state [ 604.651245][T27437] bridge0: port 3(macsec1) entered disabled state [ 604.658235][T27437] macsec1: entered allmulticast mode [ 604.663851][T27437] bridge0: entered allmulticast mode [ 604.670218][T27437] macsec1: left allmulticast mode [ 604.675552][T27437] bridge0: left allmulticast mode [ 604.681424][T27437] bridge0: left promiscuous mode [ 604.695844][T27439] loop6: detected capacity change from 0 to 128 [ 604.723530][T27439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7758'. [ 604.744288][T27444] loop0: detected capacity change from 0 to 128 [ 604.751358][T27444] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 604.763717][T27444] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 604.775349][T27444] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7759'. [ 604.786603][T21106] Bluetooth: hci0: Frame reassembly failed (-84) [ 604.968900][T27454] loop9: detected capacity change from 0 to 512 [ 604.977231][T27454] EXT4-fs (loop9): orphan cleanup on readonly fs [ 604.984900][T27454] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7762: bad orphan inode 13 [ 604.995440][T27454] ext4_test_bit(bit=12, block=18) = 1 [ 605.000849][T27454] is_bad_inode(inode)=0 [ 605.005192][T27454] NEXT_ORPHAN(inode)=2130706432 [ 605.010090][T27454] max_ino=32 [ 605.013415][T27454] i_nlink=1 [ 605.018567][T27454] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 605.041728][T27454] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 605.073260][T27451] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 605.084872][T27459] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7763'. [ 605.162863][T27463] loop2: detected capacity change from 0 to 512 [ 605.230844][T27467] bridge0: entered promiscuous mode [ 605.238006][T27467] bridge0: port 1(macsec1) entered blocking state [ 605.244832][T27467] bridge0: port 1(macsec1) entered disabled state [ 605.251897][T27467] macsec1: entered allmulticast mode [ 605.258557][T27467] bridge0: entered allmulticast mode [ 605.265093][T27467] macsec1: left allmulticast mode [ 605.270335][T27467] bridge0: left allmulticast mode [ 605.276284][T27467] bridge0: left promiscuous mode [ 605.293370][T27468] loop2: detected capacity change from 0 to 1024 [ 605.300507][T27468] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 605.322713][T27470] loop9: detected capacity change from 0 to 512 [ 605.344194][T27470] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.903272][T21077] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 605.937461][T27479] netlink: 'syz.0.7771': attribute type 1 has an invalid length. [ 605.996733][T27479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 606.015920][T27481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 606.024666][T27481] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 606.037052][T27481] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 606.066577][T27479] macvlan2: entered promiscuous mode [ 606.072047][T27479] macvlan2: entered allmulticast mode [ 606.625446][T27488] netlink: 'syz.9.7773': attribute type 16 has an invalid length. [ 606.633458][T27488] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7773'. [ 606.660374][T27490] FAULT_INJECTION: forcing a failure. [ 606.660374][T27490] name failslab, interval 1, probability 0, space 0, times 0 [ 606.673152][T27490] CPU: 1 UID: 0 PID: 27490 Comm: syz.9.7774 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 606.673186][T27490] Tainted: [W]=WARN [ 606.673193][T27490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.673205][T27490] Call Trace: [ 606.673214][T27490] [ 606.673223][T27490] __dump_stack+0x1d/0x30 [ 606.673258][T27490] dump_stack_lvl+0x95/0xd0 [ 606.673279][T27490] dump_stack+0x15/0x1b [ 606.673296][T27490] should_fail_ex+0x265/0x280 [ 606.673321][T27490] should_failslab+0x8c/0xb0 [ 606.673420][T27490] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 606.673443][T27490] ? __d_alloc+0x37/0x340 [ 606.673464][T27490] ? get_pid_task+0x96/0xd0 [ 606.673513][T27490] __d_alloc+0x37/0x340 [ 606.673542][T27490] d_alloc_pseudo+0x1e/0x80 [ 606.673569][T27490] alloc_file_pseudo+0x71/0x160 [ 606.673607][T27490] ? alloc_fd+0x38a/0x3c0 [ 606.673625][T27490] anon_inode_getfile_fmode+0xa5/0x140 [ 606.673791][T27490] do_eventfd+0xf1/0x1b0 [ 606.673809][T27490] __x64_sys_eventfd+0x20/0x30 [ 606.673867][T27490] x64_sys_call+0x2a20/0x3000 [ 606.673893][T27490] do_syscall_64+0xca/0x2b0 [ 606.673927][T27490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.674006][T27490] RIP: 0033:0x7f35b8e6f749 [ 606.674024][T27490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.674043][T27490] RSP: 002b:00007f35b78cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 606.674061][T27490] RAX: ffffffffffffffda RBX: 00007f35b90c5fa0 RCX: 00007f35b8e6f749 [ 606.674072][T27490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 606.674083][T27490] RBP: 00007f35b78cf090 R08: 0000000000000000 R09: 0000000000000000 [ 606.674093][T27490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.674139][T27490] R13: 00007f35b90c6038 R14: 00007f35b90c5fa0 R15: 00007ffe13a6b4a8 [ 606.674156][T27490] [ 606.875262][T24436] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 606.880993][T10929] Bluetooth: hci0: command 0x1003 tx timeout [ 606.900732][T27494] netlink: 128 bytes leftover after parsing attributes in process `syz.9.7776'. [ 607.063762][T27502] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7779'. [ 607.075016][T27502] IPVS: stopping backup sync thread 27503 ... [ 607.079179][T27503] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 607.103788][ T3518] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 607.104385][T24436] Bluetooth: hci1: command 0x1003 tx timeout [ 607.200844][T27505] IPv6: Can't replace route, no match found [ 607.301884][T27511] EXT4-fs: Ignoring removed i_version option [ 607.307973][T27511] EXT4-fs: Ignoring removed bh option [ 607.328801][T27511] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.500740][T27521] EXT4-fs: Ignoring removed i_version option [ 607.507194][T27521] EXT4-fs: Ignoring removed bh option [ 607.553480][T27521] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 607.789901][T27530] FAULT_INJECTION: forcing a failure. [ 607.789901][T27530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.803303][T27530] CPU: 1 UID: 0 PID: 27530 Comm: syz.2.7788 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 607.803347][T27530] Tainted: [W]=WARN [ 607.803353][T27530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.803416][T27530] Call Trace: [ 607.803421][T27530] [ 607.803428][T27530] __dump_stack+0x1d/0x30 [ 607.803455][T27530] dump_stack_lvl+0x95/0xd0 [ 607.803477][T27530] dump_stack+0x15/0x1b [ 607.803536][T27530] should_fail_ex+0x265/0x280 [ 607.803557][T27530] should_fail+0xb/0x20 [ 607.803576][T27530] should_fail_usercopy+0x1a/0x20 [ 607.803651][T27530] _copy_from_user+0x1c/0xb0 [ 607.803679][T27530] memdup_user_nul+0x5f/0xe0 [ 607.803695][T27530] sel_write_validatetrans+0x19c/0x370 [ 607.803715][T27530] ? __pfx_sel_write_validatetrans+0x10/0x10 [ 607.803806][T27530] vfs_write+0x269/0x960 [ 607.803822][T27530] ? __rcu_read_unlock+0x4f/0x70 [ 607.803904][T27530] ? __fget_files+0x184/0x1c0 [ 607.803923][T27530] ? mutex_lock+0x58/0x90 [ 607.803950][T27530] ksys_write+0xda/0x1a0 [ 607.803971][T27530] __x64_sys_write+0x40/0x50 [ 607.803986][T27530] x64_sys_call+0x2847/0x3000 [ 607.804089][T27530] do_syscall_64+0xca/0x2b0 [ 607.804198][T27530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.804219][T27530] RIP: 0033:0x7fe73929f749 [ 607.804233][T27530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.804251][T27530] RSP: 002b:00007fe737cff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 607.804273][T27530] RAX: ffffffffffffffda RBX: 00007fe7394f5fa0 RCX: 00007fe73929f749 [ 607.804287][T27530] RDX: 0000000000000079 RSI: 0000000000000000 RDI: 0000000000000005 [ 607.804298][T27530] RBP: 00007fe737cff090 R08: 0000000000000000 R09: 0000000000000000 [ 607.804319][T27530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.804330][T27530] R13: 00007fe7394f6038 R14: 00007fe7394f5fa0 R15: 00007ffedc752f58 [ 607.804346][T27530] [ 608.092506][T27535] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7789'. [ 608.112437][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 608.112453][ T29] audit: type=1326 audit(1768103908.772:45131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.174519][ T29] audit: type=1326 audit(1768103908.772:45132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.198402][ T29] audit: type=1326 audit(1768103908.772:45133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.222439][ T29] audit: type=1326 audit(1768103908.772:45134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.246424][ T29] audit: type=1326 audit(1768103908.772:45135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.270469][ T29] audit: type=1326 audit(1768103908.772:45136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.284250][T27541] --map-set only usable from mangle table [ 608.294334][ T29] audit: type=1326 audit(1768103908.772:45137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.324040][ T29] audit: type=1326 audit(1768103908.772:45138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.348298][ T29] audit: type=1326 audit(1768103908.772:45139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.372149][ T29] audit: type=1326 audit(1768103908.772:45140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27537 comm="syz.0.7790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 608.425280][T27541] set_capacity_and_notify: 3 callbacks suppressed [ 608.425329][T27541] loop0: detected capacity change from 0 to 1024 [ 608.438692][T21076] Bluetooth: hci0: Frame reassembly failed (-84) [ 608.461079][T27541] ext4: Bad value for 'resgid' [ 608.465965][T27541] ext4: Bad value for 'resgid' [ 608.586642][T27563] loop2: detected capacity change from 0 to 512 [ 608.661386][T27563] EXT4-fs (loop2): orphan cleanup on readonly fs [ 608.668550][T27563] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7798: bad orphan inode 13 [ 608.689310][T27563] ext4_test_bit(bit=12, block=18) = 1 [ 608.694766][T27563] is_bad_inode(inode)=0 [ 608.699053][T27563] NEXT_ORPHAN(inode)=2130706432 [ 608.704362][T27563] max_ino=32 [ 608.707618][T27563] i_nlink=1 [ 608.714378][T27557] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 609.012776][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7802'. [ 609.024878][T27563] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 609.041622][T27557] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 609.050397][T27574] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 609.060501][T27569] IPVS: stopping backup sync thread 27574 ... [ 609.176885][T27578] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7805'. [ 609.744492][T27592] --map-set only usable from mangle table [ 609.767582][T27592] loop2: detected capacity change from 0 to 1024 [ 609.781390][T27592] ext4: Bad value for 'resgid' [ 609.786558][T27592] ext4: Bad value for 'resgid' [ 609.894511][T27597] netlink: 'syz.2.7811': attribute type 1 has an invalid length. [ 609.921703][T27597] 8021q: adding VLAN 0 to HW filter on device bond12 [ 609.945019][T27597] 8021q: adding VLAN 0 to HW filter on device bond12 [ 609.954152][T27597] bond12: (slave vxcan7): The slave device specified does not support setting the MAC address [ 609.974759][T27597] bond12: (slave vxcan7): Error -95 calling set_mac_address [ 610.141862][T27603] bridge0: entered promiscuous mode [ 610.148642][T27603] bridge0: port 3(macsec1) entered blocking state [ 610.155312][T27603] bridge0: port 3(macsec1) entered disabled state [ 610.161986][T27603] macsec1: entered allmulticast mode [ 610.167346][T27603] bridge0: entered allmulticast mode [ 610.173336][T27603] macsec1: left allmulticast mode [ 610.178595][T27603] bridge0: left allmulticast mode [ 610.184205][T27603] bridge0: left promiscuous mode [ 610.278141][T27606] loop0: detected capacity change from 0 to 1024 [ 610.285443][T27606] EXT4-fs: inline encryption not supported [ 610.460944][ T3518] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 610.566713][T27615] loop7: detected capacity change from 0 to 512 [ 610.574275][T27615] EXT4-fs: Ignoring removed i_version option [ 610.580340][T27615] EXT4-fs: Ignoring removed bh option [ 610.592505][T27615] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 610.647172][T27624] sd 0:0:1:0: device reset [ 610.712524][T27627] loop2: detected capacity change from 0 to 512 [ 610.724775][T27627] EXT4-fs (loop2): orphan cleanup on readonly fs [ 610.731666][T27627] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.7817: bad orphan inode 13 [ 610.745564][T27627] ext4_test_bit(bit=12, block=18) = 1 [ 610.751042][T27627] is_bad_inode(inode)=0 [ 610.755305][T27627] NEXT_ORPHAN(inode)=2130706432 [ 610.760200][T27627] max_ino=32 [ 610.763451][T27627] i_nlink=1 [ 610.773702][T27627] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 610.811236][T27627] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 610.821464][T27623] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 611.002944][T27632] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7819'. [ 611.132911][T27640] loop6: detected capacity change from 0 to 512 [ 611.142105][T27640] EXT4-fs (loop6): orphan cleanup on readonly fs [ 611.148783][T27640] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7821: bad orphan inode 13 [ 611.159273][T27640] ext4_test_bit(bit=12, block=18) = 1 [ 611.164721][T27640] is_bad_inode(inode)=0 [ 611.168977][T27640] NEXT_ORPHAN(inode)=2130706432 [ 611.173929][T27640] max_ino=32 [ 611.177136][T27640] i_nlink=1 [ 611.184543][T27640] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 611.202194][T27640] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 611.213721][T27640] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 611.256692][T27645] tipc: Enabled bearer , priority 0 [ 611.267165][T27645] syzkaller0: entered promiscuous mode [ 611.272802][T27645] syzkaller0: entered allmulticast mode [ 611.284792][T27645] tipc: Resetting bearer [ 611.295101][T27648] loop0: detected capacity change from 0 to 512 [ 611.301745][T27648] EXT4-fs: Ignoring removed i_version option [ 611.306783][T27644] tipc: Resetting bearer [ 611.307872][T27648] EXT4-fs: Ignoring removed bh option [ 611.320803][T27644] tipc: Disabling bearer [ 611.333053][T27648] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 611.486874][T27655] loop9: detected capacity change from 0 to 512 [ 611.497165][T27655] vfat: Bad value for 'shortname' [ 611.539321][T27659] loop2: detected capacity change from 0 to 164 [ 611.561875][T27659] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 611.577754][T27659] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 611.598883][T27659] Symlink component flag not implemented [ 611.604594][T27659] Symlink component flag not implemented [ 611.627618][T27666] EXT4-fs (loop6): orphan cleanup on readonly fs [ 611.636285][T27659] Symlink component flag not implemented (7) [ 611.642327][T27659] Symlink component flag not implemented (116) [ 611.666128][T27666] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7829: bad orphan inode 13 [ 611.711061][T27666] ext4_test_bit(bit=12, block=18) = 1 [ 611.716569][T27666] is_bad_inode(inode)=0 [ 611.720945][T27666] NEXT_ORPHAN(inode)=2130706432 [ 611.725823][T27666] max_ino=32 [ 611.729088][T27666] i_nlink=1 [ 611.739168][T27673] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7830'. [ 611.790477][T27662] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 611.864523][T27666] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 611.877506][T27662] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 611.907693][T27683] EXT4-fs: Ignoring removed i_version option [ 611.913900][T27683] EXT4-fs: Ignoring removed bh option [ 611.923442][T27683] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 612.163394][T27693] EXT4-fs: Ignoring removed i_version option [ 612.169523][T27693] EXT4-fs: Ignoring removed bh option [ 612.215190][T27693] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 612.723222][T27706] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.932711][T27716] vfat: Bad value for 'shortname' [ 612.943633][T27718] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7844'. [ 613.078515][T27726] EXT4-fs: Ignoring removed i_version option [ 613.084654][T27726] EXT4-fs: Ignoring removed bh option [ 613.105287][T27726] ext4 filesystem being mounted at /457/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 613.264646][T27738] netlink: 128 bytes leftover after parsing attributes in process `syz.6.7850'. [ 613.401330][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 613.401342][ T29] audit: type=1326 audit(1768103914.062:45333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.450396][T27744] set_capacity_and_notify: 7 callbacks suppressed [ 613.450411][T27744] loop0: detected capacity change from 0 to 1024 [ 613.490608][T27744] EXT4-fs: inline encryption not supported [ 613.564683][ T29] audit: type=1326 audit(1768103914.092:45334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.588471][ T29] audit: type=1326 audit(1768103914.092:45335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.612474][ T29] audit: type=1326 audit(1768103914.092:45336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.636248][ T29] audit: type=1326 audit(1768103914.092:45337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.660420][ T29] audit: type=1326 audit(1768103914.092:45338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.684270][ T29] audit: type=1326 audit(1768103914.092:45339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.708212][ T29] audit: type=1326 audit(1768103914.092:45340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.732234][ T29] audit: type=1326 audit(1768103914.092:45341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fea64eef749 code=0x7ffc0000 [ 613.756025][ T29] audit: type=1326 audit(1768103914.092:45342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27739 comm="syz.0.7851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea64eef783 code=0x7ffc0000 [ 613.866238][T27753] loop0: detected capacity change from 0 to 512 [ 613.875252][T27751] loop7: detected capacity change from 0 to 1024 [ 613.883839][T27751] EXT4-fs: inline encryption not supported [ 613.912452][T27760] loop0: detected capacity change from 0 to 1024 [ 613.960427][T27760] IPv6: Can't replace route, no match found [ 613.960434][T27761] loop9: detected capacity change from 0 to 512 [ 613.967824][T27761] EXT4-fs (loop9): orphan cleanup on readonly fs [ 613.979749][T27761] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7856: bad orphan inode 13 [ 613.990511][T27761] ext4_test_bit(bit=12, block=18) = 1 [ 613.996097][T27761] is_bad_inode(inode)=0 [ 613.998360][T27765] loop2: detected capacity change from 0 to 512 [ 614.000500][T27761] NEXT_ORPHAN(inode)=2130706432 [ 614.011871][T27761] max_ino=32 [ 614.015221][T27761] i_nlink=1 [ 614.032865][T27765] vfat: Bad value for 'shortname' [ 614.038063][T27755] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 614.062263][T27755] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 614.076403][T27770] netlink: 'syz.6.7860': attribute type 1 has an invalid length. [ 614.086370][T27755] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 614.104681][T27770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.126541][T27770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.139931][T27770] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 614.152171][T27770] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 614.165275][T27776] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7861'. [ 614.292587][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 614.309955][T27780] loop7: detected capacity change from 0 to 512 [ 614.327421][T27782] --map-set only usable from mangle table [ 614.333834][T27780] EXT4-fs: Ignoring removed nobh option [ 614.348459][T27782] loop9: detected capacity change from 0 to 1024 [ 614.359012][T27780] ext4 filesystem being mounted at /280/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.359889][T27782] ext4: Bad value for 'resgid' [ 614.374618][T27782] ext4: Bad value for 'resgid' [ 614.805844][T27800] loop0: detected capacity change from 0 to 512 [ 614.818687][T27802] loop6: detected capacity change from 0 to 512 [ 614.827124][T27802] EXT4-fs: Ignoring removed i_version option [ 614.833188][T27802] EXT4-fs: Ignoring removed bh option [ 614.843932][T27802] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 614.898869][T27807] EXT4-fs: inline encryption not supported [ 614.919364][T27798] EXT4-fs (loop9): 1 orphan inode deleted [ 614.929180][T27798] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.943721][T21114] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:64: Failed to release dquot type 1 [ 614.955401][T27798] FAULT_INJECTION: forcing a failure. [ 614.955401][T27798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.955503][T27798] CPU: 1 UID: 0 PID: 27798 Comm: syz.9.7867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 614.955534][T27798] Tainted: [W]=WARN [ 614.955541][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.955613][T27798] Call Trace: [ 614.955620][T27798] [ 614.955628][T27798] __dump_stack+0x1d/0x30 [ 614.955653][T27798] dump_stack_lvl+0x95/0xd0 [ 614.955716][T27798] dump_stack+0x15/0x1b [ 614.955791][T27798] should_fail_ex+0x265/0x280 [ 614.955814][T27798] should_fail+0xb/0x20 [ 614.955833][T27798] should_fail_usercopy+0x1a/0x20 [ 614.955856][T27798] strncpy_from_user+0x27/0x260 [ 614.955949][T27798] getname_flags+0xae/0x3b0 [ 614.955973][T27798] do_sys_openat2+0x60/0x150 [ 614.956053][T27798] __x64_sys_openat+0xf2/0x120 [ 614.956081][T27798] x64_sys_call+0x2b07/0x3000 [ 614.956133][T27798] do_syscall_64+0xca/0x2b0 [ 614.956166][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.956188][T27798] RIP: 0033:0x7f35b8e6df90 [ 614.956203][T27798] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 614.956236][T27798] RSP: 002b:00007f35b78ceb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 614.956256][T27798] RAX: ffffffffffffffda RBX: 0000000000008002 RCX: 00007f35b8e6df90 [ 614.956269][T27798] RDX: 0000000000008002 RSI: 00007f35b78cec10 RDI: 00000000ffffff9c [ 614.956282][T27798] RBP: 00007f35b78cec10 R08: 0000000000000000 R09: 002367732f766564 [ 614.956295][T27798] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 614.956308][T27798] R13: 00007f35b90c6038 R14: 00007f35b90c5fa0 R15: 00007ffe13a6b4a8 [ 614.956348][T27798] [ 615.023843][T27807] EXT4-fs mount: 45 callbacks suppressed [ 615.023858][T27807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.028783][T27287] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.223782][T27815] bridge0: entered promiscuous mode [ 615.229815][T27815] bridge0: port 1(macsec1) entered blocking state [ 615.236456][T27815] bridge0: port 1(macsec1) entered disabled state [ 615.245366][T27815] macsec1: entered allmulticast mode [ 615.250731][T27815] bridge0: entered allmulticast mode [ 615.268280][T27815] macsec1: left allmulticast mode [ 615.273372][T27815] bridge0: left allmulticast mode [ 615.279521][T21194] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.302222][T27818] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 615.311276][T27815] bridge0: left promiscuous mode [ 615.503806][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7874'. [ 615.688146][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.721690][T27832] EXT4-fs (loop6): orphan cleanup on readonly fs [ 615.728426][T27832] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7875: bad orphan inode 13 [ 615.738745][T27832] ext4_test_bit(bit=12, block=18) = 1 [ 615.744203][T27832] is_bad_inode(inode)=0 [ 615.748352][T27832] NEXT_ORPHAN(inode)=2130706432 [ 615.753235][T27832] max_ino=32 [ 615.756430][T27832] i_nlink=1 [ 615.760277][T27832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 615.778874][T27832] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 615.823661][T27840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.839067][T27840] IPv6: Can't replace route, no match found [ 615.882322][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.912867][T27845] bridge0: entered promiscuous mode [ 615.920279][T27845] bridge0: port 3(macsec1) entered blocking state [ 615.926818][T27845] bridge0: port 3(macsec1) entered disabled state [ 615.934081][T27845] macsec1: entered allmulticast mode [ 615.939398][T27845] bridge0: entered allmulticast mode [ 615.945526][T27845] macsec1: left allmulticast mode [ 615.950660][T27845] bridge0: left allmulticast mode [ 615.957432][T27845] bridge0: left promiscuous mode [ 616.075520][T27850] EXT4-fs (loop6): orphan cleanup on readonly fs [ 616.083076][T27850] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.7881: bad orphan inode 13 [ 616.093543][T27850] ext4_test_bit(bit=12, block=18) = 1 [ 616.098946][T27850] is_bad_inode(inode)=0 [ 616.103132][T27850] NEXT_ORPHAN(inode)=2130706432 [ 616.108006][T27850] max_ino=32 [ 616.111229][T27850] i_nlink=1 [ 616.114845][T27850] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.130271][T27850] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 616.228685][T24805] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.301005][ T3518] Bluetooth: hci0: command 0x1003 tx timeout [ 616.307145][T24436] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 616.422220][T27860] bridge0: entered promiscuous mode [ 616.433696][T27860] bridge0: port 3(macsec1) entered blocking state [ 616.440187][T27860] bridge0: port 3(macsec1) entered disabled state [ 616.447366][T27860] macsec1: entered allmulticast mode [ 616.453107][T27860] bridge0: entered allmulticast mode [ 616.475992][T27860] macsec1: left allmulticast mode [ 616.479669][T27862] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 616.481187][T27860] bridge0: left allmulticast mode [ 616.495969][T27860] bridge0: left promiscuous mode [ 616.542390][T27843] ================================================================== [ 616.550514][T27843] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 616.558866][T27843] [ 616.561193][T27843] write to 0xffff88811ba06a34 of 4 bytes by task 27840 on cpu 1: [ 616.568912][T27843] xas_set_mark+0x12b/0x140 [ 616.573461][T27843] __folio_start_writeback+0x155/0x340 [ 616.578939][T27843] ext4_bio_write_folio+0x5ad/0x9f0 [ 616.584161][T27843] mpage_process_page_bufs+0x4a1/0x620 [ 616.589627][T27843] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 616.595565][T27843] ext4_do_writepages+0x9f6/0x27e0 [ 616.600782][T27843] ext4_writepages+0x179/0x300 [ 616.605546][T27843] do_writepages+0x1c6/0x310 [ 616.610162][T27843] file_write_and_wait_range+0x156/0x2c0 [ 616.615803][T27843] generic_buffers_fsync_noflush+0x45/0x130 [ 616.621800][T27843] ext4_sync_file+0x1ab/0x690 [ 616.626484][T27843] vfs_fsync_range+0x10d/0x130 [ 616.631255][T27843] ext4_buffered_write_iter+0x34f/0x3c0 [ 616.636861][T27843] ext4_file_write_iter+0x387/0xf60 [ 616.642085][T27843] iter_file_splice_write+0x66b/0xa20 [ 616.647459][T27843] direct_splice_actor+0x156/0x2a0 [ 616.652829][T27843] splice_direct_to_actor+0x312/0x680 [ 616.658293][T27843] do_splice_direct+0xda/0x150 [ 616.663054][T27843] do_sendfile+0x380/0x650 [ 616.667823][T27843] __x64_sys_sendfile64+0x105/0x150 [ 616.673108][T27843] x64_sys_call+0x2db1/0x3000 [ 616.677794][T27843] do_syscall_64+0xca/0x2b0 [ 616.682327][T27843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.688256][T27843] [ 616.690587][T27843] read to 0xffff88811ba06a34 of 4 bytes by task 27843 on cpu 0: [ 616.698217][T27843] file_write_and_wait_range+0x10e/0x2c0 [ 616.703873][T27843] generic_buffers_fsync_noflush+0x45/0x130 [ 616.709887][T27843] ext4_sync_file+0x1ab/0x690 [ 616.714583][T27843] vfs_fsync_range+0x10d/0x130 [ 616.719440][T27843] ext4_buffered_write_iter+0x34f/0x3c0 [ 616.725021][T27843] ext4_file_write_iter+0x387/0xf60 [ 616.730243][T27843] iter_file_splice_write+0x66b/0xa20 [ 616.735628][T27843] direct_splice_actor+0x156/0x2a0 [ 616.740752][T27843] splice_direct_to_actor+0x312/0x680 [ 616.746134][T27843] do_splice_direct+0xda/0x150 [ 616.750922][T27843] do_sendfile+0x380/0x650 [ 616.755361][T27843] __x64_sys_sendfile64+0x105/0x150 [ 616.760666][T27843] x64_sys_call+0x2db1/0x3000 [ 616.765360][T27843] do_syscall_64+0xca/0x2b0 [ 616.769878][T27843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.775883][T27843] [ 616.778202][T27843] value changed: 0x0a000021 -> 0x04000021 [ 616.783921][T27843] [ 616.786240][T27843] Reported by Kernel Concurrency Sanitizer on: [ 616.792455][T27843] CPU: 0 UID: 0 PID: 27843 Comm: syz.9.7878 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 616.803875][T27843] Tainted: [W]=WARN [ 616.807681][T27843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.817824][T27843] ================================================================== [ 616.856355][T27287] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.867589][T23009] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.499866][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 622.499880][ T29] audit: type=1400 audit(1768103923.152:45421): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=43256 daddr=10.128.1.91 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1