last executing test programs: 3.258506528s ago: executing program 1 (id=93): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") r1 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) fcntl$dupfd(r0, 0x0, r0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) lsm_list_modules(&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=0x10, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000ffea00"/28], 0x48) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58010000100013070000000000000000ffffffff000000000000000000000000ff02000000000000000002000000000100", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES8=r2], 0x158}}, 0x4040040) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000011c0)) 2.395800358s ago: executing program 0 (id=112): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000003dc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000072"], 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40043d0d, 0x0) getgroups(0x5, &(0x7f0000000600)=[0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024000780080005"], 0x108}}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000f00)={'\x00', 0xff34, 0x7, 0x100, 0xf, 0x40, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000f80)) r9 = getgid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = gettid() sendmsg$unix(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001480)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000001580)=0xe8) fstat(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001640)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r17 = syz_clone3(&(0x7f0000003780)={0x20002000, &(0x7f0000001680)=0xffffffffffffffff, &(0x7f00000016c0)=0x0, &(0x7f0000001700), {0x22}, &(0x7f0000001740)=""/4096, 0x1000, &(0x7f0000002740)=""/4096, &(0x7f0000003740)=[0x0], 0x1, {r1}}, 0x58) newfstatat(0xffffffffffffff9c, &(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r22 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000038c0)={r2, r2, 0x24, 0x0, @void}, 0x10) r23 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003c00)={0x18, 0x12, &(0x7f0000003900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ldst={0x2, 0x2, 0x0, 0x5, 0x1, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f00000039c0)='syzkaller\x00', 0x7f, 0xff, &(0x7f0000003a00)=""/255, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003b00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000003b40)={0x1, 0x7, 0x1e, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003b80)=[r2, 0xffffffffffffffff], &(0x7f0000003bc0)=[{0x3, 0x2, 0x4, 0x9}], 0x10, 0x6}, 0x94) socketpair(0x1f, 0x2, 0x7, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004840)=[{{&(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="bc39d2f1070d788603ff12ea594189ef0ebc7cf6306bed5374cc976eb166755dd3f78b2d5c793ad9d1", 0x29}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000d22c9f06bdb60df50200"], 0x58, 0xc000}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000540)="14cde73f932027d4cbdfd8d157ff57c080d36a3cb74f9e6ba99f78992a6fa4c425476783429a9833e6918df57570ab7b49c704993a636eabee5110cfa2a5d863599acb99c3ec345401358722f50b7080416ef3755847a2cf4a605deddc0b72562ec22e5d80ab4c9669e984c49311316930f1db78d85bad35ee91a4eed6a48b060dd862f38d9565dc235e95b339e201", 0x8f}, {&(0x7f0000000780)="ee079425906e9b34af5a2373cfe15ee106865a674f113838269cc85520cba3c4132fe7213a650bf4d5a6f53e06bb1c27cdc177a2af544695b3857d24297b0709bfca54e903fb4efa4299230713286d1968b58ec84bed", 0x56}, {&(0x7f0000000800)="a41ea92a4902abd576b5eab70777558347ccf7ecef84a8af7ed5a26b48", 0x1d}, {&(0x7f0000000840)="7f3086044eb378ab64c657062e4fd9be291bf0d6529da17ef7b8bbe21ae47e12f1e2740a1c4a3f926ad2cb2503e1913f31a35834c832c293ce17ce3c1514ffe8fad439ebc1c52fcf4d889dbec33b58c0560f55abd2df0f8b5cacd6bf6eee0611a560cd3c3db34e9f62bed2f57702b2efd448c79005314cc11cee3754e9710ab6d27aee159e235e835227f6c1498063", 0x8f}, {&(0x7f00000006c0)="6950438771fa23348e2c59972f4118fa10ce1ceaa070c454bc65abfbcf7d814ad31954b826e429c36e964d3c861292381abac79faa7211a9788191e592fc63aeb20cab2ffc3268c2d84dd5847abb0eb684efa4", 0x53}], 0x5, 0x0, 0x0, 0x20004810}}, {{&(0x7f0000000d00)=@abs={0xb18379cb6647c911, 0x0, 0x4e21}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d80)="d948bd0b5b54180c60f187755ededde46c5762bbe38231d2396d9eb2b8a86386af714011babde7a29a043daf705f1da9d3acdae3e0e1f1b664b61fe7b143a57b710bec4b629414c8ff8fac6f636daf7189a31429175667152ca5494b42ac4b41680e66a03b15049261851ad1e1fd5606db088fa86444f343dacd35e5fb7f5de2423a81da597852526f38eff7463f5b4ac27e0785bdfbc4e992b27be7536bd65e76baf41c1e236d67fdde19fef06fa153cf95809310937b3c4945949fbc8570a484dfe075e936c420c79f029dffa60e55a4ef7b453646af", 0xd7}], 0x1, &(0x7f0000003cc0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2c000000000000000100000001000000c504149394a85509d7e9636fa95bda539803f489d040ce3c949ba18d4b45745c941fa284cef8ae5fcce04045f83c5843075241c99782f18fd0a037760b8533c992d4d624c03b04b1460f30c8157f7b7f8f1a305dbb18cb907414fbd39c39d660555b5795272c94609e97c9f99f0ff720e3", @ANYRES32=r25, @ANYRES32=r18, @ANYRES32=r22, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r23, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x40085}}, {{&(0x7f0000001080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001100)="3ea533884ec6a4fb5b89570739d9e10d715400c682153119435fe276c643c047257cd277accc38a355d8c6202e5cdc2cff9f99082814347576e07c269c20eaf1a1e683ec108265ec32264739fa0f37c0b6e604ecf11e386417e9f9237abf122133372cc4ed8592e2008480c2c0482065f7430ae86cd6106625c8ddbf1b508f0c77c53189ee907ef581bb4934cd9fff91bd05c526fb5e0d0c6f9910fc012c3d2a87df22ce3899b8d7d7ee2ee145f26ae14b8a163fa5e660523dc2dbe026c26cf37eced0cec166e60d642f0c2a95", 0xcd}, {&(0x7f0000001200)="79e7153849cbb63365b24c9f4fbff4cffbed49c59ef679ca5e7137ce87fdddd55775e018b9de5ea78a6ef6444de147f0585899f922ac887c236612f480d25481e22169bff508245dae65abd9bd26828a93fb69ffbbb10bf95bd9aa800eace419d8655fc6988bceede83320b6be278d05e0e9d438495e1c89e727dfa91af9b3c652a56477499ce04abcd7e7e2873530d7333e1464ecb1bc690acd6cd75a4bcc938d4f04e53c2f6132cb7c3a2314ae659da172c935403f20af27ca74b9d968b5421749af8b1b1a03ae3e0e834569919da7fbc3598de589437727", 0xd9}, {&(0x7f0000001300)="07fb934e53824541e230140411810851df44cf3384250a5781312ef8337cf53d6c0be2fed869303d4b53a0bd2fbb45995a9ca0aa4cabc2", 0x37}, {&(0x7f0000001340)="9e6a5c0d4e8ac794cd90d82ba10a18", 0xf}, {&(0x7f0000001380)="f8b84a3ac9ec12c6aaa2ad11909c07a00448af2b5d4af5bb15a3d5deb1d722709f68ffef1daed8d18a8ba55c6e87875258", 0x31}, {&(0x7f00000013c0)="ba1eed89ab6754f6ee6ba0f180ae02c0d86a77445fe18ce58e0d57cd72", 0x1d}], 0x6, &(0x7f0000004040)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r15}}}, @rights={{0x20, 0x1, 0x1, [r11, r10, r3, r5]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, r2]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xee00, r21}}}, @rights={{0x30, 0x1, 0x1, [r22, r2, r0, r1, r23, r2, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [r1, r2, r1, r0, r2]}}, @cred={{0x1c}}], 0x150, 0x2000c892}}, {{&(0x7f00000041c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000042c0)=[{&(0x7f0000004240)="3fef273843b2d8e12bbc6ab3e567f4854a8f7e46d180f6332b40506df5299fd7ebde2339f627a5ba963adebbc66750e46c0013c4c0b6bd0adb3c18f935e0b1", 0x3f}, {&(0x7f0000004280)="34495163d986b3310ec46ae4d1621046a4d9d39968cad933a48f40064e0e797913f9f6299029d1544cd634", 0x2b}], 0x2, 0x0, 0x0, 0x24000810}}, {{&(0x7f0000000480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004600)=[{&(0x7f0000000300)="d05faffafcf3a7f894ba9c22b9d862d23b7b4bde1752e9b178117b5706", 0x1d}, {&(0x7f0000003f00)="1f88bdddb551634d5250f78f993596b8e435fcb0192ba04d674cef5c4e5dff661b1d93f80061b4b1698f3e116324af525123522af61ca1114e7332b5a368115c22bbb1805c433c8b21", 0x49}, {&(0x7f0000003f80)="ad0d952f3e0162b64bfefe4f3dad4dd70aa6fdbbe45bcef15220dedcfcfce61ac028153678bf2839bb6718413233a535ac961a67d0946c693defd7dbd6c61fa0c5904e80bacadcdec767b7af590c83fb4eeafb664ed67083ce77ab6b8b74efc06f6fc378f40553a8bb5a4a8b1b667472a3630e44795d11f22ad6cb470cb751366dcda0c48d9228d2b1e23360df2a612cc2a231b9eccf18c98a61ddd8bd7e4fd01d0250c31064b16e6834ba7a2433c15ad9c6cd37", 0xb4}, {&(0x7f0000004440)="352cb4b0d5abb096f3b958f9420e239d50725da66c253bb46639f50fe951e82a85815afadce102ee7da793d15cfa3bbf17c6f910147e4acf84099f7df359a4651bc1790e31e1eeaba8c0289cdbeff792d5419747eed13120ffca2c8814be5831bf7264c98fc351a82173437d5d113fb363197eb53f7b94c6dfba", 0x7a}, {&(0x7f00000003c0)="1953e34e0e124502b9337c9d9c0ec04a519ebf696456f84df88dfa4fd84a05ff299b43cd2fdf08053ff8fad9fd0fb5b57f4a4cab13", 0x35}, {&(0x7f00000044c0)="ed84dcaea6e7c9c7134c5cb44e57182d99774b0113e6c5d8bc8f6600e63e9b2118ddbd95fc687d3a53b75d0588094358a71a53eb3211d8a575f351beb2b8006bba6b9d614cf0635abddc1b41ed58293f0589b72266b158d2a4298508006c869897d457b3e45c3ecf490f247b65069b1e0fc881d9e550078b21a1cd4a83121aa3689283e88339b1a2bcaa36bb0a6ef1a4cf1a6d885c6b72b96fa5837c6eaa2b87425d45b21a6a72bb63acd54726a4e59a3ec9c0b935", 0xb5}, {&(0x7f0000004580)="4abb084beb12b231dcb3adf67f73a9987aa538b4c5cd301ecebaa529046a2171586c7dd96baf239476ebe82006ae6be306031f1baca1e21a3d2f42a75c6e7a43008c528fcc2e2e45b28dcf047ffacb9a114d3b9eccf209c0b1d49f9cd6bb1e41863b85171c67984b603fadf897", 0x6d}], 0x7, &(0x7f0000004740)=[@cred={{0x1c, 0x1, 0x2, {r12}}}, @rights={{0x30, 0x1, 0x1, [r25, 0xffffffffffffffff, r24, r0, r23, r18, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r9}}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r25, r25]}}, @rights={{0x34, 0x1, 0x1, [r0, r24, r16, r16, r22, r11, r1, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r17, r20}}}], 0xe8, 0x44840}}], 0x6, 0x20000081) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)=0x0) timer_settime(r26, 0x1, &(0x7f0000000040)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.394800228s ago: executing program 1 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) link(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x62, 0xa, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x31}, 0x20, 0x700, 0x0, 0x40}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000380)={r6, 0x1, 0x6, @remote}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x64000600) 2.266757618s ago: executing program 0 (id=115): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=@newtfilter={0xba8, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb78, 0x2, [@TCA_CGROUP_EMATCHES={0x76c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x118, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x9}, {0x3, 0x8, 0x23289c1d, 0xc}}}, @TCF_EM_IPT={0xf8, 0x2, 0x0, 0x0, {{0x400, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x11, 0x5, "7ff76b0f5a418ca283d3605837"}, @TCA_EM_IPT_MATCH_DATA={0x98, 0x5, "c96bb762191a9a28979087e578e69adb57467e078e8686788f26a1a67e6a9106a5caaa78b1c800fb49182a204ec4417e95d2cb94ef33b3152c794c8e0172609aa26a70a4b9aa2e244951a2ad9bd0443c72f3ec367458ebc34b0223e75141f639d1717eaf3d2c9fa334e2a4f8d2a819dc44dd4b674f993899075c07accee8a3150a6d818b0f39c9b5cd83b51a78a39e1bfa826263"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x8, 0x0, 0x0, {{0x7, 0x3, 0x1}, {0x2, 0x1, 0x1, 0xffffff01}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x81, 0x7, 0x101}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x54, 0x1, 0x0, 0x0, {{0x101, 0x0, 0x749}, "148f57369f156663459cfa573e3561dc849833e363eeb51b2137df8493ee1cb697457677f814de1e070a28221ef66c1f3df89c7ded47a9c3e1f997fee1969a657f67b0fd8d7673dd"}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x100, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x9f, 0x1}, {0xd, 0x7, 0x3}}}, @TCA_EM_META_RVALUE={0x1a, 0x3, [@TCF_META_TYPE_VAR="8b263d11be", @TCF_META_TYPE_VAR="ed123fc4195d", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="9ca2dd45", @TCF_META_TYPE_VAR="5a1b49"]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="4eb3c3c4f1398a", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x67a, 0x7, 0x803}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x214, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5245, 0x8, 0x100}, {0x4, 0x3}}}, @TCF_EM_IPT={0x200, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0xe2, 0x5, "5f48bede7407e6d195d0d38847472f44ef539e0127590d9435a0166221c1f5463dc12a32307e558e1277dbec19934538c9a2416f80302e345cd9526ca3d7859ee88518adea1425e5dd65a9a8acd85f5a44421cd2d370b2fa203a9489305f55487342283520f2a562305fc51449142c2c4abb42b78b971a93c53020b1f7697f7d1dbe35f72ba149f08e35f0ece34910d071ea63ba360132cdc5dfe66a366acee44a0dd89f0eb4e537db2def7dbf210160b1c274baca8d4e8895ca232c69dbd07f9d4d2434381fb43bed04200b9f3fe5066b60056dc82752a3a0ba41595366"}, @TCA_EM_IPT_MATCH_DATA={0xd7, 0x5, "f59a4fe367e42b0eb59369aba8c7849d3994f7e21fafe9f0300250b0171dd642713b3c20ba5aac685cab51e4078167b44b9345df6d13bd1b320a2928dcee35359c8dd97545332e8cd5feecff3c218c6608c55f17448a3b231410364ebaacaa360d98743f53f8c2a473d91df118e9afb84521715cb10aa5430909249eefd8e9ead02fdc9c43ffa63b07d3fefa7823104385ca31145c2debec515bd35d3e0b0e30c9ca5c34f1e8ca17f7d3b6a58ebfc38393cd7e8e57bed19c47ff932edead8ee87ce2f47d8beb8ad17336401c980dd1cad89852"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x244, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xa, 0x8, 0xfe01}, {0x3, 0x5}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x5384}, {0x0, 0x0, 0xc3, 0x5}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x7}, {0x5, 0x5, 0x6}}}, @TCF_EM_IPT={0x1a4, 0x1, 0x0, 0x0, {{0xff, 0x9, 0xf15b}, [@TCA_EM_IPT_MATCH_DATA={0xca, 0x5, "c9961c744542fa558ce1b0b84c90e3d2e9adbd5d84775d4ada8f72022e2cfb2821d6140088a76150fe20dec20f41e9f986d0a8d5ad38d7896c2a2c5547097a77265779a86b7f9a2db1c7a215311e90cbc2a5fe416133455cefaf877cf92e869a4a29503df969db3b053313719041f443704641524f21687969f069c8ce0eb70d1233eea622df7d5203662603def780ef87585150d5f4ef61e3c8733dc41bda92c5f6c2f0ccbeddbe06df04ebe46bf663e4fe78d3378a8bbdd6f9b58c0d4bc8809c228ac11629"}, @TCA_EM_IPT_MATCH_DATA={0xc0, 0x5, "fbe8f83283f462c25d6e4d04b8dd470d59a03fc2b643107dd4f542cbfeb0592dcfc3eb99267e31ec84d510b9b36b5c05252e2727823f470dc427f22ca8d3f23943108195febbb1acca680d3d8764b1e58926181a081050fdbc71deaebd46a67b99e1cd0bfb1c1545c08648ec63b525e922282b8abe7d840affb06099ff0b487f5e8c7460afed4176fdc9c7a28cb8e995b3fee5ecfad75be490aadefae51685bfcfaaff6e629235bec781443beed53c28d5f7db39b3f7df879bff7c4e"}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x10}, {0x1, 0x1, 0x6}}}, @TCF_EM_IPSET={0x10, 0xf, 0x0, 0x0, {{0x48e6, 0x8, 0x1000}, {0x1, 0x4}}}, @TCF_EM_IPT={0x34, 0x2, 0x0, 0x0, {{0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xfb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}]}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x7c, 0x2, 0x0, 0x0, {{0x4, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x39, 0x5, "26a23f5fec6751736b170996b3a010d3fb3f30c0fea08b13b7050b6019eaa0c5f7b4612a0328c2759e1d5209446be537c7e9fc555d"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x1a}, {0x7ff, 0x8000, 0x7, 0x7, 0xa, 0x0, 0x1}}}, @TCF_EM_IPT={0x50, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x100}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x8, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x5, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xceff, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7fffffff, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x1, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x1, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x4e8, 0x8, 0x7e, 0xa1b4, 0x0, 0x4, 0x10000, 0x5, 0x8000, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x5, 0x5, 0xff, 0x9, 0x0, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x7b, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0xe, 0xe00, 0x80000001, 0x80000000, 0xf, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x4, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x5, 0x2, 0x7, 0xfa, 0x2, 0x7, 0x9, 0x2f, 0x7, 0x5, 0xfffffffd, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x6, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0xff, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x100002, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x1, 0x81, 0x8, 0x7ff, 0x21a, 0x401, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0xba8}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) fcntl$dupfd(r1, 0x406, r0) 1.87021802s ago: executing program 0 (id=119): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x6, &(0x7f0000001000)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) membarrier(0x10, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) symlink(0x0, &(0x7f00000017c0)='./file0\x00') r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x44) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x98}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000380)={0xef5, 0xfffffffa, 0x101, 0xdae, 0x6, "e7142304a2391cce12a8b4476efaccbe111745"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32=0x1, @ANYBLOB="ff27070200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000e000000000000200000000000000000be041c1775965dace410344170b1114dd111346fa60e5065a86a4eaacc6dce1ec7cb4e03a35f952cd694702253555cdc694783f8454219ac2c5d9c5160597918e42de10850fbf966aa4538cf4cff7125be233b8750949b158dc56ad5beba744979949a1ec79f6f2f04e327b8cd2b97cdaa438429bc4766"], 0x50) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d3909", 0x3b}], 0x2}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r9], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) 1.61322918s ago: executing program 0 (id=124): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) fcntl$dupfd(r0, 0x0, r0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) lsm_list_modules(&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=0x10, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000ffea00"/28], 0x48) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58010000100013070000000000000000ffffffff000000000000000000000000ff02000000000000000002000000000100", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES8=r2], 0x158}}, 0x4040040) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000011c0)) 1.477581831s ago: executing program 3 (id=125): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x8aaa, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000080)=""/108, &(0x7f0000000100)=0x6c) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000001600), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x200000007}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x91) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x28, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8d, 0x4a}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000540)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRES8, @ANYRESHEX, @ANYRESHEX=r5, @ANYRES32=r6], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000480)={r8, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x8000000004) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace(0x8, r10) waitid(0x1, r10, 0x0, 0x8, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.418681386s ago: executing program 1 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) close(r0) 1.36900361s ago: executing program 2 (id=127): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x22020600) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setreuid(0xffffffffffffffff, 0xee00) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e80)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8dffa76c0a85ee3f0a11928ffc8debef11b4e38eff67", 0x2a}], 0x1}}], 0x1, 0x20008000) r6 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r6, &(0x7f0000000a00)={&(0x7f0000000500)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/48, 0x30}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000880)=""/60, 0x3c}, {&(0x7f00000008c0)=""/227, 0xe3}], 0x4}, 0x40010000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x10040000) recvmmsg(r3, &(0x7f0000003240)=[{{&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/98, 0x62}, {&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)=""/194, 0xc2}], 0x3, &(0x7f0000000300)=""/68, 0x44}, 0x5}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)=""/178, 0xb2}, {&(0x7f0000000440)=""/141, 0x8d}, {&(0x7f0000000380)=""/83, 0x53}], 0x3, &(0x7f00000005c0)=""/101, 0x65}, 0x401}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000019c0), 0x0, &(0x7f0000001a40)=""/240, 0xf0}, 0xfa0f}, {{&(0x7f0000001b40)=@l2, 0x80, &(0x7f0000000a40)=[{&(0x7f0000004440)=""/4103, 0x1007}], 0x1, &(0x7f0000002c00)=""/240, 0xf0}, 0x9}, {{&(0x7f0000002d00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d80)=""/152, 0x98}, {&(0x7f0000002e40)=""/37, 0x25}], 0x2}, 0x5}, {{&(0x7f0000002ec0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002f40)=""/254, 0xfe}, {&(0x7f0000003040)=""/196, 0xc4}, {&(0x7f0000003140)=""/11, 0xb}], 0x3, &(0x7f00000031c0)=""/81, 0x51}, 0x9}], 0x6, 0x102, &(0x7f00000033c0)) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, 0x0, 0x0) 1.326540694s ago: executing program 3 (id=128): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0xfdd9) r0 = socket$inet6(0xa, 0x80005, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x40800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa9881da07fc0b86dd6100000000383aff20010000000000000000000000000002ff0200000000000000000000000000010200907800010001663a794500023a00fc020000000000000000000009000001200100000000000000000000000000028029335287b7a0"], 0x0) recvfrom(r1, 0x0, 0x0, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f0000000400", @ANYRES32=r2], 0x50) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000004c0), 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, 0x0) 1.050514406s ago: executing program 1 (id=131): bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x8, '\x00', 0x0, r2, 0x4, 0x4, 0x4}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x23, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9f6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x60e6bf08, 0x0, 0x0, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @ldst={0x1, 0x0, 0x4, 0x4, 0x0, 0x100, 0x1}, @cb_func={0x18, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xb, 0x81b, 0x10}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r0, r6, r0, r8]}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00', 0x302}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(r4) 882.981929ms ago: executing program 4 (id=133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001004010000000000000000340500000a2c000000180a01020000000000000000020000000500000000000000000000000900010073797a3000000000140000001104010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) (async, rerun: 32) r9 = socket(0x1e, 0x4, 0x0) (rerun: 32) r10 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) (async) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) (async) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 64) r11 = dup3(r10, r9, 0x0) (rerun: 64) recvmmsg(r11, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001780)=@newqdisc={0xa8, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0x3, 0x0, 0x6c, 0x0, 0x0, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xbc, 0x0, 0x100, 0x1000000, 0x3}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x70000000, 0x0, 0x6, 0xc28c, 0x40}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0x8, 0x8, 0x2, 0x10000}}]}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) (async) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=@deltfilter={0x1178, 0x2d, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x7}, {0xffff, 0xa}, {0xc, 0x6}}, [@f_rsvp6={{0xa}, {0x844, 0x2, [@TCA_RSVP_POLICE={0x82c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x85ce, 0x0, 0x6, 0xffff, 0x5, 0x7fffffff, 0x3, 0xd167, 0xfffffffc, 0x8, 0x5, 0xfff, 0x4, 0xd61, 0x8001, 0xd7, 0x7, 0xe3, 0x3310, 0x4871, 0x80000000, 0x0, 0xc055, 0x2, 0x8, 0x7fff, 0xfff, 0x10000, 0x4, 0xffffffff, 0x6, 0x5, 0x5, 0x2ca76b4e, 0x55, 0x7, 0x7, 0x401, 0x7, 0x9, 0x3, 0x3, 0x8, 0x8, 0x434, 0x401, 0xa, 0x0, 0x0, 0x1, 0x683, 0x6, 0x3, 0x80000001, 0x7, 0xb0d2, 0x6, 0x94fd, 0x3, 0x4, 0x3ff, 0x3, 0x10, 0x1, 0xbaf3, 0x6, 0xe4, 0x4, 0x81, 0x1000, 0xffffffff, 0xee0, 0x0, 0x8, 0x7f, 0x9, 0x3f8, 0x10, 0x3, 0xd, 0x6, 0x0, 0x0, 0x7, 0x40f, 0xa, 0x3, 0x6, 0x2, 0x3f0, 0x0, 0x1000, 0x4, 0xc, 0x8001, 0x6, 0x4, 0x9, 0x6, 0x8, 0x7fffffff, 0x3e98, 0x7, 0x2a, 0x400, 0x7, 0x8, 0x1, 0xe00, 0x7, 0x7fffffff, 0x3, 0x3, 0x0, 0x3, 0x6, 0x5, 0x9, 0x3, 0x6, 0xee, 0x4, 0x9, 0x4, 0x3, 0x1, 0xad, 0x6, 0xffffffff, 0x726, 0x0, 0xffff, 0x9, 0x1ff, 0x2, 0x9, 0x9ac, 0x2, 0x7, 0x204d914c, 0x2, 0x57f, 0x7, 0x5, 0x4, 0x7, 0x8, 0xdd7, 0xf50, 0x1, 0x6, 0xb99, 0x8, 0x6, 0x7, 0x9, 0x1, 0x1, 0x5604, 0x2, 0x9, 0x6, 0xf, 0x5, 0xbe, 0x2, 0x400, 0x2c, 0x7fff, 0xdb5, 0x0, 0xffffff80, 0x8, 0x3bc3, 0x46, 0xf418, 0x8001, 0x8, 0x7fff, 0x401, 0x8, 0x2af, 0xb, 0x85bf, 0x7ff, 0x8, 0x2, 0x4, 0x81, 0x3, 0x4, 0x7fffffff, 0x3ff, 0xf2d, 0x9, 0x400, 0x0, 0x9, 0x916, 0x921, 0x8, 0x4, 0x7, 0xffff, 0xfffffff3, 0x3, 0x200004, 0x6, 0x10, 0x1, 0xffffff73, 0x8, 0x8e, 0xdcd, 0x8, 0xfe9f, 0xffffff00, 0x0, 0x10001, 0x7, 0x401, 0xff, 0x1, 0x8f0f, 0x3, 0x3, 0x0, 0x7fff, 0x3, 0x1, 0x2f, 0x10000, 0x7, 0xf739, 0x5, 0x3, 0x2, 0xfffffff8, 0x6, 0x4, 0xfff, 0x6, 0x0, 0x9, 0x6, 0x0, 0x0, 0x1000, 0x7f, 0x80000000, 0xffffffff, 0x4, 0x0, 0x7fe00, 0x9, 0x80000000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xb6, 0x6, 0x0, 0x20b1, 0xfffffffb, 0xffffff97, 0x1, 0x0, 0x2, 0x10001, 0x8000, 0x7ff, 0x7ff, 0x101, 0x809e, 0xffffff91, 0x2, 0x3, 0xb928, 0x101, 0x0, 0x2, 0x7, 0xd, 0x1, 0x56c, 0x892, 0x800, 0xd28f, 0x9, 0x5, 0xfffffffb, 0x8, 0x4, 0x9, 0x7fffffff, 0xa28b, 0x8, 0x80000000, 0x5, 0x8, 0x5444, 0x8, 0x5, 0xd, 0x9, 0x1, 0x4, 0x2, 0x7, 0x9, 0x3ff, 0xd90, 0xffffffff, 0x8000, 0x47b2220e, 0x9, 0x6, 0x7f, 0x6, 0x100, 0x4, 0x13f, 0x1d, 0x2, 0xfff, 0x1, 0x5, 0x1ff, 0xfffffff1, 0x4, 0x80, 0x9, 0x0, 0x6, 0xffffff7f, 0xe, 0x7, 0x8, 0xb27e, 0xef7, 0x20d, 0x0, 0x8, 0x2cf, 0x7, 0x9, 0x9, 0x200, 0x1, 0x6, 0x2, 0x6, 0x0, 0x7, 0x8, 0xb, 0x0, 0x3, 0xf, 0x8, 0x40, 0xd6, 0x8, 0x0, 0x4, 0x1000, 0x1, 0x1, 0x1, 0x2ecf545d, 0x6, 0x80000001, 0x7, 0x1, 0x3, 0x4, 0xffff, 0x9, 0x6, 0x4, 0x1ff, 0x5, 0x0, 0x0, 0x8, 0xd, 0x2, 0x7, 0x9, 0x9, 0xd, 0x1, 0xe, 0x4, 0x5a8, 0x80000001, 0x6, 0x1cb, 0x26e8, 0x1, 0x4, 0x2, 0x6, 0x8, 0x3, 0x2, 0xffffffff, 0x2a3, 0x6bd, 0x5, 0x2, 0x44ae3d55, 0x7ff, 0xacb, 0x4, 0x8, 0x7, 0x1, 0x2, 0x1, 0x1, 0x3, 0x7fff, 0x80000001, 0x101, 0x670e, 0x80, 0x54cb, 0x7bd16aa, 0xb, 0xfffffffb, 0x8, 0x6, 0xc, 0x1ff, 0x7, 0xf39, 0x5, 0x0, 0x8, 0x3, 0xffff8001, 0x81, 0x4, 0xf, 0xa6, 0x43e, 0x4, 0x7, 0x6, 0xf, 0x9, 0x9, 0x0, 0x1d3d, 0xd6a, 0x5, 0xfffffffa, 0xd1, 0x3, 0x1, 0x2, 0xc, 0x1, 0x85, 0x400, 0x41f667ce, 0x1c0000, 0x4ae, 0x4, 0x8, 0x3, 0x5, 0x1, 0x7, 0x9, 0x80000000, 0x400, 0x5, 0x2, 0x5, 0x8, 0x4, 0x80000001, 0x4, 0x1, 0x5, 0xd2000000, 0x1, 0x1, 0x8001, 0x3, 0x9, 0x6, 0x9, 0x49, 0x7, 0x0, 0x7f, 0x3, 0xffffffff, 0x7, 0x0, 0x6da, 0xa, 0x8, 0xfffffffa, 0x3, 0x80000000, 0x7e6, 0x4, 0x9, 0xa]}]}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}]}}, @f_rsvp6={{0xa}, {0x9c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @remote}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xd, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0xce, 0x400}, {0x8, 0x8, 0x2}, 0x4, 0x3}}, @TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_SRC={0x14, 0x3, @loopback}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x3, 0x62}, {0xdf000000, 0x9, 0x440e18d}, 0x33, 0xf8, 0x3}}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}, @f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffff801, 0x8, 0xb, 0x4, 0x7, 0x1, 0x7, 0x0, 0x10000, 0x7ff, 0x3a800595, 0x1, 0xffffff00, 0x6, 0x6, 0x6, 0xfffffff9, 0x9, 0xfffffffd, 0x1000, 0x120000, 0x4, 0x10001, 0x5, 0xfff, 0x28a9, 0x0, 0x3, 0xb42b, 0x3, 0xd, 0x6, 0xfff, 0x100, 0x2b45, 0xfffffffe, 0x3, 0x9, 0x4b9f, 0x7fff, 0x1, 0x1, 0xc1a5, 0x9, 0xffffffff, 0x2d, 0x2, 0xfffffffa, 0xe, 0x2, 0x7, 0x40, 0x2, 0xb83, 0xfffffff9, 0x114ac27b, 0x4, 0x3, 0x2, 0x0, 0x95, 0x8, 0x1, 0x0, 0x4, 0x2, 0xffff, 0xb2, 0x663c, 0x10, 0x7fff, 0x1, 0x9, 0x1, 0x9, 0x4, 0x4, 0x4, 0x401, 0xfffffffa, 0x9, 0x746, 0x5, 0x7, 0x0, 0x4, 0x1, 0x5, 0x2, 0xb8, 0x4, 0x7c, 0x2, 0x673a99f2, 0x0, 0x6, 0x4e30, 0xdc6, 0xb0fb, 0x2, 0x14409fa4, 0x800, 0x0, 0x6, 0x0, 0x9, 0x0, 0x2, 0x2, 0x8, 0x1, 0x7, 0xcb, 0x8bd, 0xb, 0x7fff, 0x2, 0x5, 0x59670551, 0xe, 0xaa6, 0x4, 0x0, 0x7f, 0x7, 0x6, 0x5, 0x200, 0x7, 0x5, 0x7, 0xa7, 0xfffffff9, 0x40, 0x2, 0x1fe0000, 0x7, 0xc, 0x5, 0x5, 0x7fffffff, 0xaab, 0x6, 0x0, 0xe3d7, 0xe35, 0x10000, 0x9, 0x1ff, 0x8, 0x6a51f6c0, 0x80, 0x1, 0x5, 0x4, 0x200, 0x7, 0xf, 0x6, 0xe, 0xd96, 0x5, 0x9, 0x1, 0x20000, 0x2, 0x4e, 0x800, 0x0, 0x7, 0x5, 0x1, 0x8, 0x1, 0x6, 0x4, 0x2944, 0x8001, 0xa, 0xc00000, 0x8, 0x8, 0x1, 0x36b, 0x2, 0x10, 0x80000000, 0x10, 0x0, 0x7, 0x5, 0x40, 0x600, 0x3, 0x2, 0x0, 0x3, 0x6, 0x2, 0x1, 0xd, 0x40, 0x824, 0xff, 0xfffffff7, 0x8, 0x445f, 0x7f, 0xffff, 0x8000, 0xd9ef, 0x2, 0x9, 0x6, 0xff5, 0xa, 0x9, 0x10000, 0x0, 0x0, 0x20000000, 0xfff, 0x0, 0x4, 0x7, 0xffffffff, 0x9, 0xff, 0x4, 0x1000, 0xb, 0x4, 0x8, 0x94, 0x1, 0x3, 0x200, 0x5, 0x8000, 0x40, 0x0, 0x5, 0x2, 0x7fffffff, 0x8, 0x5, 0x6, 0x8, 0x4, 0x7, 0x6490131a, 0xc, 0x0, 0x5, 0x6, 0x2]}]}]}}, @f_tcindex={{0xc}, {0x438, 0x2, [@TCA_TCINDEX_POLICE={0x434, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x1, 0xfffffffd, 0x3, 0x5, 0x8, 0x8, 0xffff7fff, 0x2, 0xf, 0x6, 0x7, 0x8a, 0x1, 0x8, 0x352, 0xf5, 0x1, 0xb1, 0xe75, 0x0, 0x7, 0x101, 0x4, 0x8, 0x8d4, 0x8, 0x7, 0x7, 0x1, 0x9, 0x4, 0x2, 0x4, 0x5, 0x8, 0x1, 0x118d, 0x3775, 0x2, 0x80, 0x6, 0x865e, 0xd4, 0x5, 0x4, 0x80, 0x300, 0x20000000, 0x4, 0x9368, 0x4, 0x6, 0x6, 0x348, 0x2, 0x4, 0x4, 0x9, 0x1, 0xfbf1, 0x23db, 0x9, 0x400, 0x4700, 0x5, 0x93ce, 0x4, 0x3, 0x10000, 0x10001, 0x2, 0x3cd6, 0x8, 0x81, 0x2, 0xfff, 0x9449, 0x9, 0x2554, 0x7, 0x29bd41be, 0xdf29, 0x4919, 0x5, 0x7, 0x0, 0x7, 0xfffffffb, 0xffffffff, 0x7, 0x0, 0x0, 0x4, 0x9, 0x9, 0x9, 0xea, 0xfffffe00, 0x1, 0x7ff, 0xffffffff, 0x0, 0x3, 0x9, 0x66, 0x8000, 0x6, 0x8, 0x8000, 0x2, 0x5, 0x10000, 0x9, 0xfffffff7, 0x5, 0xfffff001, 0x0, 0x5281697e, 0x2, 0x9, 0x4, 0xa, 0x8, 0x0, 0xfffffffa, 0x7, 0x7b, 0x2, 0x6, 0x200, 0x4, 0x18, 0x2, 0x6, 0x8, 0x3e3b14a, 0x4, 0x9, 0x9, 0x0, 0x4, 0x1, 0x3, 0x4, 0x5, 0x0, 0x432, 0x3, 0xffff0001, 0x7, 0x2, 0x1, 0x4, 0x80, 0x37, 0x4, 0x5, 0x0, 0xfffffffc, 0x9, 0x8, 0x1000, 0x3, 0x9, 0x1, 0xffffffff, 0x6, 0x8, 0x2, 0xb5, 0x8, 0x5, 0xfffffff9, 0x0, 0xb, 0xcc17, 0xed, 0x8, 0x1000, 0x0, 0xfffffffe, 0xffff, 0x7, 0x7, 0x6, 0x8, 0xfffffffd, 0x3, 0x3, 0x7, 0x6, 0x2, 0x1000, 0x7, 0x8001, 0x0, 0x101, 0x800000, 0x4, 0x9, 0x101, 0x29, 0x7fff, 0x7, 0xb, 0x6, 0x5, 0x4, 0x7, 0x8, 0x3761, 0x2, 0x13, 0x0, 0x401, 0xa, 0x5, 0x9c, 0xb, 0x4, 0x0, 0x0, 0xd71, 0x6, 0xb, 0x1ff, 0x8, 0x8, 0x2, 0x7, 0x4, 0x3, 0x1, 0x1, 0x5, 0xfffffff7, 0x6, 0x2, 0x9, 0x200, 0x0, 0x4, 0x0, 0x7b, 0x4, 0x6, 0x8, 0x800, 0x6, 0x1, 0x7, 0xf, 0x87, 0x530, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}]}}]}, 0x1178}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) fallocate(r10, 0x2, 0x6, 0x7) 862.249071ms ago: executing program 1 (id=134): r0 = syz_io_uring_setup(0xbc1, &(0x7f0000000340)={0x0, 0x1064, 0x0, 0x1, 0x390}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47fb, 0x0, 0x0, 0x0, 0x0) 806.321506ms ago: executing program 4 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 799.114986ms ago: executing program 4 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0400000004000000040000000559"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000040000000000000005000000950000000000000018430000ffffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c0000fa2859441d2de18c0095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x530dbdb7c0738e9c, 0x2c, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x3, 0x2}, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000280)="6778e27928447bceb7295618c4f8df985e05b7374568424de71217194524be2d32a193bce72a5182317f9fe295e0fcfeecfbb3a7226c8d2151a04aaf8cbe550bd3561fdda8a01ca49b33c4606b4c23d27a99157f2ea205d7a04b03d3bbcbfefd3dc4eec5db8512e23404c56d2397ed9692e6d780ac87396a0f22aba75226429ce24e18cb0d0234c14cd4a6ac81da8ada7568026d3af23bdd40ba4d7d783a64fbace0bc6b6a084a69d0c05831984bbe44d6e4ee2ff5e383eda4210a1014c275e1a3250fdd5f91c2647f4f98d4fcb2258e2e5b"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200001a, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 760.061929ms ago: executing program 0 (id=137): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x2b}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000004c0)='sys_enter\x00', r1}, 0x18) getrlimit(0x7, &(0x7f00000003c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "d524c18c21e24872", '\x00', "e471e97b", "6168e4a7e349a0d4"}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x3, 0x0, 0x7ffc1fff}]}) shmdt(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) readv(r4, &(0x7f0000000580)=[{&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f00000004c0)=""/174, 0xae}], 0x9) (fail_nth: 10) close(r0) 737.797181ms ago: executing program 4 (id=138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000400), &(0x7f0000000580)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04000000040000000400000004"], 0x50) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket(0x27, 0x4, 0x2004) r10 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x18) ioctl$SG_BLKTRACETEARDOWN(r10, 0x1276, 0x0) connect$tipc(r9, &(0x7f0000000040)=@id, 0x10) shutdown(r9, 0x2) 414.061177ms ago: executing program 0 (id=139): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r2, 0x0, 0x800000000000002}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1000004, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x4, 0x7c1, &(0x7f0000001a00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x500, 0x0) socket$packet(0x11, 0x3, 0x300) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x2}, 0x2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x800) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1200052, &(0x7f00000003c0), 0xff, 0x7cb, &(0x7f0000001640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3}, 0x48, 0xffffffffffffffff) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x8000}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r7, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r5, r5, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000680)=ANY=[@ANYBLOB="28000000140011fdfa004ac2411e47060aefadfa617ab9000600000000000000482ceadf7242c0775ba938690ad89f"], 0x28}}, 0x8000) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) 413.589407ms ago: executing program 2 (id=140): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x6, 0x200200) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e21, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x23) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) shutdown(r3, 0x0) (async) sendfile(r2, r3, 0x0, 0x3) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000280)={0x6, 0x0, "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"}) (async) unshare(0x22020600) (async) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r4, 0x0, &(0x7f00000000c0)) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)}, 0x40fd) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x1, 0x81, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) (async) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) (async) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='mmc_request_done\x00', r6}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) 412.962887ms ago: executing program 3 (id=141): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ustat(0xd, &(0x7f0000000680)) 399.776158ms ago: executing program 1 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r1], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000bf5000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="757466383d312c757466383d302c756e695f78757466383d312c636f646570616765af4a904951a2fa496b444a916bfd2af4e20dfb892d97cecd1d3462532ec83d6fa5dc356f745c2458c30182d115910104000000000000f2760b40953245d2ef3e41d14c30d1786da4424777412570a748ec66d95034f4a15152db6181443865423882c369960207fb67495e5eac0536005e629a8b263fea955c3aa11f8c1fff010f58926280261d5721fad4f5f83033421285434cc53d62901900"/198], 0x51, 0x339, &(0x7f0000000180)="$eJzs3T9vG3UYB/AnaZtAILUHhAQS4idYgMFKwsaEhVoJEQkUGlQYkK7kApavduSzilwhYGPldVSMbEiIN5CFnY0tC2OHCqPEbmO75t/gXNt8PpJ1j+/uK/9Op7Oe5fQcXf/+Znu/bOxnz8by2ymWI2L5bkT9pJqwFEujYmVq97fxeu36by99+PEn7zW3t6/spHS1ee3NrZTS5Zd//vKrH175pf/MRz9e/mk1DuufHv2x9fvh84cvHP157YtWmVpl6nT7KUs3ut1+dqPI016rbDdS+qDIszJPrU6Z96aO7xfdg4NByjp762sHvbwsU9YZpHY+SP1u6vcGKfs8a3VSo9FI62vBv9m9s7OTNateBYvV6zWz44d3dfbA07t3qlkRAFCl0/6//7f9/7jxP9mztMD+/8Kc/v8t/f8C6f/Pg+P+f2X8/E7T/wMAAAAAAAAAAAAAwOPg7nBYGw6Htfvb2c+cyKUKlsmC/Nf7//C7IzwJJl7ceyqi+O7W7q3d0XZ0vLkfrSgij42oxb2I4QOj+uq721c20ol6rN/8ZpQ/3l6Yzm9GLerz85ujfJrOX4q1yfxW1OK5+fmtufmVeO3ViXwjavHrZ9GNIvbiOHua/3ozpXfe357Jr56c9w9WzuD2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBGGuPZ+W+Mv8/O72/cP+Gh+f6j8x/M19+IWtybP59/Y+58/ovx4sXqrhsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJpWD2+2sKPJetUXUH4llnI9i+dG574r/VayOn9qz+K2K/5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAqdDv6teCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFUqB7fbWVHkvQUWVV8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4+SvAAAA//+0PSEy") sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8000, 0x2, 0x2, 0xb68c}]}) 294.542517ms ago: executing program 2 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}]}}) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) 281.022788ms ago: executing program 4 (id=144): r0 = syz_io_uring_setup(0xbc1, &(0x7f0000000340)={0x0, 0x1064, 0x0, 0x1, 0x390}, &(0x7f0000000300)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00'}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47fb, 0x0, 0x0, 0x0, 0x0) 236.696641ms ago: executing program 2 (id=145): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000002000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000008000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x6f}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r4, 0x402, 0x5) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) modify_ldt$write(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRESHEX=r4, @ANYRES64, @ANYBLOB="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", @ANYRES64=r3, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESOCT], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = memfd_secret(0x80000) fchownat(r9, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x110, 0xffffffffffffffff, 0xcceae000) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000302, r10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) timer_getoverrun(0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x244480, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) 222.188613ms ago: executing program 3 (id=146): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) (fail_nth: 1) 159.418017ms ago: executing program 2 (id=147): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x7a6e, 0xb}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) 155.614558ms ago: executing program 4 (id=148): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) fcntl$dupfd(r0, 0x0, r0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) lsm_list_modules(&(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=0x10, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xc0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'erspan0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x20, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xffff, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000040000000000ffea00"/28], 0x48) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="58010000100013070000000000000000ffffffff000000000000000000000000ff02000000000000000002000000000100", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES8=r2], 0x158}}, 0x4040040) r6 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f00000011c0)) 90.557473ms ago: executing program 3 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 6.3429ms ago: executing program 2 (id=150): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @remote}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970003103c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 0s ago: executing program 3 (id=151): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') (rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x800, 0x100}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x178) close(r1) (async, rerun: 32) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) (rerun: 32) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. [ 33.698686][ T29] audit: type=1400 audit(1754292455.562:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.699941][ T3291] cgroup: Unknown subsys name 'net' [ 33.721514][ T29] audit: type=1400 audit(1754292455.572:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.748833][ T29] audit: type=1400 audit(1754292455.602:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.899795][ T3291] cgroup: Unknown subsys name 'cpuset' [ 33.906088][ T3291] cgroup: Unknown subsys name 'rlimit' [ 34.017917][ T29] audit: type=1400 audit(1754292455.882:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.046239][ T29] audit: type=1400 audit(1754292455.882:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.066777][ T29] audit: type=1400 audit(1754292455.882:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.068770][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.087187][ T29] audit: type=1400 audit(1754292455.882:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.112519][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.116307][ T29] audit: type=1400 audit(1754292455.882:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.149846][ T29] audit: type=1400 audit(1754292455.882:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.174782][ T29] audit: type=1400 audit(1754292455.972:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.371270][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 35.422332][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 35.481354][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.488450][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.495835][ T3301] bridge_slave_0: entered allmulticast mode [ 35.502433][ T3301] bridge_slave_0: entered promiscuous mode [ 35.525720][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.532864][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.540298][ T3301] bridge_slave_1: entered allmulticast mode [ 35.546916][ T3301] bridge_slave_1: entered promiscuous mode [ 35.579784][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.592143][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.615404][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.622619][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.629899][ T3302] bridge_slave_0: entered allmulticast mode [ 35.636248][ T3302] bridge_slave_0: entered promiscuous mode [ 35.642912][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.651977][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.659064][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.666206][ T3302] bridge_slave_1: entered allmulticast mode [ 35.672609][ T3302] bridge_slave_1: entered promiscuous mode [ 35.679056][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 35.692999][ T3301] team0: Port device team_slave_0 added [ 35.713061][ T3301] team0: Port device team_slave_1 added [ 35.722900][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.734460][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.789363][ T3302] team0: Port device team_slave_0 added [ 35.797580][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.804603][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.830705][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.846396][ T3302] team0: Port device team_slave_1 added [ 35.860287][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.867251][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.893254][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.924124][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.931251][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.938371][ T3307] bridge_slave_0: entered allmulticast mode [ 35.944798][ T3307] bridge_slave_0: entered promiscuous mode [ 35.962937][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.970046][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.996114][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.007688][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.014871][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.040839][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.054456][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.061589][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.069017][ T3307] bridge_slave_1: entered allmulticast mode [ 36.075477][ T3307] bridge_slave_1: entered promiscuous mode [ 36.081820][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 36.090724][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.097789][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.105063][ T3310] bridge_slave_0: entered allmulticast mode [ 36.111555][ T3310] bridge_slave_0: entered promiscuous mode [ 36.118560][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.125767][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.132968][ T3310] bridge_slave_1: entered allmulticast mode [ 36.139459][ T3310] bridge_slave_1: entered promiscuous mode [ 36.176368][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.187126][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.204890][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.220902][ T3301] hsr_slave_0: entered promiscuous mode [ 36.226921][ T3301] hsr_slave_1: entered promiscuous mode [ 36.244744][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.263660][ T3302] hsr_slave_0: entered promiscuous mode [ 36.269933][ T3302] hsr_slave_1: entered promiscuous mode [ 36.275884][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.281651][ T3302] Cannot create hsr debugfs directory [ 36.300643][ T3310] team0: Port device team_slave_0 added [ 36.325259][ T3310] team0: Port device team_slave_1 added [ 36.336972][ T3307] team0: Port device team_slave_0 added [ 36.359343][ T3307] team0: Port device team_slave_1 added [ 36.377273][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.384314][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.410332][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.430188][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.437281][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.445630][ T3308] bridge_slave_0: entered allmulticast mode [ 36.452278][ T3308] bridge_slave_0: entered promiscuous mode [ 36.461090][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.468198][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.475377][ T3308] bridge_slave_1: entered allmulticast mode [ 36.481816][ T3308] bridge_slave_1: entered promiscuous mode [ 36.495516][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.502498][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.528523][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.547506][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.554516][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.580454][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.609031][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.615997][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.641921][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.660888][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.685850][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.730363][ T3308] team0: Port device team_slave_0 added [ 36.745561][ T3310] hsr_slave_0: entered promiscuous mode [ 36.751724][ T3310] hsr_slave_1: entered promiscuous mode [ 36.757693][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.763513][ T3310] Cannot create hsr debugfs directory [ 36.776069][ T3307] hsr_slave_0: entered promiscuous mode [ 36.782149][ T3307] hsr_slave_1: entered promiscuous mode [ 36.787936][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 36.793738][ T3307] Cannot create hsr debugfs directory [ 36.800171][ T3308] team0: Port device team_slave_1 added [ 36.832245][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.839297][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.865345][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.892115][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.899123][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.925238][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.979176][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.992404][ T3308] hsr_slave_0: entered promiscuous mode [ 36.998379][ T3308] hsr_slave_1: entered promiscuous mode [ 37.004513][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 37.010287][ T3308] Cannot create hsr debugfs directory [ 37.018332][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.040627][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.049302][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.118388][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.142014][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.152828][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.165133][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.201745][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.212024][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.225259][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.235295][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.279443][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.289260][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.300034][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.315464][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.330572][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.360011][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.370623][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.383947][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.393078][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.403546][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.415062][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.428754][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.445521][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.452648][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.463432][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.470521][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.480568][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.487724][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.509235][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.516348][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.538700][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.570686][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.603047][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.627774][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.634965][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.653130][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.662284][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.669370][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.698400][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.715035][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.728482][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.735600][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.744980][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.757863][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.764997][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.775675][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.786909][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.796972][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.834180][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.841490][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.850485][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.857559][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.883805][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.894214][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.020854][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.037865][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.057495][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.084723][ T3301] veth0_vlan: entered promiscuous mode [ 38.094412][ T3302] veth0_vlan: entered promiscuous mode [ 38.116744][ T3301] veth1_vlan: entered promiscuous mode [ 38.128863][ T3302] veth1_vlan: entered promiscuous mode [ 38.164834][ T3302] veth0_macvtap: entered promiscuous mode [ 38.189279][ T3301] veth0_macvtap: entered promiscuous mode [ 38.200812][ T3302] veth1_macvtap: entered promiscuous mode [ 38.208867][ T3301] veth1_macvtap: entered promiscuous mode [ 38.224517][ T3310] veth0_vlan: entered promiscuous mode [ 38.237689][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.253022][ T3310] veth1_vlan: entered promiscuous mode [ 38.266382][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.273905][ T3308] veth0_vlan: entered promiscuous mode [ 38.283947][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.291971][ T3308] veth1_vlan: entered promiscuous mode [ 38.311124][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.319621][ T3307] veth0_vlan: entered promiscuous mode [ 38.327726][ T997] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.349112][ T997] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.357938][ T997] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.368454][ T3307] veth1_vlan: entered promiscuous mode [ 38.378289][ T3308] veth0_macvtap: entered promiscuous mode [ 38.386899][ T997] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.405788][ T3430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.421284][ T3310] veth0_macvtap: entered promiscuous mode [ 38.432883][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.436671][ T3307] veth0_macvtap: entered promiscuous mode [ 38.454442][ T3308] veth1_macvtap: entered promiscuous mode [ 38.460815][ T3430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.475290][ T3310] veth1_macvtap: entered promiscuous mode [ 38.486558][ T3430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.506298][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.520120][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.530637][ T3307] veth1_macvtap: entered promiscuous mode [ 38.543570][ T3430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.559431][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.568080][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.597525][ T3430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.610668][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.617947][ T3430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.638325][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.652719][ T3430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.665970][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.688342][ T3475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=3475 comm=syz.1.6 [ 38.703747][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.729545][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.741033][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 38.741051][ T29] audit: type=1400 audit(1754292460.612:108): avc: denied { create } for pid=3476 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.775453][ T3430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.797653][ T29] audit: type=1400 audit(1754292460.622:109): avc: denied { create } for pid=3474 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.818183][ T29] audit: type=1400 audit(1754292460.622:110): avc: denied { write } for pid=3474 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.835538][ T3430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.850506][ T3484] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=3484 comm=syz.4.7 [ 38.875823][ T29] audit: type=1400 audit(1754292460.722:111): avc: denied { setopt } for pid=3476 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.895188][ T29] audit: type=1400 audit(1754292460.742:112): avc: denied { cpu } for pid=3476 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.910023][ T3430] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.914069][ T29] audit: type=1400 audit(1754292460.742:113): avc: denied { write } for pid=3476 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.975794][ T3430] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.011239][ T3430] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.019332][ T29] audit: type=1400 audit(1754292460.802:114): avc: denied { prog_run } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.031425][ T3489] loop3: detected capacity change from 0 to 512 [ 39.059728][ T3489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.067507][ T3430] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.072874][ T3489] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.109999][ T29] audit: type=1400 audit(1754292460.962:115): avc: denied { create } for pid=3490 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.129393][ T29] audit: type=1400 audit(1754292460.962:116): avc: denied { write } for pid=3490 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.153071][ T3489] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.234874][ T3489] EXT4-fs (loop3): 1 truncate cleaned up [ 39.241041][ T3489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.259451][ T29] audit: type=1400 audit(1754292461.122:117): avc: denied { mount } for pid=3486 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.347140][ T3504] loop0: detected capacity change from 0 to 764 [ 39.386065][ T3504] Symlink component flag not implemented [ 39.396802][ T3504] Symlink component flag not implemented (129) [ 39.427028][ T3504] rock: directory entry would overflow storage [ 39.433336][ T3504] rock: sig=0x4f50, size=4, remaining=3 [ 39.438987][ T3504] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 39.521986][ T3504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8'. [ 39.664597][ T3504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.837021][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.852733][ T3504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.881745][ T3504] bond0 (unregistering): Released all slaves [ 39.927774][ T3522] loop3: detected capacity change from 0 to 512 [ 39.941110][ T3522] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.953622][ T3522] EXT4-fs (loop3): 1 truncate cleaned up [ 39.971509][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.321954][ T3530] loop4: detected capacity change from 0 to 512 [ 40.761607][ T3535] loop0: detected capacity change from 0 to 512 [ 40.807993][ T3535] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.869351][ T3535] EXT4-fs (loop0): 1 truncate cleaned up [ 40.875345][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.995718][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.101350][ T3546] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 41.246200][ T3528] syz.4.16 (3528) used greatest stack depth: 10752 bytes left [ 41.723964][ T3561] loop3: detected capacity change from 0 to 512 [ 41.738450][ T3561] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.750342][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.766454][ T3561] EXT4-fs (loop3): 1 truncate cleaned up [ 41.780528][ T3565] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 41.810959][ T3561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.837816][ C0] hrtimer: interrupt took 47484 ns [ 41.860577][ T3567] syz.4.30 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.990637][ T3576] tipc: Started in network mode [ 41.995575][ T3576] tipc: Node identity 9250c0334a5a, cluster identity 4711 [ 42.003089][ T3576] tipc: Enabled bearer , priority 0 [ 42.014239][ T3475] syz.1.6 (3475) used greatest stack depth: 7312 bytes left [ 42.099591][ T3576] tipc: Disabling bearer [ 42.308478][ T3590] loop0: detected capacity change from 0 to 512 [ 42.332757][ T3592] loop2: detected capacity change from 0 to 764 [ 42.346529][ T3590] ======================================================= [ 42.346529][ T3590] WARNING: The mand mount option has been deprecated and [ 42.346529][ T3590] and is ignored by this kernel. Remove the mand [ 42.346529][ T3590] option from the mount to silence this warning. [ 42.346529][ T3590] ======================================================= [ 42.382154][ T3590] EXT4-fs: Ignoring removed oldalloc option [ 42.392174][ T3592] Symlink component flag not implemented [ 42.403090][ T3590] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.49: Parent and EA inode have the same ino 15 [ 42.416630][ T3592] Symlink component flag not implemented (129) [ 42.426302][ T3592] rock: directory entry would overflow storage [ 42.432604][ T3592] rock: sig=0x4f50, size=4, remaining=3 [ 42.432734][ T3590] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.49: Parent and EA inode have the same ino 15 [ 42.438172][ T3592] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 42.441506][ T3592] netlink: 14 bytes leftover after parsing attributes in process `syz.2.39'. [ 42.471021][ T3590] EXT4-fs (loop0): 1 orphan inode deleted [ 42.477287][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.493101][ T3592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.511210][ T3592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.523539][ T3592] bond0 (unregistering): Released all slaves [ 42.560449][ T3596] netlink: 104 bytes leftover after parsing attributes in process `syz.0.49'. [ 42.573391][ T3596] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 42.689320][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.780719][ T3603] loop3: detected capacity change from 0 to 512 [ 42.791771][ T3603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.802880][ T3603] EXT4-fs (loop3): 1 truncate cleaned up [ 42.809715][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.026290][ T3611] loop1: detected capacity change from 0 to 512 [ 43.034235][ T3611] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.046966][ T3611] EXT4-fs (loop1): 1 truncate cleaned up [ 43.055069][ T3611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.143661][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.186127][ T3617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=3617 comm=syz.2.46 [ 43.499859][ T3623] loop4: detected capacity change from 0 to 512 [ 43.534847][ T3623] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.567230][ T3623] EXT4-fs (loop4): 1 truncate cleaned up [ 43.579806][ T3623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.267625][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.389920][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.475753][ T3641] loop3: detected capacity change from 0 to 764 [ 44.528809][ T3641] Symlink component flag not implemented [ 44.537209][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.579026][ T3641] Symlink component flag not implemented (129) [ 44.586378][ T3641] rock: directory entry would overflow storage [ 44.592617][ T3641] rock: sig=0x4f50, size=4, remaining=3 [ 44.598195][ T3641] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 44.616004][ T3641] netlink: 14 bytes leftover after parsing attributes in process `syz.3.55'. [ 44.639282][ T3641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.649871][ T3641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.659881][ T3641] bond0 (unregistering): Released all slaves [ 44.727176][ T3647] loop4: detected capacity change from 0 to 512 [ 44.753251][ T3647] EXT4-fs: Ignoring removed oldalloc option [ 44.782927][ T3647] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.57: Parent and EA inode have the same ino 15 [ 44.796322][ T3647] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.57: Parent and EA inode have the same ino 15 [ 44.814061][ T3647] EXT4-fs (loop4): 1 orphan inode deleted [ 44.820436][ T3647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.834142][ T29] kauditd_printk_skb: 568 callbacks suppressed [ 44.834185][ T29] audit: type=1326 audit(1754292466.702:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 44.863795][ T29] audit: type=1326 audit(1754292466.702:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 44.887028][ T29] audit: type=1326 audit(1754292466.702:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 44.910231][ T29] audit: type=1326 audit(1754292466.702:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 44.933474][ T29] audit: type=1326 audit(1754292466.702:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 44.956815][ T29] audit: type=1326 audit(1754292466.702:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 44.980007][ T29] audit: type=1326 audit(1754292466.702:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 45.003242][ T29] audit: type=1326 audit(1754292466.702:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 45.026485][ T29] audit: type=1326 audit(1754292466.702:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 45.035593][ T3649] netlink: 104 bytes leftover after parsing attributes in process `syz.4.57'. [ 45.049761][ T29] audit: type=1326 audit(1754292466.702:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3646 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088867eb69 code=0x7ffc0000 [ 45.587094][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.744515][ T3672] loop2: detected capacity change from 0 to 512 [ 45.758151][ T3672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.775007][ T3671] tipc: Started in network mode [ 45.779963][ T3671] tipc: Node identity ae256bb8f626, cluster identity 4711 [ 45.780551][ T3673] loop1: detected capacity change from 0 to 512 [ 45.787121][ T3671] tipc: Enabled bearer , priority 0 [ 45.798596][ T3672] EXT4-fs (loop2): 1 truncate cleaned up [ 45.816368][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.922428][ T3671] tipc: Disabling bearer [ 46.290527][ T3682] loop3: detected capacity change from 0 to 764 [ 46.302361][ T3682] Symlink component flag not implemented [ 46.308062][ T3682] Symlink component flag not implemented (129) [ 46.315351][ T3682] rock: directory entry would overflow storage [ 46.321580][ T3682] rock: sig=0x4f50, size=4, remaining=3 [ 46.327154][ T3682] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 46.381161][ T3684] netlink: 14 bytes leftover after parsing attributes in process `syz.3.69'. [ 46.397146][ T3685] loop4: detected capacity change from 0 to 764 [ 46.411218][ T3685] Symlink component flag not implemented [ 46.417574][ T3685] Symlink component flag not implemented (129) [ 46.460767][ T3685] rock: directory entry would overflow storage [ 46.466973][ T3685] rock: sig=0x4f50, size=4, remaining=3 [ 46.472608][ T3685] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 46.489873][ T3686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.70'. [ 46.503815][ T3686] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.524179][ T3686] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.583096][ T3686] bond0 (unregistering): Released all slaves [ 46.677326][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.750282][ T3691] loop2: detected capacity change from 0 to 512 [ 46.760674][ T3691] EXT4-fs: Ignoring removed oldalloc option [ 46.763700][ T3694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=282 sclass=netlink_route_socket pid=3694 comm=syz.0.72 [ 46.792261][ T3691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.74: Parent and EA inode have the same ino 15 [ 46.809845][ T3691] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.74: Parent and EA inode have the same ino 15 [ 46.860789][ T3691] EXT4-fs (loop2): 1 orphan inode deleted [ 46.867098][ T3691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.935055][ T3702] netlink: 104 bytes leftover after parsing attributes in process `syz.2.74'. [ 47.287459][ T3709] tipc: Started in network mode [ 47.292519][ T3709] tipc: Node identity c630f4e7eb3b, cluster identity 4711 [ 47.299758][ T3709] tipc: Enabled bearer , priority 0 [ 47.337921][ T3709] tipc: Disabling bearer [ 47.451953][ T3714] macvlan0: entered allmulticast mode [ 47.457581][ T3714] veth1_vlan: entered allmulticast mode [ 47.481233][ T3714] veth1_vlan: left allmulticast mode [ 47.490481][ T3714] macvlan0 (unregistering): left allmulticast mode [ 47.596723][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.032344][ T3730] loop0: detected capacity change from 0 to 764 [ 48.060597][ T3730] Symlink component flag not implemented [ 48.081146][ T3730] Symlink component flag not implemented (129) [ 48.109790][ T3730] rock: directory entry would overflow storage [ 48.115990][ T3730] rock: sig=0x4f50, size=4, remaining=3 [ 48.117994][ T3738] netlink: 14 bytes leftover after parsing attributes in process `syz.0.88'. [ 48.121688][ T3730] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 48.173525][ T3743] loop1: detected capacity change from 0 to 512 [ 48.183156][ T3743] EXT4-fs: Ignoring removed oldalloc option [ 48.212956][ T3743] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.93: Parent and EA inode have the same ino 15 [ 48.253766][ T3743] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.93: Parent and EA inode have the same ino 15 [ 48.266992][ T3743] EXT4-fs (loop1): 1 orphan inode deleted [ 48.275145][ T3743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.322004][ T3756] Zero length message leads to an empty skb [ 48.344098][ T3760] netlink: 104 bytes leftover after parsing attributes in process `syz.1.93'. [ 48.483982][ T3765] loop3: detected capacity change from 0 to 2048 [ 48.493969][ T3765] EXT4-fs: dax option not supported [ 49.016099][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.035131][ T3790] loop0: detected capacity change from 0 to 256 [ 49.045923][ T3790] vfat: Unknown parameter 'uni_xlaçgÍ©H˜h²ir' [ 49.366170][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 49.413551][ T3804] loop4: detected capacity change from 0 to 764 [ 49.624539][ T3804] Symlink component flag not implemented [ 49.632294][ T3804] Symlink component flag not implemented (129) [ 49.639341][ T3804] rock: directory entry would overflow storage [ 49.645629][ T3804] rock: sig=0x4f50, size=4, remaining=3 [ 49.651238][ T3804] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 49.663318][ T3804] netlink: 14 bytes leftover after parsing attributes in process `syz.4.117'. [ 49.750751][ T3818] loop3: detected capacity change from 0 to 256 [ 49.763739][ T3818] FAT-fs (loop3): unable to read block(34359738368) for building NFS inode [ 49.786037][ T3818] netlink: 156 bytes leftover after parsing attributes in process `syz.3.122'. [ 49.805879][ T3818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.122'. [ 49.817929][ T3822] loop0: detected capacity change from 0 to 512 [ 49.827847][ T3822] EXT4-fs: Ignoring removed oldalloc option [ 49.876953][ T3822] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.124: Parent and EA inode have the same ino 15 [ 49.900912][ T29] kauditd_printk_skb: 902 callbacks suppressed [ 49.900927][ T29] audit: type=1400 audit(1754292471.772:1598): avc: denied { ioctl } for pid=3819 comm="syz.2.123" path="socket:[5430]" dev="sockfs" ino=5430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 49.943042][ T3822] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.124: Parent and EA inode have the same ino 15 [ 49.965901][ T3822] EXT4-fs (loop0): 1 orphan inode deleted [ 49.972343][ T3822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.000288][ T29] audit: type=1400 audit(1754292471.832:1599): avc: denied { name_bind } for pid=3824 comm="syz.3.125" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.022060][ T29] audit: type=1400 audit(1754292471.832:1600): avc: denied { create } for pid=3824 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.041755][ T29] audit: type=1400 audit(1754292471.832:1601): avc: denied { getopt } for pid=3824 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.061495][ T29] audit: type=1400 audit(1754292471.852:1602): avc: denied { getopt } for pid=3824 comm="syz.3.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.085677][ T3831] netlink: 104 bytes leftover after parsing attributes in process `syz.0.124'. [ 50.101577][ T29] audit: type=1400 audit(1754292471.972:1603): avc: denied { create } for pid=3833 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.103671][ T3831] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 50.120999][ T29] audit: type=1400 audit(1754292471.972:1604): avc: denied { ioctl } for pid=3833 comm="syz.2.127" path="socket:[6422]" dev="sockfs" ino=6422 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 50.140613][ T3828] tipc: Started in network mode [ 50.157534][ T3828] tipc: Node identity 5e42dfd792b5, cluster identity 4711 [ 50.164797][ T3828] tipc: Enabled bearer , priority 0 [ 50.175836][ T29] audit: type=1400 audit(1754292472.052:1605): avc: denied { read } for pid=3833 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.207270][ T3828] tipc: Disabling bearer [ 50.286976][ T29] audit: type=1400 audit(1754292472.142:1606): avc: denied { connect } for pid=3842 comm="syz.4.130" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.351213][ T3847] loop3: detected capacity change from 0 to 512 [ 50.378153][ T3849] loop1: detected capacity change from 0 to 1024 [ 50.420478][ T3849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.453892][ T29] audit: type=1400 audit(1754292472.322:1607): avc: denied { remove_name } for pid=3848 comm="syz.1.131" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.454000][ T3849] EXT4-fs error (device loop1): ext4_get_first_dir_block:3556: inode #11: comm syz.1.131: directory missing '..' [ 50.566098][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.651688][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.692366][ T3874] FAULT_INJECTION: forcing a failure. [ 50.692366][ T3874] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.705683][ T3874] CPU: 1 UID: 0 PID: 3874 Comm: syz.0.137 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 50.705776][ T3874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.705788][ T3874] Call Trace: [ 50.705795][ T3874] [ 50.705802][ T3874] __dump_stack+0x1d/0x30 [ 50.705856][ T3874] dump_stack_lvl+0xe8/0x140 [ 50.705956][ T3874] dump_stack+0x15/0x1b [ 50.705974][ T3874] should_fail_ex+0x265/0x280 [ 50.706010][ T3874] should_fail+0xb/0x20 [ 50.706177][ T3874] should_fail_usercopy+0x1a/0x20 [ 50.706212][ T3874] _copy_to_iter+0x24b/0xe30 [ 50.706240][ T3874] ? input_devices_seq_show+0x44f/0x470 [ 50.706306][ T3874] ? kfree+0xd9/0x320 [ 50.706413][ T3874] ? seq_list_next+0x32/0x50 [ 50.706433][ T3874] seq_read_iter+0x76a/0x940 [ 50.706468][ T3874] seq_read+0x1f7/0x240 [ 50.706588][ T3874] ? __pfx_seq_read+0x10/0x10 [ 50.706655][ T3874] proc_reg_read+0x128/0x1c0 [ 50.706687][ T3874] ? __pfx_proc_reg_read+0x10/0x10 [ 50.706737][ T3874] vfs_readv+0x3fb/0x690 [ 50.706794][ T3874] ? _raw_spin_unlock+0x26/0x50 [ 50.706827][ T3874] ? __pfx_proc_reg_read+0x10/0x10 [ 50.706872][ T3874] ? mutex_lock+0xd/0x30 [ 50.706903][ T3874] do_readv+0xe7/0x210 [ 50.706944][ T3874] __x64_sys_readv+0x45/0x50 [ 50.706974][ T3874] x64_sys_call+0x29f8/0x2ff0 [ 50.707054][ T3874] do_syscall_64+0xd2/0x200 [ 50.707088][ T3874] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.707117][ T3874] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.707279][ T3874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.707377][ T3874] RIP: 0033:0x7f3ee350eb69 [ 50.707401][ T3874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.707423][ T3874] RSP: 002b:00007f3ee1b77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 50.707446][ T3874] RAX: ffffffffffffffda RBX: 00007f3ee3735fa0 RCX: 00007f3ee350eb69 [ 50.707458][ T3874] RDX: 0000000000000009 RSI: 0000200000000580 RDI: 0000000000000006 [ 50.707469][ T3874] RBP: 00007f3ee1b77090 R08: 0000000000000000 R09: 0000000000000000 [ 50.707491][ T3874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.707503][ T3874] R13: 0000000000000000 R14: 00007f3ee3735fa0 R15: 00007ffe1cda7c18 [ 50.707520][ T3874] [ 51.016552][ T3883] loop0: detected capacity change from 0 to 764 [ 51.025408][ T3883] Symlink component flag not implemented [ 51.031259][ T3883] Symlink component flag not implemented (129) [ 51.040996][ T3883] rock: directory entry would overflow storage [ 51.047195][ T3883] rock: sig=0x4f50, size=4, remaining=3 [ 51.052871][ T3883] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 51.074036][ T3883] netlink: 14 bytes leftover after parsing attributes in process `syz.0.139'. [ 51.206852][ T3897] FAULT_INJECTION: forcing a failure. [ 51.206852][ T3897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.220031][ T3897] CPU: 0 UID: 0 PID: 3897 Comm: syz.3.146 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 51.220069][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.220085][ T3897] Call Trace: [ 51.220093][ T3897] [ 51.220101][ T3897] __dump_stack+0x1d/0x30 [ 51.220132][ T3897] dump_stack_lvl+0xe8/0x140 [ 51.220153][ T3897] dump_stack+0x15/0x1b [ 51.220172][ T3897] should_fail_ex+0x265/0x280 [ 51.220213][ T3897] should_fail+0xb/0x20 [ 51.220241][ T3897] should_fail_usercopy+0x1a/0x20 [ 51.220294][ T3897] _copy_from_user+0x1c/0xb0 [ 51.220318][ T3897] do_fcntl+0x5f9/0xdf0 [ 51.220390][ T3897] ? selinux_file_fcntl+0x1cb/0x1e0 [ 51.220432][ T3897] __se_sys_fcntl+0xb1/0x120 [ 51.220461][ T3897] __x64_sys_fcntl+0x43/0x50 [ 51.220566][ T3897] x64_sys_call+0x29a0/0x2ff0 [ 51.220586][ T3897] do_syscall_64+0xd2/0x200 [ 51.220609][ T3897] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.220642][ T3897] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.220668][ T3897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.220731][ T3897] RIP: 0033:0x7f6d15a8eb69 [ 51.220748][ T3897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.220765][ T3897] RSP: 002b:00007f6d140ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 51.220784][ T3897] RAX: ffffffffffffffda RBX: 00007f6d15cb5fa0 RCX: 00007f6d15a8eb69 [ 51.220799][ T3897] RDX: 0000200000000140 RSI: 0000000000000024 RDI: 0000000000000003 [ 51.220858][ T3897] RBP: 00007f6d140ef090 R08: 0000000000000000 R09: 0000000000000000 [ 51.220873][ T3897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.220888][ T3897] R13: 0000000000000000 R14: 00007f6d15cb5fa0 R15: 00007fff99cb97a8 [ 51.220912][ T3897] [ 51.221550][ T3887] loop1: detected capacity change from 0 to 512 [ 51.303360][ T3903] loop4: detected capacity change from 0 to 512 [ 51.345901][ T3887] EXT4-fs: Ignoring removed nobh option [ 51.423936][ T3903] EXT4-fs: Ignoring removed oldalloc option [ 51.437254][ T3906] syz.2.150 uses obsolete (PF_INET,SOCK_PACKET) [ 51.468702][ T3907] ================================================================== [ 51.476833][ T3907] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 51.485818][ T3907] [ 51.488165][ T3907] read to 0xffff888101b1ee20 of 4 bytes by task 3909 on cpu 1: [ 51.490826][ T3903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.148: Parent and EA inode have the same ino 15 [ 51.495724][ T3907] selinux_inode_permission+0x334/0x740 [ 51.513455][ T3907] security_inode_permission+0x6d/0xb0 [ 51.518956][ T3907] inode_permission+0x106/0x310 [ 51.523839][ T3907] link_path_walk+0x162/0x900 [ 51.528551][ T3907] path_openat+0x1de/0x2170 [ 51.533072][ T3907] do_filp_open+0x109/0x230 [ 51.537593][ T3907] do_sys_openat2+0xa6/0x110 [ 51.542216][ T3907] __x64_sys_openat+0xf2/0x120 [ 51.547025][ T3907] x64_sys_call+0x2e9c/0x2ff0 [ 51.551727][ T3907] do_syscall_64+0xd2/0x200 [ 51.556270][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.562197][ T3907] [ 51.564539][ T3907] write to 0xffff888101b1ee20 of 4 bytes by task 3907 on cpu 0: [ 51.572181][ T3907] selinux_inode_permission+0x3ac/0x740 [ 51.577781][ T3907] security_inode_permission+0x6d/0xb0 [ 51.583269][ T3907] inode_permission+0x106/0x310 [ 51.588161][ T3907] link_path_walk+0x162/0x900 [ 51.592870][ T3907] path_openat+0x1de/0x2170 [ 51.597393][ T3907] do_filp_open+0x109/0x230 [ 51.601920][ T3907] do_sys_openat2+0xa6/0x110 [ 51.606542][ T3907] __x64_sys_openat+0xf2/0x120 [ 51.611344][ T3907] x64_sys_call+0x2e9c/0x2ff0 [ 51.616050][ T3907] do_syscall_64+0xd2/0x200 [ 51.620578][ T3907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.626493][ T3907] [ 51.628833][ T3907] value changed: 0x00000002 -> 0x00000000 [ 51.634569][ T3907] [ 51.636909][ T3907] Reported by Kernel Concurrency Sanitizer on: [ 51.643073][ T3907] CPU: 0 UID: 0 PID: 3907 Comm: syz.3.151 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 51.655074][ T3907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.665150][ T3907] ================================================================== [ 51.678040][ T3903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.148: Parent and EA inode have the same ino 15 [ 51.696805][ T3903] EXT4-fs (loop4): 1 orphan inode deleted [ 51.709379][ T3903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.732465][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.142: corrupted inode contents [ 51.747258][ T3887] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.142: mark_inode_dirty error [ 51.761901][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.142: corrupted inode contents [ 51.775554][ T3887] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.142: mark_inode_dirty error [ 51.791079][ T3914] netlink: 104 bytes leftover after parsing attributes in process `syz.4.148'. [ 51.794412][ T3887] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.142: Failed to acquire dquot type 0 [ 51.800436][ T3914] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 51.824157][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.142: corrupted inode contents [ 51.837865][ T3887] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.142: mark_inode_dirty error [ 51.852186][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.142: corrupted inode contents [ 51.865570][ T3887] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.142: mark_inode_dirty error [ 51.877848][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.142: corrupted inode contents [ 51.892374][ T3887] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 51.901892][ T3887] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.142: corrupted inode contents [ 51.914631][ T3887] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.142: mark_inode_dirty error [ 51.926748][ T3887] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 51.937538][ T3887] EXT4-fs (loop1): 1 truncate cleaned up [ 51.944635][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.958333][ T3887] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.029409][ T3887] netlink: 14 bytes leftover after parsing attributes in process `syz.1.142'. [ 52.038620][ T3887] hsr_slave_0: left promiscuous mode [ 52.046017][ T3887] hsr_slave_1: left promiscuous mode [ 52.113237][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.141538][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.