last executing test programs: 4m21.184123418s ago: executing program 0 (id=4651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xfb}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 4m20.348363624s ago: executing program 0 (id=4653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) 4m20.181390561s ago: executing program 0 (id=4656): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000280000000000000000000000870a40000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x6b}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x6abb, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r6, 0x351e, 0x483, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r11, @ANYBLOB="08000300"], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 4m19.852652455s ago: executing program 0 (id=4660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x8400, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000340)=0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") 4m18.233629065s ago: executing program 0 (id=4678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0xfffffffffffffe8f, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090002000000ffdbdf250200000008000800", @ANYRES32, @ANYBLOB="cd6478586a36f8bad08df117fffffffffff7fb026541dcc3d7ca200600dda88b6500000000000000456ecf"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ec0)={0x30, r2, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x8084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@delalloc}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m14.515507885s ago: executing program 0 (id=4702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r1, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 4m14.488833896s ago: executing program 32 (id=4702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r1, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 4m10.327528154s ago: executing program 3 (id=4741): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0xfb}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m10.154692922s ago: executing program 3 (id=4742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0xc}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4044080) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x3a, @multicast2, 0x4e24, 0x2, 'lblc\x00', 0x17, 0xb0e, 0x7c}, 0x2c) 4m9.997190478s ago: executing program 3 (id=4744): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x13, 0x94, &(0x7f0000000e40)}) 4m8.778701901s ago: executing program 3 (id=4755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x8400, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000340)=0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") 4m7.468943287s ago: executing program 3 (id=4773): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, &(0x7f0000001fc0)=""/4086, 0xff6) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000000)=0x87f, 0x6, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0xa, 0x1, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000740)=""/141, 0x8d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) socket(0x10, 0x3, 0xa) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0xff39) sched_setscheduler(0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 4m5.134153258s ago: executing program 3 (id=4803): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg$sock(r0, &(0x7f0000002480)=[{{&(0x7f00000004c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="584298b60e22f13fb45c8ffc6c7c52d09b4cba22598dba7400298f0b4c50862cb516c050e89bd97f76b7b6c7d3c8201779be75b16c01da90287a986463", 0x3d}, {&(0x7f0000000180)="8fa01f1d1044656a4ce2d8da76f90d14e181c1506cb286d14e51e37179d803a6", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="b838c0d2918b0b5fe0cd837717d4616297cfd383fb984124c91f32188f7d41d86177fe4ca0867e0e72b8aa80e5629ff8a968161f97bc38044c47e989c3168aa8ad2cb3a3100c09b10387f64f18ec987107e15a186b47a4f5551b468954fdf180907f7bc7a0c448c6bcac626f4b31d0057d0beb6e37096c29b564af0593af093adcb8de360205f467074411b9a860268f30228d6ec02ef2de2429ffa3fe373b83f2a4e64629806dcf1915148bfc0fcd3a369487550cd4c28d0ae5f9507d1d5ed3d5bb1d850f61ded564cebc", 0xcb}, {&(0x7f00000007c0)="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", 0xfb}, {&(0x7f00000012c0)="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", 0x3bc}], 0x3, &(0x7f0000000540)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x6b}}], 0x48}}], 0x2, 0x20048002) 4m5.014132653s ago: executing program 33 (id=4803): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg$sock(r0, &(0x7f0000002480)=[{{&(0x7f00000004c0)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="584298b60e22f13fb45c8ffc6c7c52d09b4cba22598dba7400298f0b4c50862cb516c050e89bd97f76b7b6c7d3c8201779be75b16c01da90287a986463", 0x3d}, {&(0x7f0000000180)="8fa01f1d1044656a4ce2d8da76f90d14e181c1506cb286d14e51e37179d803a6", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="b838c0d2918b0b5fe0cd837717d4616297cfd383fb984124c91f32188f7d41d86177fe4ca0867e0e72b8aa80e5629ff8a968161f97bc38044c47e989c3168aa8ad2cb3a3100c09b10387f64f18ec987107e15a186b47a4f5551b468954fdf180907f7bc7a0c448c6bcac626f4b31d0057d0beb6e37096c29b564af0593af093adcb8de360205f467074411b9a860268f30228d6ec02ef2de2429ffa3fe373b83f2a4e64629806dcf1915148bfc0fcd3a369487550cd4c28d0ae5f9507d1d5ed3d5bb1d850f61ded564cebc", 0xcb}, {&(0x7f00000007c0)="e38067d685d08fdf5d3f143f50415fde86c71140b0b4f3264f742fbc09b24b3828b5a805821b923cd497149432d64f3a8b458ee89d1d787d4b8be73062b6d0b884b7679287317b0c1b6f5ce53e3a600a397c9527ca7c28e84321a1f8d6114fcd8262b31101cd6cba3b62828738f4402885f63ee7a762793d75719cd7c0782f1921e68d199c7f675267d5f42c5b72313a176a8be0f44419b267c287a35ece14c095ced7bb141f552ee5e8fd57c9b68fdc68c0b64759fdeb1d88627831df0540d8cbafad274743b7f8343f3e734ff53e1bbfea8ca09fecbe4490c2e166cf7d8c8f4aa4dab7728435269836a94faa35dd44d01b0328b0a7e4359ff1e3", 0xfb}, {&(0x7f00000012c0)="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", 0x3bc}], 0x3, &(0x7f0000000540)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x6b}}], 0x48}}], 0x2, 0x20048002) 33.27708778s ago: executing program 1 (id=7318): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x11, 0xfffffffffffffd9e, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000440)='f2fs_write_checkpoint\x00', r0, 0x0, 0x14000000000000}, 0x18) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r4 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xfffffffffffffb2e, 0x2}, &(0x7f0000000340)) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x80000001, 0x3, 0x1, 0x81, 0x1ff, 0xfffffffd, 0x1}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095", @ANYRES8=r4, @ANYRES16=r2, @ANYRESHEX=r0], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000000040000000440000005000000", @ANYRES32=r7, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r8 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0), 0x48600, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000ae0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702020008000000b70300000000000085000000737ab80af3a3"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000004c0), &(0x7f0000000540)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x18) 32.860054558s ago: executing program 1 (id=7326): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x80000}, 0x18) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet6(0xa, 0x1, 0x800) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000100)='\a', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x412d0480, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x80, 0x2}, {0x0}, &(0x7f0000000280)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000000240)=""/49, 0x31}], 0x3, 0x0, 0x2}}], 0x48, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r7, @ANYBLOB="16cfc515847a96d5ec40aa629b29dbce89f7c103b1d93b100456ff9cbcd4dca9defbf72be3055c2589351597ee8c611a7270301fc29dec4a803902d3d55b9b4f936f9833fe9dad98335ec209b9bbfcd95ce13e3ca67791516227dda81a0bcb334fb1d8f484ca8c2cae9b2a855f53ef02b3a6421421dd4b0076b0a4c6dae57123fd808ff08334cbc239ff35cd10520955c534ce0bb76f55339a01b94be000cc745db4843d39d84202181bf65e5499b24d40fd", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0xffffffffffffff37) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001e00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r9}, 0x18) 31.795484704s ago: executing program 1 (id=7335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) 31.770977775s ago: executing program 1 (id=7337): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x2, 0x3}, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x4, 0x0, 0x7, 0x441e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x18000, 0x8, 0x1, 0x8, 0x2420005, 0x13, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xb5, 0x0, 0xff, 0x0, 0x4, 0xb0a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x4082, 0x4, 0xfffffffd, 0x4, 0xfffffffffffffffd, 0x5, 0x2, 0x0, 0x1, 0x0, 0x18001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) socket$inet(0x2, 0xa, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fallocate(0xffffffffffffffff, 0x1, 0x8, 0x1101f0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES64=r6], 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 31.105352644s ago: executing program 1 (id=7344): r0 = socket$inet(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 30.868729334s ago: executing program 1 (id=7347): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="74726100003d0400008066646e6f3d", @ANYBLOB="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", @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00']) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, 0xffffffffffffffff, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x8) 30.844118495s ago: executing program 34 (id=7347): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="74726100003d0400008066646e6f3d", @ANYBLOB="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", @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00']) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, 0xffffffffffffffff, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x8) 24.2233423s ago: executing program 2 (id=7411): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x400, 0x583feaf5f69e7b14) ioctl$BLKRRPART(r5, 0x125f, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000080)="051a3018b64b673868a6b7afa2a700000e8000658f0600000000000000", 0x1d}], 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f00000002c0)) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2e}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0xad10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 23.839792026s ago: executing program 2 (id=7414): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 23.713447051s ago: executing program 2 (id=7417): r0 = fsopen(&(0x7f0000000000)='gadgetfs\x00', 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000cbffffff00000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) fsmount(r0, 0x0, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000000000000200000d0200000003000000020000000000000000000000060000000000000c010000000000005f00002e"], 0x0, 0x48}, 0x28) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) 23.626424005s ago: executing program 2 (id=7420): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x2, 0x3}, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x4, 0x0, 0x7, 0x441e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x18000, 0x8, 0x1, 0x8, 0x2420005, 0x13, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xb5, 0x0, 0xff, 0x0, 0x4, 0xb0a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x4082, 0x4, 0xfffffffd, 0x4, 0xfffffffffffffffd, 0x5, 0x2, 0x0, 0x1, 0x0, 0x18001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 23.408643915s ago: executing program 2 (id=7425): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="74726100003d0400008066646e6f3d", @ANYBLOB="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", @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00']) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Lu1cUB/CbgKSFSkQEBzsIBpdGhTjokAxWYprFiFiR0llw0EFwcJCU6OzLP6D4BuIidnYUI4hCnCSjOBcUl0wprU+hrV3aYkp/fD5LuPece08u3yfwvxYPPzWbzVgIoZn4+6e/Pc1PFHunxqZnQoiF70MI+S+/+LUSizp+u/U8WpeidTGRqe3fjL+cdtz23VdTh/GofhEP4YcQwuLjUfLfvo1P31nuKrm+sVzYXM0tPBTWnobnB/I9W/mlnZGDbHm2OzsXfVgX8dbMT9VGj++apefd9sG2aq2RuY760rGPmc9/68/573VV6pXGZP/JylC6s35Z3o5yf5U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwc5yV8n1jeXC5mpu4aGw9jQ8P5Dv2cov7YwcZMuz3dm5+FvfRbw181O10eO7Zul5t32wrVprZK6jvnTs3dGvf/yYv0QLfRX+mP9eV6VeaUz2n6wMpTvrl+XtKPfX9/kDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyl/ESxd2pseiaEWPgshPDN/Xd9v+w3E2/1WNR3Hv2Wov1iIlPbvxl/Oe247buvpg6nEiEkfnfv4uNR8vNWPoR/5OcAAAD//8gGhpo=") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r9, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x8) 23.243814721s ago: executing program 2 (id=7429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 23.195568934s ago: executing program 35 (id=7429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 10.527525818s ago: executing program 5 (id=7557): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000002f00090002000000ffdbdf2502000000080008", @ANYRES32, @ANYBLOB="cd6478586a36f8bad08df117fffffffffff7fb026541dcc3d7ca200600dda88b6500000000000000456ecf"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ec0)={0x30, r3, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x8084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@delalloc}]}, 0x0, 0x46e, &(0x7f0000000bc0)="$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") r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.378517027s ago: executing program 5 (id=7571): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000280), &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0x0, 0x1, 0x0, 0xd, "d92984bd1ca44c226af51625ff438a6375e8bb75b784110000f2130e65e3f50327e4220000000000000000000002020000000019003b0000008000", 0x33}, 0x60) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f00000004c0)=@nfc={0x27, r7, 0x1, 0x7}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="584298b60e22f13fb45c8ffc6c7c52d09b4cba22598dba7400298f0b4c50862cb516c050e89bd97f76b7b6c7d3c8201779be75b16c01da90287a986463", 0x3d}, {&(0x7f0000000180)="8fa01f1d1044656a4ce2d8da76f90d14e181c1506cb286d14e51e37179d803a6", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="b838c0d2918b0b5fe0cd837717d4616297cfd383fb984124c91f32188f7d41d86177fe4ca0867e0e72b8aa80e5629ff8a968161f97bc38044c47e989c3168aa8ad2cb3a3100c09b10387f64f18ec987107e15a186b47a4f5551b468954fdf180907f7bc7a0c448c6bcac626f4b31d0057d0beb6e37096c29b564af0593af093adcb8de360205f467074411b9a860268f30228d6ec02ef2de2429ffa3fe373b83f2a4e64629806dcf1915148bfc0fcd3a369487550cd4c28d0ae5f9507d1d5ed3d5bb1d850f61ded564cebc9904dd", 0xce}, {&(0x7f00000007c0)="e38067d685d08fdf5d3f143f50415fde86c71140b0b4f3264f742fbc09b24b3828b5a805821b923cd497149432d64f3a8b458ee89d1d787d4b8be73062b6d0b884b7679287317b0c1b6f5ce53e3a600a397c9527ca7c28e84321a1f8d6114fcd8262b31101cd6cba3b62828738f4402885f63ee7a762793d75719cd7c0782f1921e68d199c7f675267d5f42c5b72313a176a8be0f44419b267c287a35ece14c095ced7bb141f552ee5e8fd57c9b68fdc68c0b64759fdeb1d88627831df0540d8cbafad274743b7f8343f3e734ff53e1bbfea8ca09fecbe4490c2e166", 0xdc}, {&(0x7f00000012c0)="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", 0x1000}], 0x3, &(0x7f0000000540)=[@txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x6b}}], 0x48}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x93ee}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)}, {&(0x7f0000000c40)="335419dd2dd2250f7caee4cb38930075abe59ba5aa3aed4cd9a33da9ea2b086ff86d6b2b4a56c4a2cac452d1432d245cdcfc261c0c46efd9bbbc455b1140fc464e2527224a33160245d0ed3c3e2508005c3f27a55b1f9afb2bb7c15af545654cb2d3c4c23b6b378fbb762e63e07fdb756364118b3e6afd0f5df5607dc88695c3607f623d237b63fe21fe887dfd2a88fb69bd5aa88faf4bbc3c4c8cfcbef56c417643835ceea8f9dc051b46062c51ce2bc6129371d15daa7e1a81d3b891ad0bdd6b40bf4dfa54e05032e4dbf5e60982d5ab46648530074c5e5f1b7c5099a8639973499c39be4ae44a6f8db423", 0xec}], 0x2, &(0x7f0000000dc0)=[@mark={{0x14, 0x1, 0x24, 0x1}}], 0x18}}, {{&(0x7f0000000e00)=@phonet={0x23, 0x7, 0x8, 0x1}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e80)="267ae9b1b17222d48a225b44a333295f2d8ada49f992dfbffc97", 0x1a}, {&(0x7f0000000ec0)="2f24ccf50d87e54581818ad15b6962889b1aac4619fd11eae8e8932585d16cb4b622480ccd866c19a8c6700ff3b913718bef3866bd66a33233e5dd8d6eb4d79610b08ee0e6231ede76175c540d51775723f827ff8fb4db47514f620cb5a8adfe839a24a459c01b5937febe7688682952eacb490b41dbfe1fa17b73d0b9f498f147a11c9993bf34ab3262e586d45c8c1750cac940892af79221289c4e6a5a54eaa518f30726568c59d4fbc0da1d9eefacbbffddbabd2b8a7f2bc8991fd13dd0c1886fb512d6f42cdac89275b51476b732bb29d30e21c7d83bec6f713e16f747d1", 0xe0}, {&(0x7f0000000fc0)="a18863dd2de4640e8111795ffcec2b39419e258d2df710ea957ed98b422b7b559160c8404df83ad0402e0ee288fd634f1c53d3b9b9c13386f343350236c2565728", 0x41}, {&(0x7f0000001040)="1289cdd98f187bba8e7bd3b99bb9e8561b8c49a261b319b01c3ca9f53b5423eb90d86d6d5ba9fb8e646a43deac64a09f0f40", 0x32}], 0x4, &(0x7f00000010c0)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffe}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}], 0x30}}], 0x5, 0x20048002) sendmmsg(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 9.030697422s ago: executing program 5 (id=7575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) getsockname$unix(r4, &(0x7f0000000340)=@abs, &(0x7f0000000080)=0x6e) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001002dbd7000de8e12559f0130c1f9000002000000000500130040000000"], 0x24}}, 0x0) 8.121351281s ago: executing program 5 (id=7588): r0 = semget$private(0x0, 0x4000000009, 0x208) semop(r0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x2, 0x3}, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x4, 0x0, 0x7, 0x441e, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x18000, 0x8, 0x1, 0x8, 0x2420005, 0x13, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xb5, 0x0, 0xff, 0x0, 0x4, 0xb0a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x4082, 0x4, 0xfffffffd, 0x4, 0xfffffffffffffffd, 0x5, 0x2, 0x0, 0x1, 0x0, 0x18001}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 7.600345404s ago: executing program 5 (id=7593): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x24, 0x480d, 0xfffffffb, 0xf, 0x1, "f5b30c970f002100000000f6ff04621ca77b00"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x7) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.328147855s ago: executing program 5 (id=7599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000010000304021f00080000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800900010069706970000000005400028005000900290000000800020000000000050005000000000006001000104000000800140005000000060012004e24000005000400090000000600100001000000060011004e23000005000900"], 0x84}, 0x1, 0x0, 0x0, 0x4000081}, 0x8044) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000010000304021f00080000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800900010069706970000000005400028005000900290000000800020000000000050005000000000006001000104000000800140005000000060012004e24000005000400090000000600100001000000060011004e23000005000900"], 0x84}, 0x1, 0x0, 0x0, 0x4000081}, 0x8044) (async) 7.290618677s ago: executing program 36 (id=7599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000010000304021f00080000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800900010069706970000000005400028005000900290000000800020000000000050005000000000006001000104000000800140005000000060012004e24000005000400090000000600100001000000060011004e23000005000900"], 0x84}, 0x1, 0x0, 0x0, 0x4000081}, 0x8044) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="8400000010000304021f00080000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800900010069706970000000005400028005000900290000000800020000000000050005000000000006001000104000000800140005000000060012004e24000005000400090000000600100001000000060011004e23000005000900"], 0x84}, 0x1, 0x0, 0x0, 0x4000081}, 0x8044) (async) 3.527480039s ago: executing program 9 (id=7629): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.243326131s ago: executing program 9 (id=7632): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x8c0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xe9) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="73a68934c47a2f7e89143760022c00"]) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000840)={r3}) kexec_load(0x9, 0x9, &(0x7f0000000700)=[{&(0x7f0000000a40)="6f56c6450a938372673e359a443207b57d6391ba273287f389c6ac0c779543001ad14f1bf2761f5af56891013581dc34e7c6055bbf43f2952918e047305e828b190cca842cbb5d29207a5d69ed5f38a38f219462116ca87370456f87e6599066d850dccb79f9d83b4728", 0x6a, 0x800, 0x362}, {&(0x7f0000000080)="49b50e7228d205d94421ded06134c494e0dcf327cb9b18ff39a34c92eec61bb6e79fff89334aa94339f6f41d0b859c1e51fa1dec282b457b5051cc8d1426f18525e2bd5c0a466f10447126ee2004d42643d7cfc05c87ac75bba87c7dedca6e42450230abda8abddf926c8f714844aaad02d3bfe57231ff2881cd42f3bdb03b6cb7cd970ccf90d94550825adc316e7896beec594fca074ed1a72305d04cab8e31879c242ae0e13d82f529f952e7c084871eef336526ea4dc4d08da084042fdfb00783785bc53a11505bbdcf4628ae93d6", 0xd0, 0x241, 0x1}, {&(0x7f0000000180)="02a87774e01ffe7c4d6eb6ec83961826014ff6ba3326695a7ebe51d979f23dca45d75d89b1b6dd9be577565ca7672aa3a6f900be97712d4b405d948a47007bf79703d001aed1b3d66977829aaf520fc387e93b419b3093e802da8eb7d5c14977369d65a101137421c76ce0750928b61da02b0291b5770f666eb12eac677b60b15861e35ac2dd7aee635920b7413ca745d530db59b48adc36cea64b39827c0553409e9ae445decb5862da180d5a552f83be91b2284b4533e32ecc0e08a8d662d11986d10576604240a6721bc15670c1dfd183386b3a0a644e7dcdb3d6d46e2b15e34c1765b288d97ce4965db1d65cefcd1d80ec1935", 0xf5, 0x4, 0x40}, {&(0x7f0000000280)="7ea985c89749f3969c82db7cba41bb48b20af752873cb1e7b3e8f439147bb7bc77284226af30078a36e61c7a0d0f1a60c9d4a80cab462de7acd738db4ef1a901b843b12c9b452b888ef30dd21987c21b308b5fd7f12d33d3e42a0e1f987f4a6e43cba7748170b37cd467f21ceaa8d2032a9779d2e17c87261d191d64f900d2ae9d2a64bb5153874c818fe12b0f418d4b89aff6daddb392b0ec", 0x99, 0x8, 0x9}, {&(0x7f0000000340)="ce152cc3c457bf1f9b564e5d8ac3108a5a1caa2e672d334bdb54657cedbd6ebb56785555ba2f0c7dfca5a9e8462d8d23d5fee922ef098bc5b207e2012f12f5f8e9f7bb0d3efc1a7e1b2ee8a2328997b1b05a4a27891b6111c8a69bb58d", 0x5d, 0x2, 0x3}, {&(0x7f00000003c0)="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", 0xfe, 0x3, 0x5}, {&(0x7f00000004c0)="99739da3f482d484cc0e60a9f31440b288b9bd59ef497fc5164bac9d5183524919800f09d48da3808250d325ec0dcf161a58e59604c948957fabf18e87c16e1fa02066f8c5d9600b76f59e5e0128db4ae3b71d26f73a8364e2448864329a05264fd2b3a1d6a2fc5646686b9ca141d68964eb72c867400190490335e8fa9e9bafa0b5bba0cf39b1a0b1161f6137d732193f0ee49ba9", 0x95, 0x2b, 0x7fffffffffffffff}, {&(0x7f0000000580)="0d6be9bbebbecac1a7f94dc4236db503b168d51e4b795fb8013349a6a5c1d54eea3c2a1d92725e86d1a811aa13e24dbaaebba0903c38e3e8bca3ea4518588f38c2ef5cf1cdfe426ce75c7c615e07df137620ba57469702c17fb5419c8f682f4ce5fa03250b4b93575547c850c9801a9f9a2cbccbf99b837ff1fe62a29245820bf62c81f42941a587483f6088159b8d25037646b20be884d64757f79f35baf75eab64fd223b5600d2504cd9146db217b3c3d468f4c0a672f84095d4b1cce587d3391863d67531bd39af00af61ea7c2c62090de777e37cfc8721ff7d989e016ef37dd3944cd812ef4502a298dd743b87524031fdb94880fd49eb", 0xf9, 0x8, 0x5}, {&(0x7f0000000ac0)="87940962b172cfd977018f0193dcac1231ddd099c0d5fea3117d9e9d32319861fa99d1cd7ff511cb6b2509ddeee40e98522e04651782c4e873a43f7062f319ecc8bde2942fe7b735e17ae6afb33a0f73460d354a94b1f33187e909be258f94893b0e36aececbb040c643139912d8e88b869a95b0d4f131ccfed4f358f0289acb80ec812fccfe18532f4c3c9b20cfdfaf614ed74f907594b19d", 0x99, 0x6, 0xc753}], 0x2) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a00)={@multicast1, @private=0xa010100}, 0xc) r5 = getpid() tgkill(r5, r5, 0x29) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x4, 0x7, 0x6, 0x0, 0x6, 0x40000, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x81, 0x8000000000000001}, 0xa200, 0x2, 0x13280000, 0x6, 0x9, 0x10000, 0x81, 0x0, 0xb, 0x0, 0x200}, r5, 0x8, 0xffffffffffffffff, 0x0) 3.038357309s ago: executing program 6 (id=7635): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.037878769s ago: executing program 4 (id=7636): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[]) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r2, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r8, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x8) 2.966075872s ago: executing program 6 (id=7637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x800, 0x6, 0x196}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) close_range(r2, r5, 0x0) 2.784609821s ago: executing program 8 (id=7639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000020000000400000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 2.721876143s ago: executing program 7 (id=7640): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040081}, 0x400c000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r5, 0x2, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, r4, 0x0, 0x0, 0x16}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f00000006c0)="0000000000000f003f", 0x9, 0x1}]) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) 2.522731912s ago: executing program 6 (id=7641): r0 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="74726100003d0400008066646e6f3d", @ANYBLOB="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", @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00']) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r9, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2.33008342s ago: executing program 9 (id=7642): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.222909734s ago: executing program 7 (id=7643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3ff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x24000840) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x40, 0xa, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffff8b0}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xf25}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x410}, 0x40844) 2.216939235s ago: executing program 9 (id=7644): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4001) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002080)=@newtfilter={0xbc, 0x2c, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r10, {0xfffa, 0x5}, {}, {0x1c, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x8c, 0x2, [@TCA_FLOWER_ACT={0x88, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x7, 0xfc, 0x3}, 0xb}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x34, 0x1a, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) 2.038420082s ago: executing program 7 (id=7645): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000700)={0x5, {{0xa, 0x4e20, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x88) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000004c0)={0xfffffffc, 0x0, 0x0, 'queue0\x00', 0x1}) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B\v', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbddf", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="0180", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341", 0x2c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="48f1de1cd7616a9eea86a41ecf04cceeddb4430a7b7742c38665fdbf5546ec1934a785745da823401d4304826be122f353357d2b8ab9187962b9c764046966d20ddca8b2eb5207508fc3c914521635f8495c492dc4c390435a1e88694b0e4ac3647c26591db6b517bf8604c677cea93f1704f2da01a05114ccf361516e7c2f8784400e1689e7aea4e9f2c2c5d809853907395a83e8678ad40130", 0x9a}, {&(0x7f0000000100)="9547ae6bf1d763cf0e7307ac24e6f3d40cea60303660212049ebaf94f33bf23d10", 0x21}, {&(0x7f0000000200)="3ff01ada8faac3fcb6902e16ecdf697ec7d2578a34acff6b93550d7cff77e63eed37cf26e57cb8b582d6f0f69216523ac93fadd3037755808e7957a334cb5fe1cd", 0x41}, {&(0x7f00000015c0)="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", 0x477}], 0x4}}], 0x5, 0x400c404) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x1080}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) 2.029715593s ago: executing program 4 (id=7646): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="22afafc3ff1f0021dc929e9b4b4eeae23cf8265751851a34c52a8e20bb4c886dd6b9ce731d94188575adc00c04803dd99fd22f18d0a613b4d02f0c6e2b4b1de51234ad5bcb120f3b45d6a55c1783e9bdb96b212c66ae25001ee675ef655f65324e30ee16cd75791fbc886300bb4c8fe042720c2460895d1ba47fdf9154549143ab9d5d6b6bae2d36a2f04331ecc02d8067c18455cee7fb180c6c97ad0c699d44814f85738aba19f5fb043bc76c654f569112ef2b6c9ae0469ff0283cdd4b42a537469bd87fa30c0c6fd97019ebc721afbed9fe22c26e4b961d1cfd723c3107145c60034f5165052144fc594b0127dc9ce5556dc940259620"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[{@init_itable}]}, 0x0, 0x59a, &(0x7f0000000ec0)="$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") pivot_root(&(0x7f0000000c80)='./file1\x00', &(0x7f0000001600)='./file1\x00') r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x811, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESDEC=r4, @ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r1], 0x50) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f00000005c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd12, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x1f) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7, 0x0}) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3091, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) mlockall(0x7) syz_open_procfs(r9, &(0x7f0000000380)='net/mcfilter\x00') 1.933358327s ago: executing program 7 (id=7647): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.87044271s ago: executing program 7 (id=7648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="240000000020110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) close(r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)={0x50, r3, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x79e7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}]}, 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) syz_io_uring_setup(0x49d, &(0x7f0000000080)={0x0, 0x79ae, 0x400, 0x0, 0x32f}, &(0x7f00000004c0), &(0x7f00000003c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r7) 1.812043162s ago: executing program 7 (id=7649): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 1.710445846s ago: executing program 8 (id=7650): sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3ffffc, 0x866d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x2088, 0x2000000, 0x200, 0x0, 0x5, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000200)='cpu\t>0&&\t') bind$rds(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x204012, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0x4004550d, &(0x7f0000000200)) 1.554297014s ago: executing program 4 (id=7651): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x800, 0x6, 0x196}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) close_range(r2, r5, 0x0) 1.525357984s ago: executing program 4 (id=7652): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000501, r5, &(0x7f00000000c0)) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.445010448s ago: executing program 8 (id=7653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x18, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8180}, 0x40) 1.444417708s ago: executing program 8 (id=7654): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040081}, 0x400c000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r5, 0x2, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, r4, 0x0, 0x0, 0x16}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x4, r4, &(0x7f00000006c0)="0000000000000f003f", 0x9, 0x1}]) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) 1.441242768s ago: executing program 6 (id=7655): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040081}, 0x400c000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r4, 0x2, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f00000006c0)="0000000000000f003f", 0x9, 0x1}]) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) 1.012478867s ago: executing program 9 (id=7656): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[]) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r2, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x2c, "24a113204f6b67ba709543f5bc2b841301cea822c8abd4c2fdae4e5d15c36ce12a904dc27f6ed93c40d5a7b2"}, &(0x7f00000000c0)=0x34) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='kfree\x00', r8, 0x0, 0x9}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6(0xa, 0x1, 0x8) 1.004275067s ago: executing program 4 (id=7657): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") 841.228884ms ago: executing program 8 (id=7658): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 759.416437ms ago: executing program 6 (id=7659): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") 753.188778ms ago: executing program 4 (id=7660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000020000000400000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f0b31bbe8cb82f}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 667.595461ms ago: executing program 8 (id=7661): lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x37b, &(0x7f0000001200)="$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") r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x515042, 0x1a8) pwrite64(r1, &(0x7f0000000880)='u', 0xf7d, 0x83) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0xc4) socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r2 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000244a0362afdc27b2fd51a33f40a65b2b1e756447cdb5532149e39329ee613bb4a2e6a25025c99d4056915ba2278dd88ccd88aefb3df98ea1336ba6218a652d937d7dc85b7dac21b81580d5a64f5fa14447e8db9703d6d63363941775403ab17"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000040)='.\x00', 0x240009ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) 357.634655ms ago: executing program 6 (id=7662): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="22afafc3ff1f0021dc929e9b4b4eeae23cf8265751851a34c52a8e20bb4c886dd6b9ce731d94188575adc00c04803dd99fd22f18d0a613b4d02f0c6e2b4b1de51234ad5bcb120f3b45d6a55c1783e9bdb96b212c66ae25001ee675ef655f65324e30ee16cd75791fbc886300bb4c8fe042720c2460895d1ba47fdf9154549143ab9d5d6b6bae2d36a2f04331ecc02d8067c18455cee7fb180c6c97ad0c699d44814f85738aba19f5fb043bc76c654f569112ef2b6c9ae0469ff0283cdd4b42a537469bd87fa30c0c6fd97019ebc721afbed9fe22c26e4b961d1cfd723c3107145c60034f5165052144fc594b0127dc9ce5556dc940259620"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES8=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000000)={[{@init_itable}]}, 0x0, 0x59a, &(0x7f0000000ec0)="$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") pivot_root(&(0x7f0000000c80)='./file1\x00', &(0x7f0000001600)='./file1\x00') r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x811, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRESDEC=r4, @ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESHEX=r1], 0x50) mount$tmpfs(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0), 0x8, &(0x7f00000005c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd12, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x1f) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7, 0x0}) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3091, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) mlockall(0x7) syz_open_procfs(r9, &(0x7f0000000380)='net/mcfilter\x00') 0s ago: executing program 9 (id=7663): r0 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="74726100003d0400008066646e6f3d", @ANYBLOB="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", @ANYBLOB=',wfdno=', @ANYRES32=r0, @ANYBLOB=',\x00']) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000006c0)="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") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_setup(0x8, &(0x7f00000001c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x734b, r3, &(0x7f0000000040)="c292", 0x2, 0x7, 0x0, 0x2}]) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x580, 0x370, 0x1170, 0x1398, 0x370, 0x1170, 0x4b0, 0x1398, 0x1398, 0x4b0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0xffffffff], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x308, 0x370, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'\x00', {0x7, 0x891, 0x60, 0x9, 0x6, 0x80, 0x1, 0x6, 0x40}, {0x6}}}, @common=@inet=@recent1={{0x108}, {0xffffffff, 0x1, 0x4, 0x80, 'syz0\x00', 0x40, [0xffffff00, 0xffffff]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x3, 0x0, [0x3ff, 0x5, 0x4, 0x400, 0x268c, 0x1, 0x4, 0x7, 0x5, 0xfc5, 0x4, 0x2, 0x8, 0x6, 0xfffb, 0x63d7], 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e1e, @private=0xa010101}], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") kernel console output (not intermixed with test programs): de [ 586.605687][T28507] bridge_slave_0: entered promiscuous mode [ 586.618033][T28541] EXT4-fs (loop6): 1 truncate cleaned up [ 586.636374][ T52] hsr_slave_0: left promiscuous mode [ 586.645450][ T52] hsr_slave_1: left promiscuous mode [ 586.664448][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.685958][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.809229][T28564] loop6: detected capacity change from 0 to 512 [ 586.833079][ T52] team0 (unregistering): Port device team_slave_1 removed [ 586.850464][T28566] loop4: detected capacity change from 0 to 2048 [ 586.866643][ T52] team0 (unregistering): Port device team_slave_0 removed [ 586.896472][T28564] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 586.918357][T28507] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.925514][T28507] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.940406][T28507] bridge_slave_1: entered allmulticast mode [ 586.946890][T28507] bridge_slave_1: entered promiscuous mode [ 586.957408][ T3308] Alternate GPT is invalid, using primary GPT. [ 586.963950][ T3308] loop4: p2 p3 p7 [ 587.009398][T28566] Alternate GPT is invalid, using primary GPT. [ 587.016135][T28566] loop4: p2 p3 p7 [ 587.036029][T28507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.079106][T28507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.080097][ T3006] Alternate GPT is invalid, using primary GPT. [ 587.094616][ T3006] loop4: p2 p3 p7 [ 587.136111][T28507] team0: Port device team_slave_0 added [ 587.150858][T28507] team0: Port device team_slave_1 added [ 587.169383][T19730] udevd[19730]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 587.186689][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 587.218734][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 587.241145][T19730] udevd[19730]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 587.252650][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 587.274279][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 587.285719][T28507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.292958][T28507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.318930][T28507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.358165][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 587.359147][T19730] udevd[19730]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 587.379363][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 587.389158][T28507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.396188][T28507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.422250][T28507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.581840][T28507] hsr_slave_0: entered promiscuous mode [ 587.588010][T28507] hsr_slave_1: entered promiscuous mode [ 587.624060][T28598] loop5: detected capacity change from 0 to 1024 [ 587.644490][T28507] debugfs: 'hsr0' already exists in 'hsr' [ 587.650277][T28507] Cannot create hsr debugfs directory [ 587.657477][T28598] EXT4-fs: Ignoring removed bh option [ 587.662967][T28598] EXT4-fs: inline encryption not supported [ 587.695303][T28588] loop4: detected capacity change from 0 to 1024 [ 587.709404][T28598] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 587.720357][T28588] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 587.732625][T28598] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 587.742432][T28598] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.7364: lblock 2 mapped to illegal pblock 2 (length 1) [ 587.759422][T28598] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.7364: lblock 0 mapped to illegal pblock 48 (length 1) [ 587.762741][T28588] SELinux: policydb string SE Ìinux does not match my string SE Linux [ 587.774183][T28598] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7364: Failed to acquire dquot type 0 [ 587.796437][T28598] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 587.816306][T28598] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.7364: mark_inode_dirty error [ 587.827654][T28588] SELinux: failed to load policy [ 587.827991][T28596] blktrace: Concurrent blktraces are not allowed on loop8 [ 587.839806][T28598] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 587.850065][T28598] EXT4-fs (loop5): 1 orphan inode deleted [ 587.869225][T11939] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 587.893477][T28614] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7366'. [ 587.903653][T11939] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 587.926359][T28598] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.7364: lblock 0 mapped to illegal pblock 48 (length 1) [ 588.007531][T28507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.031526][T28507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.055331][T28625] loop4: detected capacity change from 0 to 1024 [ 588.061973][T28507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.085262][T28507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 588.116186][T28625] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 588.188389][T28625] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7369: Invalid block bitmap block 0 in block_group 0 [ 588.196829][T28649] bridge0: port 3(macsec1) entered blocking state [ 588.208530][T28649] bridge0: port 3(macsec1) entered disabled state [ 588.215981][T28649] macsec1: entered allmulticast mode [ 588.221313][T28649] bridge0: entered allmulticast mode [ 588.226909][T28625] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7369: Failed to acquire dquot type 0 [ 588.239603][T28649] macsec1: left allmulticast mode [ 588.244716][T28649] bridge0: left allmulticast mode [ 588.250096][T28625] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.7369: Freeing blocks not in datazone - block = 0, count = 4096 [ 588.266945][T28625] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7369: Invalid inode bitmap blk 0 in block_group 0 [ 588.279948][T28625] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 588.289389][T28625] EXT4-fs (loop4): 1 orphan inode deleted [ 588.299968][ T52] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 588.381701][T28507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.405883][T28671] netlink: 'syz.2.7376': attribute type 1 has an invalid length. [ 588.418676][T28507] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.447752][T28671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.464460][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.471681][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.494455][T28676] bond3: (slave veth7): Enslaving as an active interface with a down link [ 588.504462][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.511563][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.549500][T28671] bond3 (unregistering): (slave veth7): Releasing active interface [ 588.558992][T28671] bond3 (unregistering): Released all slaves [ 588.608786][T28664] loop6: detected capacity change from 0 to 512 [ 588.632377][T28664] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.650840][T28507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.749308][T28687] loop2: detected capacity change from 0 to 8192 [ 588.885497][T28507] veth0_vlan: entered promiscuous mode [ 588.904469][T28507] veth1_vlan: entered promiscuous mode [ 588.923909][T28507] veth0_macvtap: entered promiscuous mode [ 588.946806][T28507] veth1_macvtap: entered promiscuous mode [ 588.970814][T28507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.992494][T28507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.006777][T11941] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.036819][T28707] bridge0: port 3(macsec1) entered blocking state [ 589.043329][T28707] bridge0: port 3(macsec1) entered disabled state [ 589.050765][T28707] macsec1: entered allmulticast mode [ 589.056189][T28707] bridge0: entered allmulticast mode [ 589.062301][T28707] macsec1: left allmulticast mode [ 589.067402][T28707] bridge0: left allmulticast mode [ 589.098995][T11941] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.107999][T11941] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.121114][T11941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.188797][T28719] FAULT_INJECTION: forcing a failure. [ 589.188797][T28719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.202002][T28719] CPU: 0 UID: 0 PID: 28719 Comm: syz.5.7384 Not tainted syzkaller #0 PREEMPT(voluntary) [ 589.202030][T28719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.202042][T28719] Call Trace: [ 589.202048][T28719] [ 589.202084][T28719] __dump_stack+0x1d/0x30 [ 589.202111][T28719] dump_stack_lvl+0xe8/0x140 [ 589.202137][T28719] dump_stack+0x15/0x1b [ 589.202159][T28719] should_fail_ex+0x265/0x280 [ 589.202235][T28719] should_fail+0xb/0x20 [ 589.202251][T28719] should_fail_usercopy+0x1a/0x20 [ 589.202271][T28719] _copy_from_iter+0xd2/0xe80 [ 589.202301][T28719] ? alloc_pages_mpol+0x217/0x260 [ 589.202384][T28719] copy_page_from_iter+0x178/0x2a0 [ 589.202431][T28719] tun_get_user+0x679/0x26e0 [ 589.202479][T28719] ? ref_tracker_alloc+0x1f2/0x2f0 [ 589.202528][T28719] tun_chr_write_iter+0x15e/0x210 [ 589.202613][T28719] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 589.202729][T28719] vfs_write+0x52a/0x960 [ 589.202777][T28719] ksys_write+0xda/0x1a0 [ 589.202806][T28719] __x64_sys_write+0x40/0x50 [ 589.202864][T28719] x64_sys_call+0x2802/0x3000 [ 589.202891][T28719] do_syscall_64+0xd2/0x200 [ 589.202919][T28719] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 589.203030][T28719] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 589.203071][T28719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.203092][T28719] RIP: 0033:0x7fea63bfe1ff [ 589.203107][T28719] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 589.203153][T28719] RSP: 002b:00007fea62667000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 589.203247][T28719] RAX: ffffffffffffffda RBX: 00007fea63e55fa0 RCX: 00007fea63bfe1ff [ 589.203264][T28719] RDX: 00000000000000be RSI: 0000200000000000 RDI: 00000000000000c8 [ 589.203284][T28719] RBP: 00007fea62667090 R08: 0000000000000000 R09: 0000000000000000 [ 589.203299][T28719] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 589.203315][T28719] R13: 00007fea63e56038 R14: 00007fea63e55fa0 R15: 00007ffe8a8751f8 [ 589.203339][T28719] [ 589.551990][T28729] netlink: 4124 bytes leftover after parsing attributes in process `syz.5.7385'. [ 589.987052][T28739] GUP no longer grows the stack in syz.6.7389 (28739): 200000009000-20000000a000 (200000006000) [ 589.997748][T28739] CPU: 1 UID: 0 PID: 28739 Comm: syz.6.7389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 589.997784][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.997829][T28739] Call Trace: [ 589.997837][T28739] [ 589.997847][T28739] __dump_stack+0x1d/0x30 [ 589.997877][T28739] dump_stack_lvl+0xe8/0x140 [ 589.997897][T28739] dump_stack+0x15/0x1b [ 589.997920][T28739] __get_user_pages+0x1968/0x1ed0 [ 589.997947][T28739] ? _raw_spin_unlock+0x26/0x50 [ 589.998023][T28739] ? __cond_resched+0x4e/0x90 [ 589.998051][T28739] __gup_longterm_locked+0x2fb/0xe60 [ 589.998112][T28739] ? gup_fast_fallback+0xcf8/0x1420 [ 589.998148][T28739] gup_fast_fallback+0x1f5/0x1420 [ 589.998186][T28739] pin_user_pages_fast+0x5f/0x90 [ 589.998267][T28739] io_pin_pages+0xba/0x170 [ 589.998346][T28739] io_sqe_buffer_register+0x184/0x1430 [ 589.998387][T28739] ? __kvmalloc_node_noprof+0x4e7/0x670 [ 589.998428][T28739] io_sqe_buffers_register+0x2b1/0x540 [ 589.998462][T28739] __se_sys_io_uring_register+0x90e/0xf00 [ 589.998558][T28739] ? restore_fpregs_from_fpstate+0x61/0x120 [ 589.998594][T28739] __x64_sys_io_uring_register+0x55/0x70 [ 589.998705][T28739] x64_sys_call+0x18a3/0x3000 [ 589.998726][T28739] do_syscall_64+0xd2/0x200 [ 589.998747][T28739] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 589.998841][T28739] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 589.998885][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.998958][T28739] RIP: 0033:0x7f740d06f749 [ 589.998977][T28739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.999072][T28739] RSP: 002b:00007f740baae038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 589.999097][T28739] RAX: ffffffffffffffda RBX: 00007f740d2c6090 RCX: 00007f740d06f749 [ 589.999137][T28739] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 589.999154][T28739] RBP: 00007f740d0f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.999168][T28739] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 589.999184][T28739] R13: 00007f740d2c6128 R14: 00007f740d2c6090 R15: 00007ffcbb995a38 [ 589.999209][T28739] [ 590.300094][T28743] loop2: detected capacity change from 0 to 512 [ 590.337499][T28743] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 590.346270][T28743] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 590.378851][T28743] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.7391: Allocating blocks 41-42 which overlap fs metadata [ 590.399654][T28743] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.7391: Allocating blocks 41-42 which overlap fs metadata [ 590.440383][T28743] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.7391: Failed to acquire dquot type 1 [ 590.457650][T28755] netlink: 12 bytes leftover after parsing attributes in process `'. [ 590.492556][T28743] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 590.493433][T28757] xt_hashlimit: max too large, truncated to 1048576 [ 590.517373][T28759] netlink: 19 bytes leftover after parsing attributes in process `syz.5.7396'. [ 590.534327][T28743] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.7391: corrupted inode contents [ 590.549216][T28757] can0: slcan on ttyS3. [ 590.553837][T28743] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.7391: mark_inode_dirty error [ 590.567725][T28743] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.7391: corrupted inode contents [ 590.581854][T28743] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.7391: mark_inode_dirty error [ 590.595340][T28743] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.7391: corrupted inode contents [ 590.605921][T28757] can0 (unregistered): slcan off ttyS3. [ 590.614566][T28743] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 590.640029][T28743] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.7391: corrupted inode contents [ 590.664920][T28743] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.7391: mark_inode_dirty error [ 590.696721][T28743] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 590.709607][T28764] loop7: detected capacity change from 0 to 2048 [ 590.725207][T28743] EXT4-fs (loop2): 1 truncate cleaned up [ 590.738401][T28743] EXT4-fs mount: 60 callbacks suppressed [ 590.738417][T28743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.789354][ T3504] Alternate GPT is invalid, using primary GPT. [ 590.795795][ T3504] loop7: p2 p3 p7 [ 590.811906][T28764] Alternate GPT is invalid, using primary GPT. [ 590.818288][T28764] loop7: p2 p3 p7 [ 590.822148][T28784] loop4: detected capacity change from 0 to 512 [ 590.853071][T28784] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7399: bg 0: block 248: padding at end of block bitmap is not set [ 590.887256][T22977] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.958051][T28784] __quota_error: 448 callbacks suppressed [ 590.958069][T28784] Quota error (device loop4): write_blk: dquota write failed [ 590.971325][T28784] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 590.982589][T28784] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7399: Failed to acquire dquot type 1 [ 590.996650][T28784] EXT4-fs (loop4): 1 truncate cleaned up [ 590.999568][T28800] FAULT_INJECTION: forcing a failure. [ 590.999568][T28800] name failslab, interval 1, probability 0, space 0, times 0 [ 591.002500][ T29] audit: type=1326 audit(1764347492.607:53006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28798 comm="syz.2.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39707cf749 code=0x7ffc0000 [ 591.015040][T28800] CPU: 0 UID: 0 PID: 28800 Comm: syz.2.7400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 591.015135][T28800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 591.015153][T28800] Call Trace: [ 591.015163][T28800] [ 591.015176][T28800] __dump_stack+0x1d/0x30 [ 591.015206][T28800] dump_stack_lvl+0xe8/0x140 [ 591.015237][T28800] dump_stack+0x15/0x1b [ 591.015260][T28800] should_fail_ex+0x265/0x280 [ 591.015325][T28800] should_failslab+0x8c/0xb0 [ 591.015353][T28800] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 591.015386][T28800] ? sidtab_sid2str_get+0xa0/0x130 [ 591.015471][T28800] kmemdup_noprof+0x2b/0x70 [ 591.015580][T28800] sidtab_sid2str_get+0xa0/0x130 [ 591.015644][T28800] security_sid_to_context_core+0x1eb/0x2e0 [ 591.015688][T28800] security_sid_to_context+0x27/0x40 [ 591.015796][T28800] selinux_lsmprop_to_secctx+0x67/0xf0 [ 591.015856][T28800] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 591.015891][T28800] audit_log_subj_ctx+0xa4/0x3e0 [ 591.015920][T28800] ? skb_put+0xa9/0xf0 [ 591.015964][T28800] audit_log_task_context+0x48/0x70 [ 591.015996][T28800] audit_log_task+0xf4/0x250 [ 591.016109][T28800] audit_seccomp+0x61/0x100 [ 591.016152][T28800] ? __seccomp_filter+0x82d/0x1250 [ 591.016235][T28800] __seccomp_filter+0x83e/0x1250 [ 591.016276][T28800] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 591.016321][T28800] ? vfs_write+0x7e8/0x960 [ 591.016413][T28800] ? __rcu_read_unlock+0x4f/0x70 [ 591.016449][T28800] ? __fget_files+0x184/0x1c0 [ 591.016512][T28800] __secure_computing+0x82/0x150 [ 591.016560][T28800] syscall_trace_enter+0xcf/0x1e0 [ 591.016604][T28800] do_syscall_64+0xac/0x200 [ 591.016637][T28800] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 591.016737][T28800] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 591.016794][T28800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.016824][T28800] RIP: 0033:0x7f39707ce15c [ 591.016846][T28800] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 591.016890][T28800] RSP: 002b:00007f396f22f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.016916][T28800] RAX: ffffffffffffffda RBX: 00007f3970a25fa0 RCX: 00007f39707ce15c [ 591.017014][T28800] RDX: 000000000000000f RSI: 00007f396f22f0a0 RDI: 0000000000000005 [ 591.017031][T28800] RBP: 00007f396f22f090 R08: 0000000000000000 R09: 0000000000000000 [ 591.017048][T28800] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 591.017066][T28800] R13: 00007f3970a26038 R14: 00007f3970a25fa0 R15: 00007fff4a8f0828 [ 591.017093][T28800] [ 591.017106][T28800] audit: error in audit_log_subj_ctx [ 591.038677][ T29] audit: type=1326 audit(1764347492.607:53007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28798 comm="syz.2.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f39707cf749 code=0x7ffc0000 [ 591.069607][T28784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.073769][ T29] audit: type=1326 audit(1764347492.607:53008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28798 comm="syz.2.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39707cf749 code=0x7ffc0000 [ 591.073804][ T29] audit: type=1326 audit(1764347492.607:53009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28798 comm="syz.2.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39707cf749 code=0x7ffc0000 [ 591.073835][ T29] audit: type=1326 audit(1764347492.607:53010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28798 comm="syz.2.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39707cf749 code=0x7ffc0000 [ 591.078392][T28784] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.082834][ T29] audit: type=1326 audit(1764347492.607:53011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28798 comm="syz.2.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39707cdf90 code=0x7ffc0000 [ 591.130847][T28747] program syz.6.7393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.130924][ T29] audit: type=1326 audit(1764347492.607:53012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28798 comm="syz.2.7400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f39707ce1ff code=0x7ffc0000 [ 591.154822][T28784] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.7399: deleted inode referenced: 12 [ 591.336595][T28805] ip6gre0: entered promiscuous mode [ 591.478694][T28810] FAULT_INJECTION: forcing a failure. [ 591.478694][T28810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.487951][T28805] team0: Device ip6gre0 is of different type [ 591.488186][T28810] CPU: 0 UID: 0 PID: 28810 Comm: syz.2.7404 Not tainted syzkaller #0 PREEMPT(voluntary) [ 591.488218][T28810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 591.488236][T28810] Call Trace: [ 591.488245][T28810] [ 591.488257][T28810] __dump_stack+0x1d/0x30 [ 591.488357][T28810] dump_stack_lvl+0xe8/0x140 [ 591.488388][T28810] dump_stack+0x15/0x1b [ 591.488411][T28810] should_fail_ex+0x265/0x280 [ 591.488441][T28810] should_fail+0xb/0x20 [ 591.488463][T28810] should_fail_usercopy+0x1a/0x20 [ 591.488492][T28810] _copy_from_user+0x1c/0xb0 [ 591.488529][T28810] __se_sys_mount+0x10d/0x2e0 [ 591.488564][T28810] ? fput+0x8f/0xc0 [ 591.488590][T28810] ? ksys_write+0x192/0x1a0 [ 591.488627][T28810] __x64_sys_mount+0x67/0x80 [ 591.488733][T28810] x64_sys_call+0x2b51/0x3000 [ 591.488766][T28810] do_syscall_64+0xd2/0x200 [ 591.488795][T28810] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 591.488835][T28810] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 591.488915][T28810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.488944][T28810] RIP: 0033:0x7f39707cf749 [ 591.488966][T28810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.488991][T28810] RSP: 002b:00007f396f22f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.489017][T28810] RAX: ffffffffffffffda RBX: 00007f3970a25fa0 RCX: 00007f39707cf749 [ 591.489097][T28810] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 591.489115][T28810] RBP: 00007f396f22f090 R08: 0000200000000140 R09: 0000000000000000 [ 591.489141][T28810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.489159][T28810] R13: 00007f3970a26038 R14: 00007f3970a25fa0 R15: 00007fff4a8f0828 [ 591.489259][T28810] [ 591.493629][T23879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.718056][T28812] 9pnet_fd: Insufficient options for proto=fd [ 591.732268][T28816] FAULT_INJECTION: forcing a failure. [ 591.732268][T28816] name failslab, interval 1, probability 0, space 0, times 0 [ 591.745050][T28816] CPU: 0 UID: 0 PID: 28816 Comm: syz.5.7405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 591.745117][T28816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 591.745201][T28816] Call Trace: [ 591.745209][T28816] [ 591.745219][T28816] __dump_stack+0x1d/0x30 [ 591.745246][T28816] dump_stack_lvl+0xe8/0x140 [ 591.745272][T28816] dump_stack+0x15/0x1b [ 591.745293][T28816] should_fail_ex+0x265/0x280 [ 591.745377][T28816] should_failslab+0x8c/0xb0 [ 591.745415][T28816] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 591.745515][T28816] ? __d_alloc+0x3d/0x340 [ 591.745559][T28816] __d_alloc+0x3d/0x340 [ 591.745590][T28816] ? lockref_put_return+0xf7/0x130 [ 591.745618][T28816] d_alloc_parallel+0x58/0xc70 [ 591.745678][T28816] ? __rcu_read_unlock+0x4f/0x70 [ 591.745705][T28816] ? __d_lookup+0x316/0x340 [ 591.745724][T28816] ? security_inode_permission+0x4a/0xb0 [ 591.745799][T28816] __lookup_slow+0x8c/0x250 [ 591.745874][T28816] lookup_slow+0x3c/0x60 [ 591.745897][T28816] walk_component+0x1ec/0x220 [ 591.745936][T28816] path_lookupat+0xfe/0x2a0 [ 591.746048][T28816] filename_lookup+0x147/0x340 [ 591.746106][T28816] user_path_at+0x3e/0x130 [ 591.746157][T28816] user_statfs+0x4d/0x110 [ 591.746175][T28816] __x64_sys_statfs+0x65/0xf0 [ 591.746198][T28816] ? fput+0x8f/0xc0 [ 591.746219][T28816] ? ksys_write+0x192/0x1a0 [ 591.746254][T28816] x64_sys_call+0x2a07/0x3000 [ 591.746318][T28816] do_syscall_64+0xd2/0x200 [ 591.746345][T28816] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 591.746380][T28816] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 591.746424][T28816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.746461][T28816] RIP: 0033:0x7fea63bff749 [ 591.746543][T28816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.746563][T28816] RSP: 002b:00007fea62667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 591.746584][T28816] RAX: ffffffffffffffda RBX: 00007fea63e55fa0 RCX: 00007fea63bff749 [ 591.746598][T28816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 591.746611][T28816] RBP: 00007fea62667090 R08: 0000000000000000 R09: 0000000000000000 [ 591.746624][T28816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.746691][T28816] R13: 00007fea63e56038 R14: 00007fea63e55fa0 R15: 00007ffe8a8751f8 [ 591.746712][T28816] [ 591.762020][T28815] netlink: 4124 bytes leftover after parsing attributes in process `syz.6.7406'. [ 591.854752][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 591.980110][T28826] loop5: detected capacity change from 0 to 512 [ 592.016514][T28826] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 592.025313][T28826] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.053854][T28826] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.7407: Allocating blocks 41-42 which overlap fs metadata [ 592.092295][T28826] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.7407: Allocating blocks 41-42 which overlap fs metadata [ 592.110606][T28826] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7407: Failed to acquire dquot type 1 [ 592.122190][T28826] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 592.138190][T28826] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7407: corrupted inode contents [ 592.150338][T28826] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #12: comm syz.5.7407: mark_inode_dirty error [ 592.162108][T28826] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7407: corrupted inode contents [ 592.174130][T28826] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.7407: mark_inode_dirty error [ 592.185871][T28826] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7407: corrupted inode contents [ 592.197996][T28826] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 592.206714][T28826] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7407: corrupted inode contents [ 592.227896][T28826] EXT4-fs error (device loop5): ext4_truncate:4637: inode #12: comm syz.5.7407: mark_inode_dirty error [ 592.241317][T28826] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 592.250580][T28826] EXT4-fs (loop5): 1 truncate cleaned up [ 592.258866][T28826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.446751][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.881800][T28865] loop4: detected capacity change from 0 to 512 [ 592.896421][T28865] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 592.917934][T28862] loop2: detected capacity change from 0 to 512 [ 592.925242][T28862] EXT4-fs: Ignoring removed oldalloc option [ 592.932738][T28865] EXT4-fs (loop4): 1 truncate cleaned up [ 592.957163][T28862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 592.979033][T28865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.016131][T28862] EXT4-fs (loop2): 1 truncate cleaned up [ 593.037835][T28862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.038410][T28872] 9pnet_fd: Insufficient options for proto=fd [ 593.067553][T28838] program syz.5.7412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.089283][T22977] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 593.103424][T22977] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 593.136835][T28876] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7424'. [ 593.151517][T23879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.222234][T28881] xt_hashlimit: max too large, truncated to 1048576 [ 593.232615][T22977] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.258214][T28881] can0: slcan on ttyS3. [ 593.267631][T28883] netlink: 4124 bytes leftover after parsing attributes in process `syz.5.7426'. [ 593.363968][T28881] can0 (unregistered): slcan off ttyS3. [ 593.414332][T28881] loop4: detected capacity change from 0 to 2048 [ 593.454475][T11939] bridge_slave_1: left allmulticast mode [ 593.460364][T11939] bridge_slave_1: left promiscuous mode [ 593.466104][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.476019][T11939] bridge_slave_0: left allmulticast mode [ 593.481781][T11939] bridge_slave_0: left promiscuous mode [ 593.487490][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.514368][T11939] dvmrp0 (unregistering): left allmulticast mode [ 593.522916][ T3504] Alternate GPT is invalid, using primary GPT. [ 593.529346][ T3504] loop4: p2 p3 p7 [ 593.546687][T28881] Alternate GPT is invalid, using primary GPT. [ 593.553135][T28881] loop4: p2 p3 p7 [ 593.576181][T11939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.610605][T11939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.621501][T11939] bond0 (unregistering): Released all slaves [ 593.636637][T11939] bond1 (unregistering): Released all slaves [ 593.655125][T11939] bond2 (unregistering): Released all slaves [ 593.684140][T28895] lo speed is unknown, defaulting to 1000 [ 593.701462][T11939] hsr_slave_0: left promiscuous mode [ 593.707725][T11939] hsr_slave_1: left promiscuous mode [ 593.713615][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.721449][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.729319][T11939] batman_adv: batadv0: Removing interface: dummy0 [ 593.777681][T11939] team0 (unregistering): Port device team_slave_1 removed [ 593.788460][T11939] team0 (unregistering): Port device team_slave_0 removed [ 593.875206][T28895] chnl_net:caif_netlink_parms(): no params data found [ 593.945706][T28895] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.952938][T28895] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.960254][T28895] bridge_slave_0: entered allmulticast mode [ 593.968787][T28895] bridge_slave_0: entered promiscuous mode [ 593.976878][T28895] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.984002][T28895] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.991279][T28895] bridge_slave_1: entered allmulticast mode [ 593.999207][T28895] bridge_slave_1: entered promiscuous mode [ 594.023495][T28895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.034256][T28895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.055653][T28895] team0: Port device team_slave_0 added [ 594.062338][T28895] team0: Port device team_slave_1 added [ 594.081187][T28895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.088185][T28895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.114211][T28895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.130114][T28895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.137184][T28895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.163266][T28895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.177017][T11939] IPVS: stop unused estimator thread 0... [ 594.219264][T28895] hsr_slave_0: entered promiscuous mode [ 594.225888][T28895] hsr_slave_1: entered promiscuous mode [ 594.232059][T28895] debugfs: 'hsr0' already exists in 'hsr' [ 594.237864][T28895] Cannot create hsr debugfs directory [ 594.338754][T28977] loop4: detected capacity change from 0 to 512 [ 594.363410][T28977] EXT4-fs: Ignoring removed oldalloc option [ 594.384452][T28977] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 594.413571][T28977] EXT4-fs (loop4): 1 truncate cleaned up [ 594.440999][T28977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.472431][T28895] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 594.483632][T28895] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 594.495094][T28895] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 594.515170][T28987] loop6: detected capacity change from 0 to 512 [ 594.525991][T28987] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 594.536172][T28895] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 594.576605][T28987] EXT4-fs (loop6): 1 truncate cleaned up [ 594.594059][T28895] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.601276][T28895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.608589][T28895] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.610467][T28987] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.615786][T28895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.637105][T23879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.741636][T29010] xt_hashlimit: max too large, truncated to 1048576 [ 594.753830][T18731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.773887][T29010] can0: slcan on ttyS3. [ 594.787502][T28895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.797443][T29013] uprobe: gtp:29013 failed to unregister, leaking uprobe [ 594.812109][T28895] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.845595][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.857514][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.870401][T29010] can0 (unregistered): slcan off ttyS3. [ 594.877009][T29021] FAULT_INJECTION: forcing a failure. [ 594.877009][T29021] name failslab, interval 1, probability 0, space 0, times 0 [ 594.889840][T29021] CPU: 1 UID: 0 PID: 29021 Comm: syz.7.7441 Not tainted syzkaller #0 PREEMPT(voluntary) [ 594.889868][T29021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 594.889881][T29021] Call Trace: [ 594.889887][T29021] [ 594.889894][T29021] __dump_stack+0x1d/0x30 [ 594.889949][T29021] dump_stack_lvl+0xe8/0x140 [ 594.889971][T29021] dump_stack+0x15/0x1b [ 594.889988][T29021] should_fail_ex+0x265/0x280 [ 594.890077][T29021] should_failslab+0x8c/0xb0 [ 594.890121][T29021] kmem_cache_alloc_noprof+0x50/0x480 [ 594.890160][T29021] ? getname_flags+0x80/0x3b0 [ 594.890225][T29021] getname_flags+0x80/0x3b0 [ 594.890264][T29021] do_sys_openat2+0x60/0x110 [ 594.890320][T29021] __x64_sys_openat+0xf2/0x120 [ 594.890349][T29021] x64_sys_call+0x2eab/0x3000 [ 594.890378][T29021] do_syscall_64+0xd2/0x200 [ 594.890400][T29021] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 594.890431][T29021] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 594.890517][T29021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.890539][T29021] RIP: 0033:0x7fa01d32f749 [ 594.890554][T29021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.890653][T29021] RSP: 002b:00007fa01bd97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 594.890673][T29021] RAX: ffffffffffffffda RBX: 00007fa01d585fa0 RCX: 00007fa01d32f749 [ 594.890756][T29021] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 594.890784][T29021] RBP: 00007fa01bd97090 R08: 0000000000000000 R09: 0000000000000000 [ 594.890800][T29021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.890816][T29021] R13: 00007fa01d586038 R14: 00007fa01d585fa0 R15: 00007fffb269f678 [ 594.890839][T29021] [ 595.075258][T11949] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.075501][T29022] loop4: detected capacity change from 0 to 2048 [ 595.082430][T11949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.088067][T11949] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.103224][T11949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.123387][T28895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.133917][T28895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.157150][T29027] loop7: detected capacity change from 0 to 512 [ 595.164708][T29027] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 595.173568][T29027] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 595.219093][ T3504] Alternate GPT is invalid, using primary GPT. [ 595.225738][ T3504] loop4: p2 p3 p7 [ 595.255826][T29027] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7442: Allocating blocks 41-42 which overlap fs metadata [ 595.277494][T29027] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.7442: Failed to acquire dquot type 1 [ 595.291811][T29022] Alternate GPT is invalid, using primary GPT. [ 595.298372][T29022] loop4: p2 p3 p7 [ 595.309885][T29027] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 595.357921][T28895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.367943][ T3006] Alternate GPT is invalid, using primary GPT. [ 595.368076][T29027] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7442: corrupted inode contents [ 595.374340][ T3006] loop4: p2 p3 p7 [ 595.413989][T29027] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.7442: mark_inode_dirty error [ 595.447535][T29027] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7442: corrupted inode contents [ 595.469525][T29027] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.7442: mark_inode_dirty error [ 595.506384][T29027] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7442: corrupted inode contents [ 595.553699][T29027] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 595.578175][T29027] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7442: corrupted inode contents [ 595.622107][T28895] veth0_vlan: entered promiscuous mode [ 595.629518][T29027] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.7442: mark_inode_dirty error [ 595.632999][T28895] veth1_vlan: entered promiscuous mode [ 595.648642][T29027] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 595.663184][T29027] EXT4-fs (loop7): 1 truncate cleaned up [ 595.673473][T28970] syz.5.7434 (28970) used greatest stack depth: 7096 bytes left [ 595.677075][T28895] veth0_macvtap: entered promiscuous mode [ 595.681372][T29027] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.697252][T28895] veth1_macvtap: entered promiscuous mode [ 595.764739][T28895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.777012][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 595.789668][T19730] udevd[19730]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 595.812106][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 595.832950][T29071] loop4: detected capacity change from 0 to 512 [ 595.834104][T28895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.851235][T28507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.865324][T29073] loop5: detected capacity change from 0 to 512 [ 595.872389][T29073] EXT4-fs: Ignoring removed oldalloc option [ 595.878196][T11941] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.888708][T29073] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 595.907890][T11941] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.925255][T29071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.933298][T29077] loop7: detected capacity change from 0 to 512 [ 595.948500][T29077] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 595.967177][T11941] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.972039][T29071] ext4 filesystem being mounted at /230/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.988645][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 595.995164][T29071] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.7448: corrupted inode contents [ 596.000177][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 596.014340][T29071] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #4: comm syz.4.7448: mark_inode_dirty error [ 596.032613][T29071] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #4: comm syz.4.7448: corrupted inode contents [ 596.032904][T18695] udevd[18695]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 596.045873][T29071] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.7448: mark_inode_dirty error [ 596.065700][T11941] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.076770][T29073] EXT4-fs (loop5): 1 truncate cleaned up [ 596.083314][T29073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.111071][T29077] EXT4-fs (loop7): 1 truncate cleaned up [ 596.143233][T29071] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7448: Failed to acquire dquot type 1 [ 596.147843][T11949] bridge_slave_1: left allmulticast mode [ 596.160262][T11949] bridge_slave_1: left promiscuous mode [ 596.166086][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.177542][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.185836][T29077] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.201245][T11949] bridge_slave_0: left allmulticast mode [ 596.206990][T11949] bridge_slave_0: left promiscuous mode [ 596.212702][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.256719][T23879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.279301][T28507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.317822][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 596.317840][ T29] audit: type=1326 audit(1764347497.575:53240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29100 comm="syz.7.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 596.352275][T29102] loop5: detected capacity change from 0 to 512 [ 596.353013][ T29] audit: type=1326 audit(1764347497.575:53241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29100 comm="syz.7.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 596.382251][ T29] audit: type=1326 audit(1764347497.575:53242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29100 comm="syz.7.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 596.405971][ T29] audit: type=1326 audit(1764347497.593:53243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29100 comm="syz.7.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 596.406031][T29102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 596.407946][T29102] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, [ 596.429644][ T29] audit: type=1400 audit(1764347497.612:53244): avc: denied { read } for pid=29095 comm="syz.5.7453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 596.467445][T29102] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 596.485389][T11949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.490190][T29102] EXT4-fs (loop5): 1 truncate cleaned up [ 596.500426][T29102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.519197][T11949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.534826][T11949] bond0 (unregistering): Released all slaves [ 596.552468][T29093] bridge0: entered promiscuous mode [ 596.558925][T29093] bridge0: port 3(macsec1) entered blocking state [ 596.565480][T29093] bridge0: port 3(macsec1) entered disabled state [ 596.580712][T29093] macsec1: entered allmulticast mode [ 596.586055][T29093] bridge0: entered allmulticast mode [ 596.597009][T29093] macsec1: left allmulticast mode [ 596.602162][T29093] bridge0: left allmulticast mode [ 596.607546][T29110] loop7: detected capacity change from 0 to 512 [ 596.614812][T29093] bridge0: left promiscuous mode [ 596.650253][T29110] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 596.659067][T29110] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 596.668823][T11949] hsr_slave_0: left promiscuous mode [ 596.677003][T11949] hsr_slave_1: left promiscuous mode [ 596.683498][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.684061][T11949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.707515][T11949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.724048][T29114] xt_hashlimit: max too large, truncated to 1048576 [ 596.735837][T29110] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7459: Allocating blocks 41-42 which overlap fs metadata [ 596.771571][T29110] Quota error (device loop7): write_blk: dquota write failed [ 596.779116][T29110] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 596.805429][T29110] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7459: Allocating blocks 41-42 which overlap fs metadata [ 596.820159][T11949] team0 (unregistering): Port device team_slave_1 removed [ 596.834083][T29110] Quota error (device loop7): write_blk: dquota write failed [ 596.841929][T11949] team0 (unregistering): Port device team_slave_0 removed [ 596.856405][ T29] audit: type=1400 audit(1764347498.080:53245): avc: denied { bind } for pid=29120 comm="syz.8.7462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 596.876034][ T29] audit: type=1400 audit(1764347498.080:53246): avc: denied { name_bind } for pid=29120 comm="syz.8.7462" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 596.898139][T29110] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.7459: Failed to acquire dquot type 1 [ 596.924456][T29114] can0: slcan on ttyS3. [ 596.931036][T29110] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 596.948628][T29110] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7459: corrupted inode contents [ 596.962212][T29110] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.7459: mark_inode_dirty error [ 596.983700][T29114] loop5: detected capacity change from 0 to 2048 [ 596.996329][T29110] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7459: corrupted inode contents [ 597.013589][T29121] loop8: detected capacity change from 0 to 512 [ 597.020308][T29110] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.7459: mark_inode_dirty error [ 597.029785][T29119] can0 (unregistered): slcan off ttyS3. [ 597.040758][T29110] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7459: corrupted inode contents [ 597.075857][ T3504] Alternate GPT is invalid, using primary GPT. [ 597.082248][ T3504] loop5: p2 p3 p7 [ 597.086365][T29110] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 597.099052][T29110] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7459: corrupted inode contents [ 597.123802][T29110] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.7459: mark_inode_dirty error [ 597.124967][T29121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.146798][T29110] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 597.149827][T29114] Alternate GPT is invalid, using primary GPT. [ 597.157492][T29110] EXT4-fs (loop7): 1 truncate cleaned up [ 597.162693][T29114] loop5: p2 p3 p7 [ 597.178534][T29110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.185849][T29121] ext4 filesystem being mounted at /2/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.206557][T29108] program syz.4.7458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.222072][T29121] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #4: comm syz.8.7462: corrupted inode contents [ 597.243884][T29121] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #4: comm syz.8.7462: mark_inode_dirty error [ 597.265765][T29121] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #4: comm syz.8.7462: corrupted inode contents [ 597.310583][T28507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.330438][T29137] loop6: detected capacity change from 0 to 512 [ 597.337353][T29137] EXT4-fs: Ignoring removed oldalloc option [ 597.344656][T29121] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #4: comm syz.8.7462: mark_inode_dirty error [ 597.362605][T29137] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 597.378801][T29121] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.7462: Failed to acquire dquot type 1 [ 597.426287][T29137] EXT4-fs (loop6): 1 truncate cleaned up [ 597.426753][T29145] netlink: 4124 bytes leftover after parsing attributes in process `syz.7.7464'. [ 597.457534][T29137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.501580][T28895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.541174][T18731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.563767][T29157] xt_hashlimit: max too large, truncated to 1048576 [ 597.593688][T29160] xt_hashlimit: max too large, truncated to 1048576 [ 597.621566][T29157] can0: slcan on ttyS3. [ 597.696349][T29160] can0 (unregistered): slcan off ttyS3. [ 597.714120][T29175] loop8: detected capacity change from 0 to 2048 [ 597.815179][T29175] Alternate GPT is invalid, using primary GPT. [ 597.821633][T29175] loop8: p2 p3 p7 [ 597.825599][T29160] loop6: detected capacity change from 0 to 2048 [ 597.847656][T29186] loop5: detected capacity change from 0 to 1024 [ 597.856724][T29186] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 597.980210][T29186] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.7472: Invalid block bitmap block 0 in block_group 0 [ 597.999495][ T3308] Alternate GPT is invalid, using primary GPT. [ 598.005997][ T3308] loop6: p2 p3 p7 [ 598.137798][T29186] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7472: Failed to acquire dquot type 0 [ 598.236144][T29186] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.7472: Freeing blocks not in datazone - block = 0, count = 4096 [ 598.294073][T29186] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7472: Invalid inode bitmap blk 0 in block_group 0 [ 598.323855][T29186] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 598.337482][T29160] Alternate GPT is invalid, using primary GPT. [ 598.343931][T29160] loop6: p2 p3 p7 [ 598.349745][T11939] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 598.350348][T29186] EXT4-fs (loop5): 1 orphan inode deleted [ 598.368062][T29186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.444281][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.506430][T29214] loop5: detected capacity change from 0 to 512 [ 598.516439][T29214] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 598.525197][T29214] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 598.562287][T29214] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.7474: Allocating blocks 41-42 which overlap fs metadata [ 598.618828][T19730] udevd[19730]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 598.630508][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 598.652041][T29214] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7474: Failed to acquire dquot type 1 [ 598.680845][T29214] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 598.695671][T29214] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7474: corrupted inode contents [ 598.718637][T29214] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #12: comm syz.5.7474: mark_inode_dirty error [ 598.740050][T29214] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7474: corrupted inode contents [ 598.769153][T29214] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.7474: mark_inode_dirty error [ 598.798370][T29214] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7474: corrupted inode contents [ 598.810646][T29214] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 598.820133][T29214] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7474: corrupted inode contents [ 598.844042][T29214] EXT4-fs error (device loop5): ext4_truncate:4637: inode #12: comm syz.5.7474: mark_inode_dirty error [ 598.856208][T29214] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 598.865533][T29214] EXT4-fs (loop5): 1 truncate cleaned up [ 598.873248][T29214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.886620][T29239] FAULT_INJECTION: forcing a failure. [ 598.886620][T29239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.899750][T29239] CPU: 0 UID: 0 PID: 29239 Comm: syz.4.7478 Not tainted syzkaller #0 PREEMPT(voluntary) [ 598.899785][T29239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.899798][T29239] Call Trace: [ 598.899806][T29239] [ 598.899822][T29239] __dump_stack+0x1d/0x30 [ 598.899848][T29239] dump_stack_lvl+0xe8/0x140 [ 598.899870][T29239] dump_stack+0x15/0x1b [ 598.899889][T29239] should_fail_ex+0x265/0x280 [ 598.899911][T29239] should_fail+0xb/0x20 [ 598.899935][T29239] should_fail_usercopy+0x1a/0x20 [ 598.899957][T29239] _copy_from_user+0x1c/0xb0 [ 598.900045][T29239] __sys_bpf+0x183/0x7c0 [ 598.900145][T29239] __x64_sys_bpf+0x41/0x50 [ 598.900184][T29239] x64_sys_call+0x2aee/0x3000 [ 598.900293][T29239] do_syscall_64+0xd2/0x200 [ 598.900320][T29239] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 598.900357][T29239] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 598.900401][T29239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.900489][T29239] RIP: 0033:0x7f68e273f749 [ 598.900507][T29239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.900574][T29239] RSP: 002b:00007f68e11a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.900595][T29239] RAX: ffffffffffffffda RBX: 00007f68e2995fa0 RCX: 00007f68e273f749 [ 598.900609][T29239] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 598.900624][T29239] RBP: 00007f68e11a7090 R08: 0000000000000000 R09: 0000000000000000 [ 598.900711][T29239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.900723][T29239] R13: 00007f68e2996038 R14: 00007f68e2995fa0 R15: 00007ffc2757e788 [ 598.900745][T29239] [ 599.125214][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.138815][T29243] loop6: detected capacity change from 0 to 1024 [ 599.157119][T29243] EXT4-fs: Ignoring removed bh option [ 599.162682][T29243] EXT4-fs: inline encryption not supported [ 599.181198][T29243] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 599.206233][T29243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 599.230209][T29243] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.7479: lblock 2 mapped to illegal pblock 2 (length 1) [ 599.245441][T29250] loop4: detected capacity change from 0 to 1024 [ 599.245947][T29243] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.7479: lblock 0 mapped to illegal pblock 48 (length 1) [ 599.267084][T29243] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.7479: Failed to acquire dquot type 0 [ 599.268698][T29250] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 599.317467][T29243] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 599.349362][T29250] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7481: Invalid block bitmap block 0 in block_group 0 [ 599.372998][T29243] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.7479: mark_inode_dirty error [ 599.394124][T29250] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7481: Failed to acquire dquot type 0 [ 599.410925][T29243] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 599.423401][T29250] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.7481: Freeing blocks not in datazone - block = 0, count = 4096 [ 599.442237][T29243] EXT4-fs (loop6): 1 orphan inode deleted [ 599.448556][T29243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.461163][T11949] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 599.475875][T29250] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7481: Invalid inode bitmap blk 0 in block_group 0 [ 599.486869][T29255] netlink: 4124 bytes leftover after parsing attributes in process `syz.7.7483'. [ 599.498196][T11949] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0 [ 599.511077][T29250] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 599.520070][T11949] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0 [ 599.524203][T29250] EXT4-fs (loop4): 1 orphan inode deleted [ 599.537967][T29250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.609648][T29262] FAULT_INJECTION: forcing a failure. [ 599.609648][T29262] name failslab, interval 1, probability 0, space 0, times 0 [ 599.622451][T29262] CPU: 1 UID: 0 PID: 29262 Comm: syz.5.7484 Not tainted syzkaller #0 PREEMPT(voluntary) [ 599.622493][T29262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.622507][T29262] Call Trace: [ 599.622514][T29262] [ 599.622585][T29262] __dump_stack+0x1d/0x30 [ 599.622691][T29262] dump_stack_lvl+0xe8/0x140 [ 599.622715][T29262] dump_stack+0x15/0x1b [ 599.622737][T29262] should_fail_ex+0x265/0x280 [ 599.622818][T29262] should_failslab+0x8c/0xb0 [ 599.622851][T29262] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 599.622881][T29262] ? dup_task_struct+0x70/0x6b0 [ 599.622913][T29262] dup_task_struct+0x70/0x6b0 [ 599.623047][T29262] ? _parse_integer+0x27/0x40 [ 599.623084][T29262] copy_process+0x399/0x2000 [ 599.623193][T29262] ? kstrtouint+0x76/0xc0 [ 599.623234][T29262] ? kstrtouint_from_user+0x9f/0xf0 [ 599.623260][T29262] ? __rcu_read_unlock+0x4f/0x70 [ 599.623312][T29262] kernel_clone+0x16c/0x5c0 [ 599.623350][T29262] ? vfs_write+0x7e8/0x960 [ 599.623478][T29262] __x64_sys_clone+0xe6/0x120 [ 599.623530][T29262] x64_sys_call+0x119c/0x3000 [ 599.623560][T29262] do_syscall_64+0xd2/0x200 [ 599.623583][T29262] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 599.623625][T29262] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 599.623741][T29262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.623819][T29262] RIP: 0033:0x7fea63bff749 [ 599.623837][T29262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.623857][T29262] RSP: 002b:00007fea62624fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 599.623922][T29262] RAX: ffffffffffffffda RBX: 00007fea63e56180 RCX: 00007fea63bff749 [ 599.623936][T29262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041aa1000 [ 599.623949][T29262] RBP: 00007fea62625090 R08: 0000000000000000 R09: 0000000000000000 [ 599.623961][T29262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 599.623972][T29262] R13: 00007fea63e56218 R14: 00007fea63e56180 R15: 00007ffe8a8751f8 [ 599.624027][T29262] [ 599.928187][T29227] program syz.8.7475 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 599.938047][T18731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.947997][T18731] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 599.961416][T18731] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 599.971392][T18731] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 599.984220][T23879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.017855][T29264] xt_hashlimit: max too large, truncated to 1048576 [ 600.031489][T29266] loop8: detected capacity change from 0 to 128 [ 600.055342][T29264] can0: slcan on ttyS3. [ 600.204352][T29264] can0 (unregistered): slcan off ttyS3. [ 600.379927][T29264] loop4: detected capacity change from 0 to 2048 [ 600.506054][T29264] Alternate GPT is invalid, using primary GPT. [ 600.512647][T29264] loop4: p2 p3 p7 [ 601.300000][T11949] bridge_slave_1: left allmulticast mode [ 601.305922][T11949] bridge_slave_1: left promiscuous mode [ 601.311721][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.348512][T11949] bridge_slave_0: left allmulticast mode [ 601.354282][T11949] bridge_slave_0: left promiscuous mode [ 601.360155][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.412984][T29352] netlink: 4124 bytes leftover after parsing attributes in process `syz.7.7501'. [ 601.862394][T29367] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7505'. [ 601.899156][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 601.899174][ T29] audit: type=1326 audit(1764347502.795:53277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29370 comm="syz.8.7507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73b4ef749 code=0x7ffc0000 [ 601.929792][ T29] audit: type=1326 audit(1764347502.832:53278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29370 comm="syz.8.7507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73b4ef749 code=0x7ffc0000 [ 601.959367][T29374] loop6: detected capacity change from 0 to 512 [ 601.991151][T11949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.014765][T11949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.026056][T29374] EXT4-fs (loop6): orphan cleanup on readonly fs [ 602.036771][T29374] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.7505: EA inode hash validation failed [ 602.053504][T29374] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 602.066684][T29374] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.7505: corrupted inode contents [ 602.067207][T11949] bond0 (unregistering): Released all slaves [ 602.094567][T29374] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #15: comm syz.6.7505: mark_inode_dirty error [ 602.118418][T29374] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #15: comm syz.6.7505: corrupted inode contents [ 602.135503][T29378] loop8: detected capacity change from 0 to 1024 [ 602.157151][T29374] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #15: comm syz.6.7505: mark_inode_dirty error [ 602.178020][T29378] EXT4-fs: inline encryption not supported [ 602.183970][T29378] EXT4-fs: Ignoring removed orlov option [ 602.203829][T11949] tipc: Left network mode [ 602.213949][T29374] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.7505: mark inode dirty (error -117) [ 602.246919][ T29] audit: type=1326 audit(1764347503.132:53279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.256839][T29374] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 602.270696][ T29] audit: type=1326 audit(1764347503.132:53280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.303500][ T29] audit: type=1326 audit(1764347503.132:53281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.335828][T11949] hsr_slave_0: left promiscuous mode [ 602.342052][T11949] hsr_slave_1: left promiscuous mode [ 602.347741][T11949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.348909][T29374] EXT4-fs (loop6): 1 orphan inode deleted [ 602.361337][T11949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.382841][T29374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 602.409653][T29378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.457822][ T29] audit: type=1326 audit(1764347503.132:53282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.481469][ T29] audit: type=1326 audit(1764347503.132:53283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.505129][ T29] audit: type=1326 audit(1764347503.132:53284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.528842][ T29] audit: type=1326 audit(1764347503.132:53285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.552546][ T29] audit: type=1326 audit(1764347503.132:53286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29385 comm="syz.5.7510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea63bff749 code=0x7ffc0000 [ 602.603302][T29387] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 602.622849][T28895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.807556][T29413] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 602.825488][T18731] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.838692][ T168] Bluetooth: hci0: Frame reassembly failed (-84) [ 602.907092][T29423] loop7: detected capacity change from 0 to 1024 [ 602.919803][T29430] netlink: 12 bytes leftover after parsing attributes in process `'. [ 602.940177][T29423] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 602.981482][T29423] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.7516: Invalid block bitmap block 0 in block_group 0 [ 602.998192][T29430] 8021q: adding VLAN 0 to HW filter on device bond4 [ 603.034736][T29423] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.7516: Failed to acquire dquot type 0 [ 603.071445][T29423] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.7516: Freeing blocks not in datazone - block = 0, count = 4096 [ 603.085537][T29423] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.7516: Invalid inode bitmap blk 0 in block_group 0 [ 603.098446][ T168] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 603.098853][T29423] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 603.118998][T29423] EXT4-fs (loop7): 1 orphan inode deleted [ 603.125222][T29423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.165820][T29454] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 603.188593][T28507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.226161][T29456] loop7: detected capacity change from 0 to 1024 [ 603.242704][T29456] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 603.262883][T29456] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.7519: Invalid block bitmap block 0 in block_group 0 [ 603.282950][T29456] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.7519: Failed to acquire dquot type 0 [ 603.315363][T29456] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.7519: Freeing blocks not in datazone - block = 0, count = 4096 [ 603.336902][T29461] loop5: detected capacity change from 0 to 512 [ 603.362606][T29456] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.7519: Invalid inode bitmap blk 0 in block_group 0 [ 603.375946][T29456] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 603.384923][T29461] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 603.384941][T11941] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:12: Failed to release dquot type 0 [ 603.393694][T29461] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 603.410151][T29456] EXT4-fs (loop7): 1 orphan inode deleted [ 603.422506][T29456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.436927][T29461] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.7521: Allocating blocks 41-42 which overlap fs metadata [ 603.451327][T29461] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.7521: Allocating blocks 41-42 which overlap fs metadata [ 603.465665][T29461] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7521: Failed to acquire dquot type 1 [ 603.470197][T28507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.477527][T29461] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 603.513875][T29461] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7521: corrupted inode contents [ 603.537043][T29461] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #12: comm syz.5.7521: mark_inode_dirty error [ 603.549176][T29461] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7521: corrupted inode contents [ 603.562414][T29461] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.7521: mark_inode_dirty error [ 603.575268][T29461] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7521: corrupted inode contents [ 603.587812][T29468] syz_tun: entered allmulticast mode [ 603.593988][T29461] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 603.625394][T29461] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #12: comm syz.5.7521: corrupted inode contents [ 603.654008][T29461] EXT4-fs error (device loop5): ext4_truncate:4637: inode #12: comm syz.5.7521: mark_inode_dirty error [ 603.666827][T29471] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7523'. [ 603.686243][T29461] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 603.721068][T29461] EXT4-fs (loop5): 1 truncate cleaned up [ 603.729761][T29461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.747169][T29475] bridge0: entered promiscuous mode [ 603.753859][T29475] bridge0: port 3(macsec1) entered blocking state [ 603.760364][T29475] bridge0: port 3(macsec1) entered disabled state [ 603.771900][T29475] macsec1: entered allmulticast mode [ 603.777440][T29475] bridge0: entered allmulticast mode [ 603.785676][T29475] macsec1: left allmulticast mode [ 603.790848][T29475] bridge0: left allmulticast mode [ 603.796808][T29475] bridge0: left promiscuous mode [ 603.816542][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.951801][T29485] loop7: detected capacity change from 0 to 2048 [ 604.000568][ T3504] loop7: p1 < > p4 [ 604.005201][ T3504] loop7: p4 size 8388608 extends beyond EOD, truncated [ 604.040998][T29489] xt_hashlimit: max too large, truncated to 1048576 [ 604.058793][T29489] can0: slcan on ttyS3. [ 604.080616][T29485] loop7: p1 < > p4 [ 604.084955][T29485] loop7: p4 size 8388608 extends beyond EOD, truncated [ 604.106004][T29489] can0 (unregistered): slcan off ttyS3. [ 604.181577][T29491] loop6: detected capacity change from 0 to 2048 [ 604.257775][ T3308] Alternate GPT is invalid, using primary GPT. [ 604.264209][ T3308] loop6: p2 p3 p7 [ 604.301634][T29491] Alternate GPT is invalid, using primary GPT. [ 604.308162][T29491] loop6: p2 p3 p7 [ 604.519139][T29465] syz_tun: left allmulticast mode [ 604.697888][T29503] xt_hashlimit: max too large, truncated to 1048576 [ 604.741365][T29503] can0: slcan on ttyS3. [ 604.786570][T29505] vcan1: entered promiscuous mode [ 604.800832][T29503] can0 (unregistered): slcan off ttyS3. [ 604.877866][T29509] loop7: detected capacity change from 0 to 2048 [ 604.923770][T29499] program syz.4.7532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.942151][ T3504] Alternate GPT is invalid, using primary GPT. [ 604.948708][ T3504] loop7: p2 p3 p7 [ 604.959627][T29509] Alternate GPT is invalid, using primary GPT. [ 604.966362][T29509] loop7: p2 p3 p7 [ 604.972213][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 605.029244][T29518] sd 0:0:1:0: device reset [ 605.222328][T29516] loop5: detected capacity change from 0 to 1024 [ 605.229959][T29516] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 605.250063][T29516] SELinux: policydb string SE Ìinux does not match my string SE Linux [ 605.258524][T29516] SELinux: failed to load policy [ 605.283840][T29525] loop4: detected capacity change from 0 to 512 [ 605.327586][T29525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.340824][T29525] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.392423][T23879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.464230][T29541] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 605.489563][T29548] FAULT_INJECTION: forcing a failure. [ 605.489563][T29548] name failslab, interval 1, probability 0, space 0, times 0 [ 605.502338][T29548] CPU: 1 UID: 0 PID: 29548 Comm: syz.4.7547 Not tainted syzkaller #0 PREEMPT(voluntary) [ 605.502372][T29548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 605.502389][T29548] Call Trace: [ 605.502397][T29548] [ 605.502405][T29548] __dump_stack+0x1d/0x30 [ 605.502462][T29548] dump_stack_lvl+0xe8/0x140 [ 605.502536][T29548] dump_stack+0x15/0x1b [ 605.502554][T29548] should_fail_ex+0x265/0x280 [ 605.502573][T29548] should_failslab+0x8c/0xb0 [ 605.502660][T29548] kmem_cache_alloc_noprof+0x50/0x480 [ 605.502689][T29548] ? getname_flags+0x80/0x3b0 [ 605.502755][T29548] getname_flags+0x80/0x3b0 [ 605.502785][T29548] __x64_sys_linkat+0x66/0xa0 [ 605.502817][T29548] x64_sys_call+0x28ff/0x3000 [ 605.502845][T29548] do_syscall_64+0xd2/0x200 [ 605.502872][T29548] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 605.502950][T29548] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 605.502989][T29548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.503014][T29548] RIP: 0033:0x7f68e273f749 [ 605.503038][T29548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.503061][T29548] RSP: 002b:00007f68e11a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 605.503149][T29548] RAX: ffffffffffffffda RBX: 00007f68e2995fa0 RCX: 00007f68e273f749 [ 605.503161][T29548] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 605.503174][T29548] RBP: 00007f68e11a7090 R08: 0000000000001000 R09: 0000000000000000 [ 605.503185][T29548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.503197][T29548] R13: 00007f68e2996038 R14: 00007f68e2995fa0 R15: 00007ffc2757e788 [ 605.503221][T29548] [ 605.724955][T29554] loop4: detected capacity change from 0 to 128 [ 605.837867][T29561] netlink: 12 bytes leftover after parsing attributes in process `'. [ 605.852835][T29561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 606.047182][T29574] loop5: detected capacity change from 0 to 512 [ 606.053784][T29413] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 606.148539][T29574] EXT4-fs (loop5): orphan cleanup on readonly fs [ 606.280057][T29574] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.7557: EA inode hash validation failed [ 606.338203][T29574] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.7557: corrupted inode contents [ 606.368676][T29574] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.7557: mark_inode_dirty error [ 606.395569][T29574] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.7557: corrupted inode contents [ 606.419732][T29574] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.7557: mark_inode_dirty error [ 606.432209][T29574] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.7557: mark inode dirty (error -117) [ 606.479071][T29574] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 606.490754][T29574] EXT4-fs (loop5): 1 orphan inode deleted [ 606.497539][T29574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 606.549245][T29571] loop7: detected capacity change from 0 to 1024 [ 606.558785][T29571] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 606.568615][T29595] FAULT_INJECTION: forcing a failure. [ 606.568615][T29595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.582002][T29595] CPU: 1 UID: 0 PID: 29595 Comm: syz.6.7565 Not tainted syzkaller #0 PREEMPT(voluntary) [ 606.582036][T29595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.582052][T29595] Call Trace: [ 606.582061][T29595] [ 606.582070][T29595] __dump_stack+0x1d/0x30 [ 606.582097][T29595] dump_stack_lvl+0xe8/0x140 [ 606.582131][T29595] dump_stack+0x15/0x1b [ 606.582148][T29595] should_fail_ex+0x265/0x280 [ 606.582232][T29595] should_fail+0xb/0x20 [ 606.582250][T29595] should_fail_usercopy+0x1a/0x20 [ 606.582272][T29595] _copy_from_user+0x1c/0xb0 [ 606.582303][T29595] br_ioctl_stub+0x284/0x860 [ 606.582391][T29595] ? ioctl_has_perm+0x257/0x2a0 [ 606.582436][T29595] ? __pfx_br_ioctl_stub+0x10/0x10 [ 606.582550][T29595] sock_ioctl+0x39c/0x610 [ 606.582582][T29595] ? __pfx_sock_ioctl+0x10/0x10 [ 606.582609][T29595] __se_sys_ioctl+0xce/0x140 [ 606.582705][T29595] __x64_sys_ioctl+0x43/0x50 [ 606.582732][T29595] x64_sys_call+0x1816/0x3000 [ 606.582760][T29595] do_syscall_64+0xd2/0x200 [ 606.582787][T29595] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 606.582824][T29595] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 606.582950][T29595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.582998][T29595] RIP: 0033:0x7f740d06f749 [ 606.583015][T29595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.583100][T29595] RSP: 002b:00007f740bacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.583124][T29595] RAX: ffffffffffffffda RBX: 00007f740d2c5fa0 RCX: 00007f740d06f749 [ 606.583139][T29595] RDX: 0000000000000000 RSI: 0000000000008940 RDI: 0000000000000004 [ 606.583155][T29595] RBP: 00007f740bacf090 R08: 0000000000000000 R09: 0000000000000000 [ 606.583170][T29595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.583185][T29595] R13: 00007f740d2c6038 R14: 00007f740d2c5fa0 R15: 00007ffcbb995a38 [ 606.583227][T29595] [ 606.593169][T29571] SELinux: policydb string SE Ìinux does not match my string SE Linux [ 606.644132][T29593] loop8: detected capacity change from 0 to 1024 [ 606.669295][T29571] SELinux: failed to load policy [ 606.681382][T29593] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 606.872305][T29603] netlink: 12 bytes leftover after parsing attributes in process `'. [ 606.886123][T29593] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.7564: Invalid block bitmap block 0 in block_group 0 [ 606.905730][T29605] loop6: detected capacity change from 0 to 128 [ 606.915598][T29608] 9pnet_fd: Insufficient options for proto=fd [ 606.925646][T29593] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.7564: Failed to acquire dquot type 0 [ 606.939576][T29603] 8021q: adding VLAN 0 to HW filter on device bond2 [ 607.019560][T29593] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.7564: Freeing blocks not in datazone - block = 0, count = 4096 [ 607.049533][T29593] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.7564: Invalid inode bitmap blk 0 in block_group 0 [ 607.062470][T29593] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 607.084348][ T168] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 607.097834][T29610] FAULT_INJECTION: forcing a failure. [ 607.097834][T29610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.110988][T29610] CPU: 1 UID: 0 PID: 29610 Comm: syz.7.7570 Not tainted syzkaller #0 PREEMPT(voluntary) [ 607.111024][T29610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.111041][T29610] Call Trace: [ 607.111048][T29610] [ 607.111056][T29610] __dump_stack+0x1d/0x30 [ 607.111202][T29610] dump_stack_lvl+0xe8/0x140 [ 607.111292][T29610] dump_stack+0x15/0x1b [ 607.111309][T29610] should_fail_ex+0x265/0x280 [ 607.111328][T29610] should_fail+0xb/0x20 [ 607.111347][T29610] should_fail_usercopy+0x1a/0x20 [ 607.111377][T29610] _copy_to_user+0x20/0xa0 [ 607.111453][T29610] simple_read_from_buffer+0xb5/0x130 [ 607.111479][T29610] proc_fail_nth_read+0x10e/0x150 [ 607.111537][T29610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.111573][T29610] vfs_read+0x1a8/0x770 [ 607.111658][T29610] ? __rcu_read_unlock+0x4f/0x70 [ 607.111688][T29610] ? __fget_files+0x184/0x1c0 [ 607.111718][T29610] ksys_read+0xda/0x1a0 [ 607.111743][T29610] __x64_sys_read+0x40/0x50 [ 607.111787][T29610] x64_sys_call+0x27c0/0x3000 [ 607.111815][T29610] do_syscall_64+0xd2/0x200 [ 607.111836][T29610] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 607.111920][T29610] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 607.111956][T29610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.111980][T29610] RIP: 0033:0x7fa01d32e15c [ 607.111995][T29610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 607.112017][T29610] RSP: 002b:00007fa01bd97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.112114][T29610] RAX: ffffffffffffffda RBX: 00007fa01d585fa0 RCX: 00007fa01d32e15c [ 607.112130][T29610] RDX: 000000000000000f RSI: 00007fa01bd970a0 RDI: 0000000000000006 [ 607.112146][T29610] RBP: 00007fa01bd97090 R08: 0000000000000000 R09: 0000000000000000 [ 607.112161][T29610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.112175][T29610] R13: 00007fa01d586038 R14: 00007fa01d585fa0 R15: 00007fffb269f678 [ 607.112200][T29610] [ 607.113009][T29593] EXT4-fs (loop8): 1 orphan inode deleted [ 607.319035][T29593] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.319284][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.411489][T28895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.540474][ T29] kauditd_printk_skb: 933 callbacks suppressed [ 607.540492][ T29] audit: type=1326 audit(1764347508.080:54207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.572407][ T29] audit: type=1326 audit(1764347508.109:54208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.595890][ T29] audit: type=1326 audit(1764347508.109:54209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.619608][ T29] audit: type=1326 audit(1764347508.109:54210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.643325][ T29] audit: type=1326 audit(1764347508.109:54211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.666932][ T29] audit: type=1326 audit(1764347508.109:54212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.690674][ T29] audit: type=1326 audit(1764347508.109:54213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.714183][ T29] audit: type=1326 audit(1764347508.109:54214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.737780][ T29] audit: type=1326 audit(1764347508.109:54215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.772448][ T29] audit: type=1326 audit(1764347508.296:54216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29646 comm="syz.7.7577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa01d32f749 code=0x7ffc0000 [ 607.882418][T29656] xt_hashlimit: max too large, truncated to 1048576 [ 607.898024][T29656] can0: slcan on ttyS3. [ 607.932118][T29658] loop8: detected capacity change from 0 to 512 [ 607.943418][T29656] can0 (unregistered): slcan off ttyS3. [ 607.958269][T29658] EXT4-fs (loop8): orphan cleanup on readonly fs [ 607.968465][T29658] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7581: EA inode hash validation failed [ 607.981650][T29658] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.7581: corrupted inode contents [ 607.994267][T29658] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #15: comm syz.8.7581: mark_inode_dirty error [ 608.005949][T29658] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.7581: corrupted inode contents [ 608.018818][T29658] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2996: inode #15: comm syz.8.7581: mark_inode_dirty error [ 608.031290][T29658] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.7581: mark inode dirty (error -117) [ 608.048539][T29664] loop4: detected capacity change from 0 to 512 [ 608.050550][T29662] loop7: detected capacity change from 0 to 2048 [ 608.055816][T29658] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 608.086893][T29658] EXT4-fs (loop8): 1 orphan inode deleted [ 608.094502][T29658] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 608.108686][ T3308] Alternate GPT is invalid, using primary GPT. [ 608.112187][T29658] can0: slcan on ttyS3. [ 608.115217][ T3308] loop7: p2 p3 p7 [ 608.136628][T29662] Alternate GPT is invalid, using primary GPT. [ 608.143175][T29662] loop7: p2 p3 p7 [ 608.242662][T29658] can0 (unregistered): slcan off ttyS3. [ 608.264881][T29679] bridge0: port 3(macsec1) entered blocking state [ 608.271633][T29679] bridge0: port 3(macsec1) entered disabled state [ 608.278620][T29679] macsec1: entered allmulticast mode [ 608.284099][T29679] bridge0: entered allmulticast mode [ 608.294336][T29679] macsec1: left allmulticast mode [ 608.299552][T29679] bridge0: left allmulticast mode [ 608.402586][T29693] loop5: detected capacity change from 0 to 512 [ 608.409830][T29693] EXT4-fs: Ignoring removed oldalloc option [ 608.421157][T29693] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 608.458452][T29693] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 608.491539][T29693] EXT4-fs (loop5): 1 truncate cleaned up [ 608.507638][T29693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.546039][T28895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.604343][T29718] FAULT_INJECTION: forcing a failure. [ 608.604343][T29718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.605939][T29693] loop5: detected capacity change from 512 to 64 [ 608.617586][T29718] CPU: 1 UID: 0 PID: 29718 Comm: syz.4.7590 Not tainted syzkaller #0 PREEMPT(voluntary) [ 608.617618][T29718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 608.617636][T29718] Call Trace: [ 608.617647][T29718] [ 608.617657][T29718] __dump_stack+0x1d/0x30 [ 608.617690][T29718] dump_stack_lvl+0xe8/0x140 [ 608.617763][T29718] dump_stack+0x15/0x1b [ 608.617789][T29718] should_fail_ex+0x265/0x280 [ 608.617817][T29718] should_fail+0xb/0x20 [ 608.617841][T29718] should_fail_usercopy+0x1a/0x20 [ 608.617870][T29718] _copy_from_user+0x1c/0xb0 [ 608.617977][T29718] ___sys_sendmsg+0xc1/0x1d0 [ 608.618022][T29718] __x64_sys_sendmsg+0xd4/0x160 [ 608.618127][T29718] x64_sys_call+0x191e/0x3000 [ 608.618158][T29718] do_syscall_64+0xd2/0x200 [ 608.618189][T29718] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 608.618228][T29718] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 608.618329][T29718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.618360][T29718] RIP: 0033:0x7f68e273f749 [ 608.618381][T29718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.618406][T29718] RSP: 002b:00007f68e11a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.618451][T29718] RAX: ffffffffffffffda RBX: 00007f68e2995fa0 RCX: 00007f68e273f749 [ 608.618469][T29718] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 608.618487][T29718] RBP: 00007f68e11a7090 R08: 0000000000000000 R09: 0000000000000000 [ 608.618504][T29718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.618522][T29718] R13: 00007f68e2996038 R14: 00007f68e2995fa0 R15: 00007ffc2757e788 [ 608.618548][T29718] [ 608.813533][T29735] loop4: detected capacity change from 0 to 512 [ 608.824548][T29735] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 608.833423][T29735] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.839647][T29739] loop8: detected capacity change from 0 to 512 [ 608.874503][T29739] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 608.883265][T29739] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.894185][T18380] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -12) [ 608.905526][T18380] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 608.905702][T29735] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.7591: Allocating blocks 41-42 which overlap fs metadata [ 608.952112][T18380] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 608.986620][T29735] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.7591: Allocating blocks 41-42 which overlap fs metadata [ 609.024045][T29739] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.7592: Allocating blocks 41-42 which overlap fs metadata [ 609.057691][T18380] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.067123][T29735] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7591: Failed to acquire dquot type 1 [ 609.088283][T29739] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.7592: Failed to acquire dquot type 1 [ 609.116947][T29735] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 609.141101][T29766] bridge0: port 3(macsec1) entered blocking state [ 609.147785][T29766] bridge0: port 3(macsec1) entered disabled state [ 609.152541][T29735] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7591: corrupted inode contents [ 609.166538][T29739] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 609.169756][T29766] macsec1: entered allmulticast mode [ 609.181531][T29739] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.7592: corrupted inode contents [ 609.186378][T29766] bridge0: entered allmulticast mode [ 609.203045][T29735] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.7591: mark_inode_dirty error [ 609.215215][T29739] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #12: comm syz.8.7592: mark_inode_dirty error [ 609.227432][T29739] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.7592: corrupted inode contents [ 609.227442][T29735] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7591: corrupted inode contents [ 609.227655][T29735] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.7591: mark_inode_dirty error [ 609.239604][T29739] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.7592: mark_inode_dirty error [ 609.262833][T29766] macsec1: left allmulticast mode [ 609.274058][T29739] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.7592: corrupted inode contents [ 609.278824][T29766] bridge0: left allmulticast mode [ 609.293054][T29739] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 609.304589][T29739] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.7592: corrupted inode contents [ 609.316999][T29735] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7591: corrupted inode contents [ 609.317098][T29739] EXT4-fs error (device loop8): ext4_truncate:4637: inode #12: comm syz.8.7592: mark_inode_dirty error [ 609.342669][T29739] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 609.352120][T29735] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 609.360884][T29739] EXT4-fs (loop8): 1 truncate cleaned up [ 609.367092][T29739] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.379983][T29735] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7591: corrupted inode contents [ 609.396614][T29735] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.7591: mark_inode_dirty error [ 609.410138][T29735] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 609.420425][T29735] EXT4-fs (loop4): 1 truncate cleaned up [ 609.420478][T29779] lo speed is unknown, defaulting to 1000 [ 609.426678][T29735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.475979][T23879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.496890][T29790] loop6: detected capacity change from 0 to 128 [ 609.517999][T28895] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.545505][T29779] chnl_net:caif_netlink_parms(): no params data found [ 609.609834][T29779] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.616981][T29779] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.624400][T29779] bridge_slave_0: entered allmulticast mode [ 609.631041][T29779] bridge_slave_0: entered promiscuous mode [ 609.641160][T29779] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.648477][T29779] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.672359][T29779] bridge_slave_1: entered allmulticast mode [ 609.684178][T29779] bridge_slave_1: entered promiscuous mode [ 609.709196][T29779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.719977][T29779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.069750][T29779] team0: Port device team_slave_0 added [ 610.078231][T29779] team0: Port device team_slave_1 added [ 610.106251][T29779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.113306][T29779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.139270][T29779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.144295][T29805] xt_hashlimit: max too large, truncated to 1048576 [ 610.181684][T29779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.189017][T29779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.215299][T29779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.228951][T29805] can0: slcan on ttyS3. [ 610.272825][T29779] hsr_slave_0: entered promiscuous mode [ 610.278790][T29805] can0 (unregistered): slcan off ttyS3. [ 610.289130][T29779] hsr_slave_1: entered promiscuous mode [ 610.367935][T29820] loop7: detected capacity change from 0 to 2048 [ 610.418757][T29779] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 610.436540][T29779] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 610.470293][ T3504] Alternate GPT is invalid, using primary GPT. [ 610.476697][ T3504] loop7: p2 p3 p7 [ 610.491822][T29829] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7609'. [ 610.493705][T29779] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 610.515851][T29820] Alternate GPT is invalid, using primary GPT. [ 610.522290][T29820] loop7: p2 p3 p7 [ 610.529239][T29779] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 610.536175][T29829] loop8: detected capacity change from 0 to 512 [ 610.584485][T29834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 610.607306][T29829] EXT4-fs (loop8): orphan cleanup on readonly fs [ 610.648169][T29829] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.7609: EA inode hash validation failed [ 610.660988][T29829] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 610.674294][T29829] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.7609: corrupted inode contents [ 610.686493][T29829] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #15: comm syz.8.7609: mark_inode_dirty error [ 610.703885][T29846] loop4: detected capacity change from 0 to 512 [ 610.703991][T29829] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #15: comm syz.8.7609: corrupted inode contents [ 610.725189][T29779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.735423][T29846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 610.744328][T29846] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 610.769280][T29829] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2996: inode #15: comm syz.8.7609: mark_inode_dirty error [ 610.770670][T29779] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.801165][T29829] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2999: inode #15: comm syz.8.7609: mark inode dirty (error -117) [ 610.815020][T11941] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.822155][T11941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.831720][T29846] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.7611: Allocating blocks 41-42 which overlap fs metadata [ 610.833497][T29829] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 610.854713][T29829] EXT4-fs (loop8): 1 orphan inode deleted [ 610.861566][T29829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 610.861745][T11941] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.880620][T11941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.898271][T29846] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7611: Failed to acquire dquot type 1 [ 610.916287][T29829] can0: slcan on ttyS3. [ 610.938973][T29846] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 610.963046][T29846] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7611: corrupted inode contents [ 610.979375][T29846] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.7611: mark_inode_dirty error [ 610.991116][T29829] can0 (unregistered): slcan off ttyS3. [ 611.009850][T29846] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7611: corrupted inode contents [ 611.028871][T29846] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.7611: mark_inode_dirty error [ 611.041641][T29846] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7611: corrupted inode contents [ 611.054552][T29846] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 611.066959][T29846] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.7611: corrupted inode contents [ 611.085013][T29779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.093661][T29846] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.7611: mark_inode_dirty error [ 611.106165][T29846] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 611.116539][T29846] EXT4-fs (loop4): 1 truncate cleaned up [ 611.133498][T29846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.185950][T29871] loop7: detected capacity change from 0 to 512 [ 611.209119][T29871] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 611.217980][T29871] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 611.257645][T29871] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7612: Allocating blocks 41-42 which overlap fs metadata [ 611.306303][T29871] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7612: Allocating blocks 41-42 which overlap fs metadata [ 611.389820][T29779] veth0_vlan: entered promiscuous mode [ 611.417308][T29871] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.7612: Failed to acquire dquot type 1 [ 611.419871][T29779] veth1_vlan: entered promiscuous mode [ 611.434771][T29871] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 611.456118][T29885] netlink: 4124 bytes leftover after parsing attributes in process `syz.8.7614'. [ 611.470310][T29779] veth0_macvtap: entered promiscuous mode [ 611.481412][T29871] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7612: corrupted inode contents [ 611.509029][T29871] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.7612: mark_inode_dirty error [ 611.509298][T29779] veth1_macvtap: entered promiscuous mode [ 611.520925][T29871] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7612: corrupted inode contents [ 611.545959][T29871] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.7612: mark_inode_dirty error [ 611.555041][T29779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.570026][T29779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.578781][T29871] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7612: corrupted inode contents [ 611.594044][ T168] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.604293][ T168] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.611985][T29871] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 611.622252][ T168] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.623393][T29871] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7612: corrupted inode contents [ 611.639654][ T168] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.657324][T29881] loop4: detected capacity change from 0 to 1024 [ 611.659695][T29871] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.7612: mark_inode_dirty error [ 611.670169][T29881] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 611.675337][T29871] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 611.688359][T29881] blktrace: Concurrent blktraces are not allowed on loop8 [ 611.696899][T29871] EXT4-fs (loop7): 1 truncate cleaned up [ 611.810981][T29895] loop7: detected capacity change from 0 to 1024 [ 611.855906][T29895] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.877795][T29895] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7616: bg 0: block 112: padding at end of block bitmap is not set [ 612.467457][T29948] loop6: detected capacity change from 0 to 1024 [ 612.498139][T29948] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 612.516447][T29948] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7625: Invalid block bitmap block 0 in block_group 0 [ 612.541925][T29948] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.7625: Failed to acquire dquot type 0 [ 612.554135][T29948] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.7625: Freeing blocks not in datazone - block = 0, count = 4096 [ 612.569044][T29948] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.7625: Invalid inode bitmap blk 0 in block_group 0 [ 612.582053][T11947] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:14: Failed to release dquot type 0 [ 612.594903][T29948] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 612.604213][T29948] EXT4-fs (loop6): 1 orphan inode deleted [ 612.727798][T29953] loop6: detected capacity change from 0 to 8192 [ 612.878089][T29959] loop7: detected capacity change from 0 to 512 [ 612.896567][T29959] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 612.905465][T29959] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 613.142775][T29958] loop6: detected capacity change from 0 to 1024 [ 613.156114][T29958] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 613.175408][T29959] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7627: Allocating blocks 41-42 which overlap fs metadata [ 613.208544][T29959] __quota_error: 497 callbacks suppressed [ 613.208561][T29959] Quota error (device loop7): write_blk: dquota write failed [ 613.221822][T29959] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 613.233600][T29959] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.7627: Allocating blocks 41-42 which overlap fs metadata [ 613.246078][T29958] SELinux: policydb magic number 0x74696e69 does not match expected magic number 0xf97cff8c [ 613.260908][T29978] 9pnet_fd: Insufficient options for proto=fd [ 613.267908][ T29] audit: type=1326 audit(1764347513.441:54697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29977 comm="syz.9.7632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa1af7f749 code=0x0 [ 613.292315][T29959] Quota error (device loop7): write_blk: dquota write failed [ 613.299961][T29958] SELinux: failed to load policy [ 613.305103][T29959] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 613.317900][T29958] blktrace: Concurrent blktraces are not allowed on loop12 [ 613.344711][T29959] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.7627: Failed to acquire dquot type 1 [ 613.358884][T29959] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 613.382598][T29959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7627: corrupted inode contents [ 613.399509][ T29] audit: type=1400 audit(1764347513.563:54698): avc: denied { mount } for pid=29984 comm="syz.4.7634" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 613.399509][T29959] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.7627: mark_inode_dirty error [ 613.456419][T29959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7627: corrupted inode contents [ 613.474602][T29959] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.7627: mark_inode_dirty error [ 613.479784][T29991] xt_hashlimit: max too large, truncated to 1048576 [ 613.486461][T29959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7627: corrupted inode contents [ 613.511879][ T29] audit: type=1326 audit(1764347513.647:54699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29992 comm="syz.6.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d06f749 code=0x7ffc0000 [ 613.535659][ T29] audit: type=1326 audit(1764347513.647:54700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29992 comm="syz.6.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d06f749 code=0x7ffc0000 [ 613.559320][ T29] audit: type=1326 audit(1764347513.647:54701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29992 comm="syz.6.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f740d06f749 code=0x7ffc0000 [ 613.561617][T29991] can0: slcan on ttyS3. [ 613.582979][ T29] audit: type=1326 audit(1764347513.647:54702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29992 comm="syz.6.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d06f749 code=0x7ffc0000 [ 613.619177][T29959] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 613.632004][T29959] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.7627: corrupted inode contents [ 613.645243][T29959] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.7627: mark_inode_dirty error [ 613.656965][T29959] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 613.666331][T29997] loop6: detected capacity change from 0 to 1024 [ 613.667140][T29959] EXT4-fs (loop7): 1 truncate cleaned up [ 613.678823][T29997] EXT4-fs: Ignoring removed bh option [ 613.684717][T29991] can0 (unregistered): slcan off ttyS3. [ 613.694113][T29997] EXT4-fs: inline encryption not supported [ 613.721439][T29997] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 613.734332][T29997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 613.764270][T29991] loop4: detected capacity change from 0 to 2048 [ 613.782218][T29997] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.7637: lblock 2 mapped to illegal pblock 2 (length 1) [ 613.800817][T29997] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.7637: lblock 0 mapped to illegal pblock 48 (length 1) [ 613.818207][T29997] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.7637: Failed to acquire dquot type 0 [ 613.830794][T29997] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 613.845340][T29991] Alternate GPT is invalid, using primary GPT. [ 613.851768][T29991] loop4: p2 p3 p7 [ 613.863095][T29997] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.7637: mark_inode_dirty error [ 613.874818][T29997] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 613.886521][T29997] EXT4-fs (loop6): 1 orphan inode deleted [ 613.908046][ T168] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 613.928364][ T168] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 613.931101][ T3006] Alternate GPT is invalid, using primary GPT. [ 613.946228][ T3006] loop4: p2 p3 p7 [ 613.972694][T18731] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 613.995208][T18731] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 614.014836][T18731] EXT4-fs error (device loop6): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 614.050832][T30026] xt_hashlimit: max too large, truncated to 1048576 [ 614.091785][T30026] can0: slcan on ttyS3. [ 614.132934][T30026] can0 (unregistered): slcan off ttyS3. [ 614.221995][T30034] loop6: detected capacity change from 0 to 2048 [ 614.234356][T30014] program syz.7.7640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.292133][ T3504] Alternate GPT is invalid, using primary GPT. [ 614.298648][ T3504] loop6: p2 p3 p7 [ 614.321577][T30034] Alternate GPT is invalid, using primary GPT. [ 614.328011][T30034] loop6: p2 p3 p7 [ 614.743093][T30062] loop4: detected capacity change from 0 to 1024 [ 614.758063][T30062] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 614.799677][T30062] SELinux: policydb magic number 0x74696e69 does not match expected magic number 0xf97cff8c [ 614.830626][T30062] SELinux: failed to load policy [ 614.837883][T30062] blktrace: Concurrent blktraces are not allowed on loop8 [ 614.856620][T30078] loop8: detected capacity change from 0 to 128 [ 614.863512][T30078] /dev/loop8: Can't open blockdev [ 614.980293][T30083] loop4: detected capacity change from 0 to 512 [ 615.028049][T30083] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.493788][T30100] xt_hashlimit: max too large, truncated to 1048576 [ 615.545301][T30100] can0: slcan on ttyS3. [ 615.557869][T30103] loop4: detected capacity change from 0 to 1024 [ 615.565968][T30103] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 615.590246][T30103] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.7657: Invalid block bitmap block 0 in block_group 0 [ 615.606972][T30090] program syz.8.7654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.615472][T30103] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.7657: Failed to acquire dquot type 0 [ 615.628899][T30100] can0 (unregistered): slcan off ttyS3. [ 615.638307][T30103] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.7657: Freeing blocks not in datazone - block = 0, count = 4096 [ 615.652824][T30103] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.7657: Invalid inode bitmap blk 0 in block_group 0 [ 615.667413][T30103] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 615.676351][T11949] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0 [ 615.689921][T30100] loop9: detected capacity change from 0 to 2048 [ 615.696501][T30103] EXT4-fs (loop4): 1 orphan inode deleted [ 615.749748][ T3504] Alternate GPT is invalid, using primary GPT. [ 615.756224][ T3504] loop9: p2 p3 p7 [ 615.800526][T30100] Alternate GPT is invalid, using primary GPT. [ 615.807049][T30100] loop9: p2 p3 p7 [ 615.836087][T30128] loop8: detected capacity change from 0 to 128 [ 615.919114][T30134] loop6: detected capacity change from 0 to 1024 [ 615.944493][T30134] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 615.969385][T30134] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.7659: Invalid block bitmap block 0 in block_group 0 [ 616.005794][T30134] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.7659: Failed to acquire dquot type 0 [ 616.017460][T30134] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.7659: Freeing blocks not in datazone - block = 0, count = 4096 [ 616.031210][T30134] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.7659: Invalid inode bitmap blk 0 in block_group 0 [ 616.044278][ T168] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 616.056569][T30134] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 616.065458][T30134] EXT4-fs (loop6): 1 orphan inode deleted [ 616.518235][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 616.528726][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 616.542873][T30150] xt_hashlimit: max too large, truncated to 1048576 [ 616.565889][T30150] can0: slcan on ttyS3. [ 616.612344][T30150] can0 (unregistered): slcan off ttyS3. [ 616.655426][T30148] loop6: detected capacity change from 0 to 1024 [ 616.666694][T30148] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 616.678327][ T3504] ================================================================== [ 616.686463][ T3504] BUG: KCSAN: data-race in set_nlink / set_nlink [ 616.690722][T30148] SELinux: policydb magic number 0x74696e69 does not match expected magic number 0xf97cff8c [ 616.692839][ T3504] [ 616.692849][ T3504] read to 0xffff888107898eb8 of 4 bytes by task 3006 on cpu 1: [ 616.703257][T30148] SELinux: failed to load policy [ 616.705381][ T3504] set_nlink+0x29/0xb0 [ 616.705414][ T3504] kernfs_iop_permission+0x1e2/0x220 [ 616.705442][ T3504] inode_permission+0x1ca/0x310 [ 616.714233][T30148] blktrace: Concurrent blktraces are not allowed on loop12 [ 616.717938][ T3504] link_path_walk+0x162/0x900 [ 616.744217][ T3504] path_lookupat+0x63/0x2a0 [ 616.748749][ T3504] filename_lookup+0x147/0x340 [ 616.753537][ T3504] vfs_statx+0x9d/0x390 [ 616.757711][ T3504] vfs_fstatat+0x115/0x170 [ 616.762168][ T3504] __se_sys_newfstatat+0x55/0x260 [ 616.767220][ T3504] __x64_sys_newfstatat+0x55/0x70 [ 616.772289][ T3504] x64_sys_call+0x135a/0x3000 [ 616.776983][ T3504] do_syscall_64+0xd2/0x200 [ 616.781502][ T3504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.787405][ T3504] [ 616.789732][ T3504] write to 0xffff888107898eb8 of 4 bytes by task 3504 on cpu 0: [ 616.797362][ T3504] set_nlink+0x99/0xb0 [ 616.801447][ T3504] kernfs_iop_permission+0x1e2/0x220 [ 616.806747][ T3504] inode_permission+0x1ca/0x310 [ 616.811618][ T3504] link_path_walk+0x162/0x900 [ 616.816312][ T3504] path_openat+0x1de/0x2170 [ 616.820826][ T3504] do_filp_open+0x109/0x230 [ 616.825348][ T3504] do_sys_openat2+0xa6/0x110 [ 616.829950][ T3504] __x64_sys_openat+0xf2/0x120 [ 616.834727][ T3504] x64_sys_call+0x2eab/0x3000 [ 616.839418][ T3504] do_syscall_64+0xd2/0x200 [ 616.843934][ T3504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.849837][ T3504] [ 616.852165][ T3504] value changed: 0x00000009 -> 0x00000008 [ 616.857886][ T3504] [ 616.860213][ T3504] Reported by Kernel Concurrency Sanitizer on: [ 616.866369][ T3504] CPU: 0 UID: 0 PID: 3504 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 616.875663][ T3504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 616.885731][ T3504] ================================================================== [ 616.958549][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 616.979695][T30162] loop9: detected capacity change from 0 to 2048 [ 617.012402][T19730] Alternate GPT is invalid, using primary GPT. [ 617.018976][T19730] loop9: p2 p3 p7 [ 617.030545][T30162] Alternate GPT is invalid, using primary GPT. [ 617.036953][T30162] loop9: p2 p3 p7