last executing test programs: 58.226411649s ago: executing program 32 (id=306): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x2c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) listen(r2, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 43.982652104s ago: executing program 33 (id=542): socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 43.707178586s ago: executing program 34 (id=548): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x60938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x6}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 42.5391243s ago: executing program 35 (id=566): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e5", 0x16}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="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", 0x1a7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x3, 0xc014) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 40.529261151s ago: executing program 36 (id=582): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') 36.428608611s ago: executing program 37 (id=597): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000001cc0)=""/213, 0xd5}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000006c0), 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214, 0xd6}, {&(0x7f0000000840)=""/201, 0xc9}], 0x2}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x3, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 35.484519407s ago: executing program 8 (id=608): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e5", 0x16}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c5274", 0x1a7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x3, 0xc014) 35.44001192s ago: executing program 38 (id=608): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e5", 0x16}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="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", 0x1a7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x3, 0xc014) 34.769174235s ago: executing program 39 (id=614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 33.894368405s ago: executing program 40 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 33.302824712s ago: executing program 41 (id=624): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e5", 0x16}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c5274", 0x1a7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)}}], 0x3, 0xc014) 26.845752961s ago: executing program 42 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket(0x2d, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast2}, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)=',\x00', &(0x7f0000000580)='/dev/dri/card#\x00', 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001f00"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) 24.37819827s ago: executing program 4 (id=680): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x112026, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 23.468336473s ago: executing program 4 (id=690): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97, 0x61}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000001cc0)=""/213, 0xd5}, {&(0x7f0000000580)=""/181, 0xb5}], 0x7, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207, 0xcf}], 0x1, &(0x7f0000001b40)=""/173, 0xad}, 0x7a}], 0x2, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 23.110425712s ago: executing program 4 (id=695): socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.080453744s ago: executing program 43 (id=695): socket(0x40000000015, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.561231567s ago: executing program 44 (id=736): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36a, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 18.499261792s ago: executing program 45 (id=747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000a818010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb70300d2f4147e8afa256a8d0008000000b7040000000000008500000007000000955612d34af3"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0xb, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r2, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='start_task_reaping\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) socket$unix(0x1, 0x1, 0x0) io_uring_setup(0x177e, &(0x7f0000000140)) 18.116335103s ago: executing program 8 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 17.973136085s ago: executing program 8 (id=752): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffd98, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) io_setup(0xb07, &(0x7f0000002500)=0x0) io_pgetevents(r2, 0x5, 0x5, &(0x7f0000002540)=[{}, {}, {}, {}, {}], &(0x7f0000002640)={0x0, 0x3938700}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x2}, 0x28) 17.795334789s ago: executing program 8 (id=755): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 17.514181082s ago: executing program 8 (id=756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8840) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x24b12ff8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.422069479s ago: executing program 46 (id=757): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="35e2000000000000600012800b000100697036746e6c00005000028008000100", @ANYRES32, @ANYBLOB="0800140000000000080008000a0000000500090089000000060010000d000000080008000c000000050009"], 0x80}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x101}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 16.334312696s ago: executing program 8 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket(0x2d, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048811}, 0x40000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast2}, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)=',\x00', &(0x7f0000000580)='/dev/dri/card#\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) 16.322584717s ago: executing program 47 (id=759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket(0x2d, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048811}, 0x40000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000010c0)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x5, 0x2, 0x29}, 0x2c) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast2}, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000540)=',\x00', &(0x7f0000000580)='/dev/dri/card#\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) 13.948061268s ago: executing program 6 (id=737): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000007c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e5", 0x16}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000003c0)="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", 0x123}], 0x1}}], 0x2, 0xc014) 13.905536461s ago: executing program 6 (id=761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getresgid(&(0x7f0000000c40), &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='.\x02\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES8=0x0, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") 13.850010006s ago: executing program 6 (id=762): socket$kcm(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x10) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={[0x7]}, 0x8) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x1800, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x1a3100) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000240)={0x0, 0xffffffffffffff94, 0x2}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) setregid(0xee00, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000001600)=[{&(0x7f0000000b00)=""/185, 0xb9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000a00)=""/238, 0xee}], 0x1, 0x0) rt_sigaction(0x40, &(0x7f0000000200)={0x0, 0x2, 0x0}, 0x0, 0x8, &(0x7f0000000bc0)) 12.959236928s ago: executing program 6 (id=763): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 12.727836976s ago: executing program 6 (id=764): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x201, 0x2, 0x10000}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 11.373692705s ago: executing program 6 (id=772): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}}, 0x0) 11.297344991s ago: executing program 48 (id=772): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x30}}, 0x0) 10.785512372s ago: executing program 5 (id=783): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.658462573s ago: executing program 5 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 10.57394485s ago: executing program 5 (id=786): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$int_in(r0, 0x5452, 0x0) shutdown(r0, 0x1) 10.534401703s ago: executing program 5 (id=787): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") chdir(0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 10.398654633s ago: executing program 5 (id=788): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b', @ANYRES32=r0], 0x24}}, 0x0) 10.110061437s ago: executing program 5 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.07656176s ago: executing program 49 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.790620743s ago: executing program 0 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'qP'}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 7.773568204s ago: executing program 0 (id=825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) 7.745361537s ago: executing program 0 (id=826): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8840) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x24b12ff8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.485388518s ago: executing program 0 (id=827): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = inotify_init1(0x0) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x118) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000000001,hide,session=0x0000000000000047,cruft,uid=', @ANYRESHEX=0x0, @ANYBLOB="b27dc09c5d8ef38346f13d", @ANYRESOCT=r1, @ANYBLOB="2c757466302c6d6170ff0366662c750bdb58a5064c470911dccc5c0970a2cd1f8fedf37330b47510a4492e7ff3327f8dc350b8647a5a121a1a0b9b469c0c8abb3e71a83c19df7ffab6bbe485feca15e30ecbe192848e51d8700767c462a992b1bd20b38604016154d53178389e5f4efa653cec7c984b011c43b32138d0f30d5f1c553ffa54ab317781c8ef6c990202f500d4dafe46bea60f264722ee3ef3d68cdf73cf6a3254644cd99412a07159d4e7b6eeaad6a7ae5d795e5beb4351a240844abec3bbf5a1b09ab517f6016c0369", @ANYRESDEC=0x0, @ANYBLOB=',,'], 0x1, 0x9d7, &(0x7f0000001800)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) read(r3, &(0x7f0000000140)=""/68, 0x44) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendto$inet6(r2, 0x0, 0x2, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x10d900) 7.266422965s ago: executing program 0 (id=828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) close(0x3) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) write$tun(r0, &(0x7f0000000800)={@val={0x8, 0xf8}, @val={0x2, 0x1, 0xce, 0x68, 0x8000, 0x9}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x64, 0x0, 0x8, 0x1, 0x0, @empty, @local}, @echo={0x8, 0x0, 0x0, 0xe0}}}, 0x2a) 7.078282001s ago: executing program 0 (id=830): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 7.030162444s ago: executing program 50 (id=830): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 6.503409106s ago: executing program 4 (id=775): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 6.353520709s ago: executing program 4 (id=836): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) 4.749829588s ago: executing program 4 (id=847): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, 0x0) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x20000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.743043688s ago: executing program 51 (id=847): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$int_in(r0, 0x5452, 0x0) recvfrom(r0, &(0x7f0000000200)=""/82, 0x52, 0x20000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.292900984s ago: executing program 7 (id=864): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sr0, 0x0, &(0x7f00000000c0)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000ac080000000010007b8af8ff0e000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r5, @ANYRESDEC=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f800000000002085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) fadvise64(0xffffffffffffffff, 0x2, 0x7d962850, 0x5) r8 = dup3(r1, r0, 0x0) connect$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) stat(&(0x7f0000000240)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x5, 0xffffffffffffffff, &(0x7f0000000340)=0x3, 0xd, 0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000080)='./file3\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x8000000000000000,timeout=0x000000000000000f,rq=0x0000000000000200,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',timeout=0x7fffffffffffffff,sq=0x0000000000000005,timeout=0x0000000000000007,timeout=0x000000006f537f6a,euid=', @ANYRESDEC=0x0, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',fowner<', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',uid<', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) 2.792054895s ago: executing program 7 (id=872): capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x1}, {0x1, 0xff, 0x2}, 0xfe}, {0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}, {0x0, 0xfffffffffffffffb, {0x0, 0xf0, 0x2}, {0x1}, 0x0, 0xff}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0x5, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4014}, 0xc4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000100)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fremovexattr(r3, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 1.811123284s ago: executing program 3 (id=881): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) 1.763940078s ago: executing program 3 (id=882): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x8000, 0x6, 0x2, 0x3}, {0x6, 0x10, 0xb, 0xfffffffa}, {0x3, 0xf, 0xdd, 0x2}, {0x6, 0x0, 0x4, 0xe0}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x4000, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x6, 0x0}, 0x8) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0xda, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pwritev(r3, 0x0, 0x0, 0x5, 0x3) close_range(r0, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendmsg$inet6(r1, &(0x7f00000006c0)={&(0x7f0000000200)={0xa, 0x4e22, 0x9a4, @mcast2, 0x6c8f}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000280)="d10d92093ac57547a535564ce8bdaf9e0b0216ea76ce0ceb5787afd75a4329a3b1c32f5b3d3a1e0d4e5d0b1194cf908d3781e13a2f0823b15a623372fba7a3d9b1e5bd565455517a7151fce728983a440417", 0x52}, {&(0x7f0000000300)='\frY0X', 0x5}, {&(0x7f0000000380)="3cbc0b0120", 0x5}], 0x3, &(0x7f0000000640)}, 0x4) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) r5 = signalfd(r1, &(0x7f0000000700), 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000001d40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000000500)=r9) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001600)={0x0, "bb2aa0dc6db6bbdcb03b0406daf795b6"}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000002600)={{r6}, r9, 0x18, @inherit={0x50, &(0x7f00000008c0)=ANY=[@ANYBLOB="0083f8945bd0970d6e00000000000000040000000008000006000000000000000e000000000000003277b6c8172c6438ff0f0006000000000000004afecc3900000000d18960d4000000000000000000b2276258acf2879be4f526a25e1f8f398bc4135fc611b6b4770f977288a0c2c350f5bfab2a32d88a626bdf6ab52db4ddd48618230af582791a55c732ae69b576dbd0f289ed4ca2e09c124f494ee084db987830a12392007668703285ae0cfe2bed639583e449e16944968f2435cccc0090a6f624140aa2e84330d200afd12b72ff53018779019bcb56f0cc5b78d480d96eaf6104a0"]}, @devid=r10}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r11, 0x0, 0xffffffffffffffff}, 0x18) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000)) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 1.590049271s ago: executing program 7 (id=883): r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f00000052c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f0000005740)=0xffffffffffff8001, r1, 0x0, 0x1, 0x6) r3 = syz_io_uring_setup(0x58f4, &(0x7f0000000240)={0x0, 0x5f18, 0x822, 0x1, 0x8d, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000380)) read(r3, &(0x7f0000000640)=""/174, 0xae) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000400)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/296, @ANYRESDEC=0x0, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiefWzDVzX/eMMhdjSSMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnL060t6nbauD2mqy+O9CtZ8T+Vy7qUzrr0neHid+JfN3UlfXRF5XhS1v7/vfP/D75dLOTrn5DQ61AkzbDNUpakMc9f7j95OBjsPJtzIl8BKswQtO52vdD3Ova6a7zQN421terdjVZoWl5J4XbYdzvGCdxC3w/MinPb1BqNVeNWtv3N7nrTbrv5zPvfr1era+b9pWzP3n2/EjobXrvtddeTmHhxHHPffPrzNMS1O8bsPh7srE5LMg6qzRJUnxZUr9brtVq9Xlu717h3v1otjsyoHqORiLk/afE1M7+TN/CGCnH9/7sltVVWV5vakhn746ipQL46E5Zn8vr/7l33xH4P1/+8yl8aLr6spP5fSx9dm1T/J+RiZJIVxi2xJsx/vZ/neql9PdFDDTTQjp7NZ7vX55fh2/1Zl4qSp1C+PHVka12uTDbHqKE1ramqD7ShlkIZteSpLVehthWqL1ed5JgEcmUnrdiKHN2WUU0NNbQqI1cVbcvXprpaV1O2/h1F0a4eJ/t99YQclQfVZgmqnxA0qf7/4pM066n13xL1/xstP3/NEgOcuyi7/j+l628nGwAAAAAA8DZYyV/freS1+6uSIrW8tls977QAAAAAAMAcJa/8X4kni3HrqqwJ1//R2ecGAAAAAADmw0o+Y2dJWk7e1G8NPwk1y5sAFs4gRQAAAAAA8IaS1/+vlaQouffadVmnuv4HAAAAAABfA78/dI/9Yn6P3Sh/Wb8gKewtWX/555KCRetVb+u71p4dL7H3spiRdwD0W5eti9mNepNJSVLyyHGvWFfToOwmmFa++pe70+71bwXHEigt5H++mJbAWjF7pE91I425UU6nj/YLSpakvSy3vLZbcfz2g5ps+2Kh7271f/308W+k4GCcu48HO5UPPx48SnJ5Fc96tRfn8cmRdArTcnmhbF9cHTviC2rlXf6h21m2kn6r+fgXZO8VDnc02/h/q5tpzM3ldLq8r2xPJOMvx+OvVZJDNhx9PKrP/jQcfe34yMcdiAlZlJMsbqUxt1ZupZM8vyyL7y1I9crxY1CKn4LDfVE/nMX0fWH9a2RfTMki3hercRZ/jTc0fCYcyWL1dFmMHBEAOC+7wyqU3MR89B77x+vu65zlplf3Hx3t5cVnUfqBwwWpmL02cWIvZcVn9JVk2yopObEWLx+cZfdu5Gf0alZXyppwRq++QXWL+/rz8DuQsrRH6sp/oih6UEv6/eNBv2lV/Txe4fOJ/Ybt+kI8wrsv9n6Z3AA/9tHORztP6/XVtep71eq9uhaTYWQTag8AYIzp37EzNcJ67+Cq+tE/3k1bRyretw7eUlDRh/pYAz3SnfwrBK6P3+ryobch3Bm9ao1jL0jHY2u6M/GqLqmlaezPtks/TIOS34vKVzlaqYfbXX2rxwAAgLN2s5E1JtThWer/neS6W9LK5UPX3QfX7Mdq+fFvCJ5Uc2tntg8AAPhf4wZfWsv931lB4PU+qDUaNbu/4ZrAd35iAq+57hqv23cDZ8PurrumF/h93/HbphdoyWu6oQk3ez0/6JuWH5ieH3pbpuW1XZN99Xvoduxu33PCXtu1Q9c4frdvO33T9ELH9DZ/3PbCDTdIVg57ruO1PMfue37XhP5m4LgVY0LXPRToNd1u32t5cbNreoHXsYNt81O/vdlxTdMNncDr9f10g3lfXrflB51ksxVFp/6iQwAAvomev9x/8nAw2Hk2qZFc0U+JGTZK4zaY98UrzgAAfDWMVumJymeSEAAAAAAAAAAAAAAAAAAAAAAAGDH9I32nbCyO+7CgdDDnVxdn2o6leSd2mkbh9Vf/2wkxFw7m5Lv/cMyrcxip0kZx/lu+cJqPjc6h8YPddI9OjIkXjl20dHAsivP/7xA3nn4xYVEURdHJqy8d3YelkwZ4tFGU9Kz0BofgfM5HAM7OfwMAAP//3JZAiA==") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="14ce3bd5ad0000018c9c182ae9c2f13798d1ccd3868d75aa1a06da6cb412b88275fdf7398f1a85ac0c289810441caeb8fde56c7494ece403dbfb0b7a3e708f2f578b9d8c41ea50f79e914b36b0301a202fe85cd53624f13605e7caef7a37f13ecc6dc03d00"/114, @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf2525000000"], 0x14}}, 0x0) epoll_create1(0x80000) 1.589199662s ago: executing program 2 (id=884): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000000c0)='sched_kthread_work_queue_work\x00', r4, 0x0, 0x2}, 0x18) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bind$bt_hci(r0, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000280)={@broadcast, @broadcast, 0x1, "a3680243f1775be7849400fdb20ca6d16a2a59688f23e2440fb43eeee3ddc225", 0x5, 0x4, 0x2, 0xd83}, 0x3c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r8, &(0x7f0000000080)='./file0\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r12, 0x0, 0x0) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) 1.510377158s ago: executing program 2 (id=885): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1.49067822s ago: executing program 7 (id=886): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100000, 0x2000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x3480, &(0x7f00000000c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x28, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC_PROXY(r8, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e24, 0x3ff, @loopback, 0x8}, {0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1, {[0xe9f8, 0xf41, 0xabf, 0x2, 0xe, 0x0, 0xfffffff8, 0x2]}}, 0x5c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000580)={r9}, &(0x7f0000000600)=0x8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r11}, 0x10) epoll_pwait2(r4, 0x0, 0x0, 0x0, 0x0, 0x38) 1.351064951s ago: executing program 2 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090008000000010000000000000003000600000000000200000000000000000000000000004002000100000000000000020600000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1, 0x4}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x800000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r5}, 0x18) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000000)) 1.306179615s ago: executing program 7 (id=888): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4010000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000540)='devfreq_monitor\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332abd70000000478d1500000008009900"], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) kexec_load(0xffff, 0x7, &(0x7f0000000c80)=[{&(0x7f0000000740)="c1d04c3caf1b1b000e0d93c7e09cd7f522bedb6f3d4094ed4f307414f7f764eb0ab44fbe68e3f75b68b98a87b81e11f2f56d24f12c8beaefa2be6653bb43f5407f76ba61d53df83b99c6faf5c78ff6dbd64cd77e7e0f2c8496be2df4ac9cab13c01f5f43cfd53f619e3f90", 0x6b, 0x8, 0xa}, {&(0x7f0000000540), 0x0, 0x3, 0x400}, {&(0x7f0000000940)="928b5e5bb7875721620d34c117517396c43e3e6509f60d1ac008c7c972a4ba4be4cdbc0951cceaf79179eb4ad19bc0b8308e732c5b1123e9842f48f5ad72c426c8f61a24a25d5e868c405c0ab976adf058b5caa167d4b788714c442e1c3ddcbe294716f5a3a34f9f7f91ef3628f6023428f8fbba687e5001b7112f6e628186779f39220af949a6e3282d534e404587c5a86098293f3991e30970ee27e6f1e58de6110e6fccf3e0c4a293309c957d16b0ef9f4bb11d075de69272f0ca303bbeb3fe9c6f85aed37ec9a660076b9c764971e2657dbb453386e7a2168352dadd22017e0c0c769aea71d7b10766cc3363a14b8ad3fdc94fcc", 0xf6, 0x8, 0x7}, {&(0x7f0000001380)="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", 0xfc0, 0x2, 0x8}, {&(0x7f0000000640)="73b91bebef43", 0x6, 0x1000, 0x3}, {&(0x7f0000000ac0)="bd1c744bebb035e845646e2ac9fd5938f6a4534794035de7683441e9e934fb4ed24186fcf6c505304e9598a5de601ab8fa1c724210b411abd2fd8b03cd4d5ee74b9bc0d0f31c9500f89ba38ea4626669531b35452782a3a023d25669c215aed237e060be9a2778a689b0894ea2d7b9a9834b844d9b408ef4116034a31ced736e2d6904a6a6eee4f40760c86c68b8472711ffb8c6884a25471810a89ebc1f05d7a699d92f2e37280a2b7c22504a1067d5cc0b257bb742a9019e05f8417c0cf726d87193452428aec7069120a9ae6e18bc64ccf3addda4093605bff12dcc0109", 0xdf, 0x239, 0x9}, {&(0x7f0000000c00)="491436d15814b92dfe6c587ef5e9b24e36b177f29ab9ba9e8475428205e35f9ed88822b33434699fb8b2a119efb9ca9fb5533147d9db2c7b23ba6448803fdffbf429f9813722dc7d761a5ae8bcb1869bd52cc278c89b697c04d0cd6ab26a2e19e511839001b2dad0", 0x68, 0x8, 0x58ce}], 0x2a0000) read(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0001"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2401c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x503, 0x0) 1.2397821s ago: executing program 9 (id=889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000001b00)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd69394a090000320100f3ffffffffffffff00ffff64010102ff020000000000000000000000000001"], 0x0) 1.197070253s ago: executing program 3 (id=890): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x5, 0x576, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000780)="c86865718f13b6253132917de50893b2389f396dfb8d", 0x16, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) (async) sendfile(r1, r1, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1801000011dd070000e4ffffffff007eca0018120000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1801000011dd070000e4ffffffff007eca0018120000", @ANYRES32, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x74}]}, 0x0}, 0x94) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 1.130286608s ago: executing program 9 (id=891): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600050001", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0xc001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4008, r4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x100847c0, 0x0, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = dup(r8) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000003050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) 977.918141ms ago: executing program 2 (id=892): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@sr0, 0x0, &(0x7f00000000c0)='./file0\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000ac080000000010007b8af8ff0e000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r5, @ANYRESDEC=r5], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f800000000002085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) fadvise64(0xffffffffffffffff, 0x2, 0x7d962850, 0x5) r8 = dup3(r1, r0, 0x0) connect$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) 674.926725ms ago: executing program 9 (id=893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) 626.287309ms ago: executing program 9 (id=894): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001300)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x40018c4}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x11}}], 0x1, 0x8080) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 571.850193ms ago: executing program 1 (id=849): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x9, 0x1, 0x3, 0x5, 0x1, 0x9, 0x2, 0x81, 0x2, 0x9, 0x0, 0xbc, 0x2, 0x7}, 0xe) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0) syz_read_part_table(0x106d, &(0x7f0000001080)="$eJzsz7FNw0AYBeB3trFNR0VD44qaGdiBFiExiBENDSPQ0rAIG7AAI6SOLjpFyQhJiu8r7p6eTvfrD2d2M+UlQ0peP/okJbW8JXVbpyRdUoav9uy2HUvmtPo6ufp/f75v3WNfxvwefhv3V5+7tZaWNnN3HNXSw3dZaq1rks+/p5+TrwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF2gXAAD//wCmE1Q=") 487.67086ms ago: executing program 9 (id=895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x80000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000000c0)='sched_kthread_work_queue_work\x00', r4, 0x0, 0x2}, 0x18) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bind$bt_hci(r0, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000280)={@broadcast, @broadcast, 0x1, "a3680243f1775be7849400fdb20ca6d16a2a59688f23e2440fb43eeee3ddc225", 0x5, 0x4, 0x2, 0xd83}, 0x3c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r8, &(0x7f0000000080)='./file0\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) close(0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r12, 0x0, 0x0) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) 350.306961ms ago: executing program 7 (id=896): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080), 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r5 = socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x22000a0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r0, 0x0, 0x3ffff) sendfile(r6, r0, 0x0, 0x7ffff000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f00000001c0)=[{r4, 0x2100}, {0xffffffffffffffff, 0x4010}], 0x2, &(0x7f0000000400)={r8, r9+60000000}, &(0x7f0000000440)={[0x8]}, 0x8) 349.430421ms ago: executing program 3 (id=897): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) (async) inotify_init1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000180)={0x38, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x20, 0x11a, 0x0, 0x1, [@nested={0x1c, 0xdb, 0x0, 0x1, [@nested={0x18, 0x31, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="1a3c535e7f22ed6a733167edf3c3bcef"}]}]}]}]}, 0x38}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000006000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000300000000002604fdffff02000016010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x7]}, 0x8}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x112}) (async) io_setup(0x8440, &(0x7f0000000080)=0x0) (async) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) io_getevents(r6, 0x10001, 0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r7, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) 349.068261ms ago: executing program 1 (id=898): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001970000ff7f000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 239.69532ms ago: executing program 1 (id=899): syz_open_dev$evdev(&(0x7f0000000280), 0x3, 0x10d900) 236.00596ms ago: executing program 2 (id=900): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x5c, 0x0) 211.218373ms ago: executing program 1 (id=901): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100555cf0de76"], 0x38}}, 0x0) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000006b40)=0x80000000, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0xfffffffffffffd9d, &(0x7f0000001500)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="cc33cbf70112e1dcf2dc167f8465969ff6a69285f5f7fdf7664f4dded37c880a2d936a347bf894a52c1c41aab9151132aba7123f0205b78bd08dfdb30c349c4570c8d377057b2763a59eb3484aa0e0691c7960ba8d8afd70a7096352f14f3cb0baedfdf0f6042c9145c39a0f02d97cdb72a49d128ea93c2f2206cdf024d4c940fda3123bc6939c27b0836c76556a58cf6a0c21fdc6c215", @ANYRESOCT], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000001) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000030000000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140019800b00010067656e6576650000040002801c001a8018000a8014000700fc02000000000000000000000000000066547ae92b80ce3b59ea7e3b87ffbdd2f13070e8becc3f340f365cb2d56c48fc65f0167e"], 0x50}, 0x1, 0x2}, 0x0) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/200, 0xc8) socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000018000480140001800a00010072616e676500000004710280060007"], 0x74}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x18) r7 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, 0x0, 0x0) ioctl$FICLONE(r7, 0x40049409, r5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 156.503587ms ago: executing program 2 (id=902): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000003"], 0x118}, 0x1, 0x0, 0x0, 0x890}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) r4 = socket(0x6, 0x4, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000001900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)={&(0x7f0000001640)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2}, 0x5, 0xfa, 0x6, 0x8000, 0x19, 'syz0\x00', "fb3f6b49de7e7c4fe3cb389048d6c07a0c966aaf0c1a50b5d493115d6ce2d5ee", "a5d7fda88b1c4b07a7fdef85439560a4b0118f0d423e384e15af555852d90e45", [{0x7, 0x1ff, {0x3, 0x5}}, {0xb, 0x5, {0x1, 0x551a6274}}, {0xf5, 0xaa, {0x1, 0x4}}, {0x53, 0x1, {0x54d393265de12b3e, 0x800}}, {0x6, 0x3, {0x1}}, {0x4, 0x4, {0x2, 0x7fff}}, {0x4, 0x7, {0x2}}, {0xda, 0x0, {0x2, 0x583200f3}}, {0x8, 0x3, {0x1, 0x80}}, {0x7, 0x401, {0x1, 0x8}}, {0x9, 0xfffa, {0x1, 0x8}}, {0x7f, 0x9, {0x3, 0xf5f}}, {0x6, 0x100, {0x3, 0x2}}, {0xd, 0x2, {0x2, 0xf8d}}, {0x7, 0x9, {0x3, 0x5}}, {0x6, 0x101, {0xdc8bd58444442c0e, 0x2}}, {0x7, 0x6, {0x0, 0x5}}, {0x3c59, 0x2, {0x3, 0x9}}, {0x8, 0x1, {0x2, 0xffffffff}}, {0xffff, 0xf1df, {0x2, 0x400}}, {0x6, 0x2, {0x1, 0x7}}, {0x2, 0x0, {0x0, 0x60e}}, {0x6, 0x2, {0x1, 0x5}}, {0x81, 0x0, {0x0, 0x9}}, {0x6, 0x3, {0x2, 0x3}}, {0x8, 0x0, {0x2, 0x1}}, {0x8001, 0x4, {0x0, 0x7fffffff}}, {0xd2, 0x72, {0x1, 0x7}}, {0x9, 0x8, {0x2, 0x5}}, {0xa, 0x101, {0x3, 0x9bfc}}, {0x4, 0x9, {0x3, 0x401}}, {0x8, 0x9, {0x0, 0xb04}}, {0x4, 0x9, {0x1, 0x8}}, {0x9, 0x7, {0x0, 0xffff}}, {0x2ec0, 0x8, {0x3, 0x4}}, {0xb32, 0x4, {0x2, 0xfffffe01}}, {0x1f33, 0xf282, {0x2, 0x200}}, {0x5, 0x100, {0x1, 0x7ab}}, {0x3, 0xfffe, {0x0, 0x7}}, {0x10, 0x0, {0x2, 0x7de4f5b4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x7e, 0x44, &(0x7f0000000180)="1b6f3db0ef86d69747783c825d90f52786540d21a04709d5cf179ea6098603100e2d6805caf97d6af2e78bd40c4857bc443ffb325df9a4d156add5eb61894a7d2d604e351da5af3620e08bf29305b43aa6e38bc981c4a141057b3c0d44fce2cb99dec6b02427626fe10703b73ffd1f94f8b1c313631840b13587b66a470f", &(0x7f00000003c0)=""/68, 0x1000, 0x0, 0x1000, 0x59, &(0x7f0000000540)="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", &(0x7f0000001540)="b352d6d17ade47e76d67ab2053f2ddd11b8c52ffb49fe9121f49eec560fbe601f25184bf19f0c6a1c223ef4ed335f74bb6151a7d01a0e60364124eb0ee53eab6aa21fa11639433651f9cb516722aa10e5776680bd611b95aaf", 0x6, 0x0, 0x10001}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f00000002c0)={0x1a, 0x0, 0x6, 0x8, 0x7a, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, 0x10) recvfrom$llc(r9, 0x0, 0x0, 0x40010001, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r8, 0x1, 0x70bd29, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 155.415537ms ago: executing program 9 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, r2, 0x0) setresuid(0xee01, 0xee01, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) fsmount(r4, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffd, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000280)={0x5, &(0x7f0000000180)=[{0x1, 0x20, 0x6, 0xffffffff}, {0x6, 0x3}, {0x2b4c, 0x3, 0x9, 0x8}, {0xe, 0xff, 0x75, 0x2}, {0xbd, 0x1, 0xa, 0x4}]}) write$binfmt_script(r6, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r5, r6, 0x0) 81.554053ms ago: executing program 3 (id=904): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0xfffffff9, [0x7, 0x14db], 0xe3}, 0x10) (async) r1 = socket(0x1, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sysinfo(&(0x7f0000000180)=""/238) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000150000012abd7000fcdbdf250a0000c87ddf3a8b6de2f1a1f4ed5e71121079f8efc671444896377f59c20b68b290940f2620ec1e19cb35d4c019a23b28526821fae7d9e33b560681401e2ed7a7c2e8bfcaedcf0adae37f385069abd5b53a2c5e6e4da0522b19d5e081c0ee80afaf6140cd37de3a8d2d2e1647968070b2008d4c4753ae0cc9c682c05df8f05179f2331de344ff23ed06091bf1047751693d395149b94a2700"/185, @ANYRES32=r2, @ANYBLOB="14000200fe88000000000000000000000000000114000100200100"/40], 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x4c000) 81.119483ms ago: executing program 1 (id=905): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x40}, 0x20008024) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_clone(0x20000000, &(0x7f0000000300)="dcf556799e2e957117137b2a6c90b5b7051b3bbb667dbeeefbdc5eec30ecdbaa6f66a7214b4412bd9d5d6cc3425bf4dd222c58d7406d2dee0b2062ac2c20e70e53d932e9540327cf1153eb36fb372080cae3d69e76d7778d6d864d02b5b555529efc4305c5fd03ef2ae2f4f290e66e3399414f73b44a47095ee3725ee45b1d7a0e390b76e57d81c59208ac556e988a6020717589943885efbc1f", 0x9a, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)="67cb9a084f4933ba309fba6b0c1650a8ad3ea412bd176c7c6aa8489e9a14f13ff0ca68ba807a3ad4534ad309be0fef6d6b52cd3b71d4b497875ebc1d0718c4ffc1") ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f00000003c0)={[0x7fffffff]}) socketpair(0x28, 0x6, 0x28, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 80.432843ms ago: executing program 3 (id=906): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4010000) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000540)='devfreq_monitor\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332abd70000000478d1500000008009900"], 0x30}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) kexec_load(0xffff, 0x7, &(0x7f0000000c80)=[{&(0x7f0000000740)="c1d04c3caf1b1b000e0d93c7e09cd7f522bedb6f3d4094ed4f307414f7f764eb0ab44fbe68e3f75b68b98a87b81e11f2f56d24f12c8beaefa2be6653bb43f5407f76ba61d53df83b99c6faf5c78ff6dbd64cd77e7e0f2c8496be2df4ac9cab13c01f5f43cfd53f619e3f90", 0x6b, 0x8, 0xa}, {&(0x7f0000000540), 0x0, 0x3, 0x400}, {&(0x7f0000000940)="928b5e5bb7875721620d34c117517396c43e3e6509f60d1ac008c7c972a4ba4be4cdbc0951cceaf79179eb4ad19bc0b8308e732c5b1123e9842f48f5ad72c426c8f61a24a25d5e868c405c0ab976adf058b5caa167d4b788714c442e1c3ddcbe294716f5a3a34f9f7f91ef3628f6023428f8fbba687e5001b7112f6e628186779f39220af949a6e3282d534e404587c5a86098293f3991e30970ee27e6f1e58de6110e6fccf3e0c4a293309c957d16b0ef9f4bb11d075de69272f0ca303bbeb3fe9c6f85aed37ec9a660076b9c764971e2657dbb453386e7a2168352dadd22017e0c0c769aea71d7b10766cc3363a14b8ad3fdc94fcc", 0xf6, 0x8, 0x7}, {&(0x7f0000001380)="526adaf7b815dbe2606c439b0955acf1516bfeb2cbc564f41247d05c605fdd9bd16e56598a3b6d340985b3cbf8490ab8ab4f775ecadcc9b1927bab401c3521ee4c9889a5602c217bb64f6e69654fd3b41c6a10e7d833adb1d2ba0d63c89849ca648ac3af05642ccb2170c6014970938a8dfd43f4a3ccd0f1194b7aa981a650c5282af2f2731f112cdf9bf87fc188ff305ac37848f02688a3f472e49845d72b80ac8d1ee6f4d0cde90ddbce55b83b0ec6caae85d84fb09159dae95981e1699db1d838ca6990b6f82239ec7f73ae2d1eef429a3998f1ea73121122d7b8d925658ce3748a4f0c1322be9739422d4a1b62966b5c3deaaee2683c9c111a1bf1cb8542e53bb754d68447b50790e312b32b2de6a5f528414a7458d023dfe3fefdde93a52cea31f8a893555bd0e993a7dadf6f0920682d834d37d71847caa4130fc81f491a498f0887f43a160aa2e9271e94e0fc147a1c2ca915ef6cf7eae6b9a35ce25e127822973ffa95bae693d15fd75f5d8808ca94b9bc1f243593ebe26bbc95556047964f0fde9b5e4adc631d166939d7df39558504165ca34074d4486a43e750f64a7f66d5a677b2c800ff2b5a453530e14b4df5f29d7d41192e3cf80c31776455ddbf522927ee30224810115084169196ac93a049b9926d0951a74e01f925cd58114c93823fd412a16660631d3f9ecec5250cb3c4e0f01d93adbf1f3313d70274a4da2831cb7284fb6c39a69732a2bb248e9759bfb1bd17b9a5d1c11fd06629c9562aa4fcbf131ab9d78e7b59476ec1f922e72f647e8f356bde22c471c9dc5d7c15960217f425e9de7e14fd08b55a52f247e3995c302c08d58cf764e8c919493367ef72d44185f84fd93b86f00f504d33c9112aed5da3eea702b6f032bfb4fb2ef65f241ff529532eba46b7dab5c64e01b0bef519eca74df1c587a43a4b8a282377c2fae63038d85a90e33eaeba169c6d615b673f08532984830d63f4f38fff956c0efcfa56c9486389f53d417dc401f15320b4f5f5f8e0496ec3ba93f6d4dbbac19f851368cabe4da44a260f89f955271c899484a8c77807134af8a8f56b1f7b5243f2a895aeda2b6f7b14d76f229ecc2229b377e15ccb5fe5c6ba8800d053935c5900ea75a9df50a524446f4cef566b648fc395e633262cdcaf46547fadfaa46dad373c78a14ecda420500e8c2c72c8d85381b1fa5c6186ef992fefd43a9d382efe376fe178e10f66700a1713f600ee299030bc4999561b2fbd3a84cea3f57a1dfb09d280b2ffbf91955ecb122ebd1b9723e27256cc429bf95f59c6a3d40f684b40c77d0e27bd5794afafc2ce2c873d9e94eea3fc1fa5d045779ce10a9d75afe583f2a7399d0e1018556c3a545017085f00c8b9197bfedb4f6c61f9d6d2254988a23092915443bdac8bd923cdcdb4150f46a39c6f0c0b3321edb569f7d9efa0a7825e3afc5b9078073fa43edd254c6ac947358f25d6c808676788454ed3787b8c7453da66117e1470f7163e9e92670026fca2ba7de3b331f8f3263e95194768b8f812026af9d48c8d3fcd85f34d7220b12172182d9635fb8cc35464e68ea017a300844c247f58cebf953062918f5e2bcf88bee92df93187e1278fda7e3cc05618cd8defd063532ea9aa1682f2909c17624d5f8862b61edde2550627a76faad3b1993bd7973faac1b0f6670e20f5c7574be49cf8a916fd4a4ff89778dc175fee2c10683029f46f7e0bcc67ac3158d03ec01071504a284510c608882bef4f7f0d688420bee26daab822064716c024d4d6087dbc1d3ade45094551c525adf5f12bd7092dd3d448679c16609c7080934651fb0fc2678e25e014866a3497cdddbab979c6428c596e3a52fea4a8050a50c5cc9c406a49d3465aecd82a8a0d137a4c28a0ac100b843c30587b1e03af37ea4163f14d7cbbcae201e8d686e7c2f013c8c563a3c907c607c1a477a19bc387855bc341567865a8f0de3e947a1e3132e522bb85cf7333930c4ad6ac2697dccad4a824e6dc637422f7902fdef0ff952fed3409c5998ad82ab083c3fe336392541a388226324a3634f9c59a5adfe53b49bd2ef65583547e708a2663ba5910ab6fdd05897f5cccb1ca7f0f9e3b4650364f26d2ee39cae3f10249e7d6a624d49a59ac6a16314bf6778a2509a3177ccdeaebd08d1f16cffaca44f736dab8f414945135338fc0c6ad29f37918ac13b341a60df5422cd4eeb6fc049d36f969f2a488e8e5e61aba427f5c08584a89be5f9e7fd82f9a4e6fcdd3fc9d16030778b14d57dbc88f5b6e43488017907052463187fb88278be9e6508878165a5b08287bc4c5e73d7d920d9933efdd8e10280bffe7ea97ff01e8389431de7727044e35abb9bcc399e549b82889f017473e42cad2642cf6123c611cf8decd6df7831d6eab75f3e3a10de62a37b1b76e5fab108752984921f531dc83ab7f6eb58cc785308a4277caa7e9fd7e146d8177a112088b4a348ee72f331e570c4b9d151dadb94952c842c6eb3e353c995345a82027ca2bac4c7c0a04801cb06d228db734e6b99a7f8aede0b227d804b2c7a3e1424285d2506df0abb1245f9f28f6d61d62f824797b6073ffde33033c453e01244aaefc02f11e94d768f34e9eda0061cab2116c8f06765fa4ac05a2cb2bea0ddae31f49593dd7fb4dccf467649b161dc87f2c87b2e2a1078fcf7887f8a8b7179ef76ee1725c1292a3a2f6f7584f268d5d17e10ecdb405f13b5dcc9d28a3dd0424d213dc79c0b8cd360fc185f5c8330e2d479fb960ce819c1738762eae99b3a9b06fdf5aa3566d6606ac67708af43e77bf300323b122161fce7cb87232fb11275f94cb5b004ebb745ced636fcdf147008ec178be2e2226fe6390541afbba806e95a54c8ba949e8f730fbf503cec7727df62be325fd8f3fa0964386a74ffba356867dcf40997fbad3ab0ea87d5c5831372e08a5fcdfe2fbdccdb13aa3bc6cdac0552d01346ac9b2af99d2cc6dcd1f37414b0c205421d68c7840427f259a94518b87d35529e85cf0612f31cc1c72c6f62f0510bdd83d6dd22830815cb42d11c50a97e02b403af489aefcd1fb4d76afa4bcb4d4f0d8d417e5fb7789bdb03ad7ab2ee5a7a19f6e6c34dd21d5ab3b6bfc9f7a1b28d98b8ec7189495c66a30c93e494b9f9d9ae6ebe8c90ac3a2225c7f3712ca040c7707d5671b55a4843e740abee31c06cf580f23990cad1fd064f10663da884e63e30107b90a7f0e41361b9757e25f47cc034291934f1d119ff17112d988ee6518c2bb361f3ccb993de11f3a7f7ee0dca23c6a7895d96095c71f0a53ce6a59e34d02ffcbdbf7857b950b2791c9d9a8d9411031461371e20c01d091b0070aefde03e64a86320c789bd70709072065df6272d64c006e52977cc15f2f92bc2209c06d8defa8734ad113570ad0cf3a6ad87147969028ab5e7eda54e0fcdc24e8e26c9004a5bb9b67888c30d53893b5b0c90662d1f2caf2abbc636bd85b8b3a3975e0f61331a5e4cbd98a2778776655097a5e3a7133c965c26661892dceccdf5c11cacb244cc88cef58da3c2a1b05364eb1c172edea64e8fabef89b7c96c3304b4034e7de26c4288b470aeb6d8d95e368ff5a62405cc1c087418ecfc72ce4ca650fa6e7866310132f665687ce9f0ac683385d44726611a486437800ae6c1478f73d10e0c5ed8d8eb5a8dd4e39520664f6c9edaea9034d87505372df05d919d9ca686951003f546d12d472611bcb4c31769f952a8f90936f2a3c7490dad5d0799d5b0b4698d3db400fe8db0369ae2b3613a9868fad276f6247f6dfbcd46729007299e11743757323872c2f15f89c68b7e53e0f6ec46f6e6e4a005a599ea358caf6fbd527b7f3c8576becffe29072f0ddc6c049361ffb8e9645fb0a5743ea3d5d850e8a1c13afa09c8ef3e7bd3d5ae091e9f3f1f60c5f41523aec2ad68aa0caaaf30386b24bc20249e37248b54bb66e6f5e31e7d5874c93f906ac1db626d889345e832734eecf23d9541d07f800906b2d1605ac40cd714cda1ef30978e34dd71c918745d54c47ce2dfa2ac7b675b82af794fe0d69efe8879a3cd47842403fb6e0ed442dd0afb1bd57065e95a9fb9c30fb3811346d9391d2a38b237464d22ea5d41fdcb858e6c6afd03bc47a56b015544f597afd47b11169b4a1a5b0fa0dbc7d958ff7f7888e790366e8c28cebe3653003a84bdaf1488a89e506942d00a6a8a473a7c341f6b84ba17ae6e6d86162a5c3bdaa586eab73b8611beee7ae5e12222f13e6862dd726c86fd867595214281224a836f65521ac3b5afe1a6848c8ba1a7fc8745684f69bc8faa8dac71dff0e1d557b73f96657a415b5ae0647dd2111d7f1a7e43f28fb062d315ed291d4952d8d2e92aebcbe9967b834e640b5a734c7cc70c73fe0d0d18d96fd3c33f8303394e88425cd53fa33c0b02fc8ecf3c5434d38e87538c8e5eb90b41112e246c0e5cfd5231edf47a76d2c71714498942e5cd6e067960bdff8bad1a4a5020ae1aa4303dcf5280d7d212abef86a3514b3c429c2c48d4c8d6a5ac2353e9f1e5d7ef4e94c1320735f7ca6a18cdb0053ba5ba291c4fd3ffb6b129cda309df89bb979f549cbf3d91b123ceed0864cbaccb75b76b336321e6118b69e067f4ff87104c9ea170d3d5943bc6c15dbfe962bb6cf4715267b51139641170e9996205fe22b4a7d416423d2640783c44865093645a93420bba267e84c7649211d4b6d6c209b052a6d9402b4b7672d7647f794c3765adce8187f6bebb3a139d8d1490854c3da2773e48fa85e5abb31d6dc30cfe838285dcfbad45e937828530545f5c2fa133a35a911fabba747a71f9e6c3823ad17bffffde7be590a81a2077c953c504bc561a08d2fed410e7d9bb820c62b1d7fc3f5145a8d90daf986af52536d728c266560db6a39e2edbc224a9ad449abbcd9dcf3d5c0342902f30db78c4d5652493306b24f049d2ef5f8770c9f7f306c034183be2eddc77871c7f9f7ca95d496351df69032b227c88b8177dc16fe5017e8039916b4c4f7d38ad3e83ab4f5a35401fd13795b32f98cac55bbe11c09572320056677594a24e90996792848797d9407841d2b82968360662493a5e4f594d5ad885b0749643c90c3159a3d95049c10666d2bcfacf1102ba41322aaf75b850da3076e2b23ef2dff0e71d2b13f2771a42a77c2ff465dddd72ad907728faba95baa71005a1856bae8eb638c86cf1ba49a69827fa893952a75edecb83d61a1e44d71368b7b08d454fc5e094d5e6c89ad5c2859b2bc2548ee761500c6d9a985131ea2551258251fb872cb62f4eb308664febccfbb23b3bb900a4c21d3555ffa7ac7c48dcc9ae1acdb7d958b0356055a51d511054c656971e1a46d9ad47718f553cd016b31a9555b74eb56d80fe236d9338eb70660180a9e110af4fd3265e055817f5455b76e1bedf6f6cca7c0ce7ef739f41cbbbfdf6ca21617c325a9b6161900ca4fd43c78a235cdb67ec83d4944eb74e3ce1e8c25f161717ae906d207537103333b1c3c72e5d36d623e3a5539b890f1a56c8632b8a9645450d173785676888d7bdb7021f720020044c076505093acf617c7ca0c058585eabd9da3cab9fd1712395ee0dc5c91ac149561a18df21633eaeda23411b3efed64fd5ab8c47e3449b97c4561820f8be01c4d0a8d291adeef7bd618b5904801361a741a120a14899dbe88abd48ebb209b7ae914", 0xfc0, 0x2, 0x8}, {&(0x7f0000000640)="73b91bebef43", 0x6, 0x1000, 0x3}, {&(0x7f0000000ac0)="bd1c744bebb035e845646e2ac9fd5938f6a4534794035de7683441e9e934fb4ed24186fcf6c505304e9598a5de601ab8fa1c724210b411abd2fd8b03cd4d5ee74b9bc0d0f31c9500f89ba38ea4626669531b35452782a3a023d25669c215aed237e060be9a2778a689b0894ea2d7b9a9834b844d9b408ef4116034a31ced736e2d6904a6a6eee4f40760c86c68b8472711ffb8c6884a25471810a89ebc1f05d7a699d92f2e37280a2b7c22504a1067d5cc0b257bb742a9019e05f8417c0cf726d87193452428aec7069120a9ae6e18bc64ccf3addda4093605bff12dcc0109", 0xdf, 0x239, 0x9}, {&(0x7f0000000c00)="491436d15814b92dfe6c587ef5e9b24e36b177f29ab9ba9e8475428205e35f9ed88822b33434699fb8b2a119efb9ca9fb5533147d9db2c7b23ba6448803fdffbf429f9813722dc7d761a5ae8bcb1869bd52cc278c89b697c04d0cd6ab26a2e19e511839001b2dad0", 0x68, 0x8, 0x58ce}], 0x2a0000) read(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0001"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2401c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) flock(0xffffffffffffffff, 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x503, 0x0) 0s ago: executing program 1 (id=907): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) bind(r2, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) kernel console output (not intermixed with test programs): udit: type=1400 audit(1755636558.176:400): avc: denied { mounton } for pid=5488 comm="syz-executor" path="/root/syzkaller.h6VTQs/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 84.668664][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.673015][ T29] audit: type=1400 audit(1755636558.176:401): avc: denied { mount } for pid=5488 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 84.689043][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.701975][ T29] audit: type=1400 audit(1755636558.176:402): avc: denied { mount } for pid=5488 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 84.730544][ T29] audit: type=1400 audit(1755636558.176:403): avc: denied { mounton } for pid=5488 comm="syz-executor" path="/root/syzkaller.h6VTQs/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 84.757521][ T29] audit: type=1400 audit(1755636558.176:404): avc: denied { mounton } for pid=5488 comm="syz-executor" path="/root/syzkaller.h6VTQs/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 84.785941][ T29] audit: type=1400 audit(1755636558.216:405): avc: denied { mounton } for pid=5488 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.808831][ T29] audit: type=1400 audit(1755636558.216:406): avc: denied { mount } for pid=5488 comm="syz-executor" name="/" dev="gadgetfs" ino=17545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.836130][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843360][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.852682][ T140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.861964][ T140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.886247][ T5542] veth1_vlan: entered promiscuous mode [ 84.897704][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.904818][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.914496][ T5803] syzkaller0: tun_chr_ioctl cmd 35111 [ 84.934355][ T5579] veth0_vlan: entered promiscuous mode [ 84.945170][ T5542] veth0_macvtap: entered promiscuous mode [ 84.954509][ T5542] veth1_macvtap: entered promiscuous mode [ 84.976120][ T5579] veth1_vlan: entered promiscuous mode [ 84.985815][ T5620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.986539][ T1762] IPVS: stop unused estimator thread 0... [ 84.996735][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.035777][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.048869][ T5659] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.062918][ T5659] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.074648][ T5542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.086000][ T5659] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.098791][ T5659] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.119134][ T5579] veth0_macvtap: entered promiscuous mode [ 85.126507][ T2630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.141207][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.157165][ T5579] veth1_macvtap: entered promiscuous mode [ 85.164258][ T2630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.179462][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.201909][ T2630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.230562][ T5579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.251208][ T2630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.283572][ T2630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.321895][ T2630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.357630][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.369631][ T2630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.401731][ T5659] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.422668][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.441892][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.449075][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.488852][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.496056][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.526880][ T5852] netlink: 'syz.2.626': attribute type 153 has an invalid length. [ 85.537047][ T5659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.547709][ T5659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.586605][ T5620] veth0_vlan: entered promiscuous mode [ 85.609678][ T5620] veth1_vlan: entered promiscuous mode [ 85.633398][ T5620] veth0_macvtap: entered promiscuous mode [ 85.658463][ T5620] veth1_macvtap: entered promiscuous mode [ 85.679574][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.694523][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.718427][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.750637][ T268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.771632][ T268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.797101][ T268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.808007][ T5882] loop3: detected capacity change from 0 to 1024 [ 85.824183][ T268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.868266][ T5882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.907293][ T5488] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 85.938040][ T5488] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 85.960550][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 85.976274][ T5488] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.008091][ T5488] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.029741][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.041760][ T5488] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.072884][ T5488] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.085418][ T5659] veth0_vlan: entered promiscuous mode [ 86.099163][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.103905][ T5659] veth1_vlan: entered promiscuous mode [ 86.117436][ T5488] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.148503][ T5659] veth0_macvtap: entered promiscuous mode [ 86.155869][ T5659] veth1_macvtap: entered promiscuous mode [ 86.166987][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.194924][ T5488] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.196772][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.231980][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.245700][ T268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.246925][ T5488] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /2/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.254907][ T268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.294661][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.303144][ T5488] EXT4-fs error (device loop3): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 86.304562][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.339297][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.353503][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.370949][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.408433][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.427161][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.443733][ T5928] hub 6-0:1.0: USB hub found [ 86.449306][ T5928] hub 6-0:1.0: 8 ports detected [ 86.478138][ T5930] loop5: detected capacity change from 0 to 512 [ 86.496140][ T5488] EXT4-fs warning (device loop3): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 86.561899][ T5930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.605505][ T5944] loop2: detected capacity change from 0 to 1015 [ 86.612814][ T5943] netlink: 'syz.4.635': attribute type 153 has an invalid length. [ 86.622958][ T5944] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (507 blocks) [ 86.715526][ T5937] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 86.791052][ T5659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.063139][ T5488] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.105759][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.184655][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.264800][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.425914][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.540622][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 87.540639][ T29] audit: type=1400 audit(1755636561.066:529): avc: denied { read } for pid=6006 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.568245][ T29] audit: type=1400 audit(1755636561.076:530): avc: denied { open } for pid=6006 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.601720][ T12] bridge_slave_1: left allmulticast mode [ 87.607446][ T12] bridge_slave_1: left promiscuous mode [ 87.613246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.631647][ T29] audit: type=1400 audit(1755636561.136:531): avc: denied { mounton } for pid=6006 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 87.653283][ T29] audit: type=1400 audit(1755636561.146:532): avc: denied { module_request } for pid=6006 comm="syz-executor" kmod="netdev-nr7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 87.682532][ T12] bridge_slave_0: left allmulticast mode [ 87.688271][ T12] bridge_slave_0: left promiscuous mode [ 87.694160][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.726178][ T29] audit: type=1400 audit(1755636561.216:533): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 87.747249][ T29] audit: type=1400 audit(1755636561.256:534): avc: denied { sys_module } for pid=6006 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 87.844841][ T29] audit: type=1400 audit(1755636561.376:535): avc: denied { create } for pid=6019 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.864601][ T29] audit: type=1400 audit(1755636561.376:536): avc: denied { write } for pid=6017 comm="syz.4.648" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.887474][ T29] audit: type=1400 audit(1755636561.376:537): avc: denied { ioctl } for pid=6019 comm="syz.2.649" path="socket:[18279]" dev="sockfs" ino=18279 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.938792][ T29] audit: type=1400 audit(1755636561.466:538): avc: denied { create } for pid=6019 comm="syz.2.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 87.963311][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.974593][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.984863][ T12] bond0 (unregistering): Released all slaves [ 88.101897][ T12] hsr_slave_0: left promiscuous mode [ 88.107910][ T12] hsr_slave_1: left promiscuous mode [ 88.129333][ T6033] loop5: detected capacity change from 0 to 764 [ 88.131306][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.143234][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.167638][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.175282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.186442][ T12] veth1_macvtap: left promiscuous mode [ 88.193686][ T12] veth0_macvtap: left promiscuous mode [ 88.199423][ T12] veth1_vlan: left promiscuous mode [ 88.205283][ T12] veth0_vlan: left promiscuous mode [ 88.239833][ T6036] loop4: detected capacity change from 0 to 512 [ 88.255844][ T6036] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.269155][ T6036] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.293804][ T6038] loop2: detected capacity change from 0 to 512 [ 88.313933][ T6038] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.338502][ T6036] EXT4-fs (loop4): 1 truncate cleaned up [ 88.348565][ T6039] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 88.352235][ T6036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.358252][ T2956] IPVS: starting estimator thread 0... [ 88.375968][ T6038] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.654: invalid indirect mapped block 4294967295 (level 0) [ 88.411590][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 88.420679][ T6038] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.654: invalid indirect mapped block 4294967295 (level 1) [ 88.435223][ T12] team0 (unregistering): Port device team_slave_1 removed [ 88.444725][ T5542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.446804][ T6038] EXT4-fs (loop2): 1 orphan inode deleted [ 88.459613][ T6038] EXT4-fs (loop2): 1 truncate cleaned up [ 88.470850][ T12] team0 (unregistering): Port device team_slave_0 removed [ 88.473247][ T6043] IPVS: using max 1968 ests per chain, 98400 per kthread [ 88.481223][ T6038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.534829][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'. [ 88.571664][ T6038] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 88.722395][ T5579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.832542][ T6084] loop2: detected capacity change from 0 to 764 [ 88.865064][ T6091] loop5: detected capacity change from 0 to 764 [ 88.891734][ T6091] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 88.948164][ T6084] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 88.948227][ T4559] IPVS: starting estimator thread 0... [ 88.987703][ T6006] chnl_net:caif_netlink_parms(): no params data found [ 89.050735][ T6101] IPVS: using max 2016 ests per chain, 100800 per kthread [ 89.094552][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.101954][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.115409][ T6006] bridge_slave_0: entered allmulticast mode [ 89.126829][ T6006] bridge_slave_0: entered promiscuous mode [ 89.140835][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.147980][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.155566][ T6006] bridge_slave_1: entered allmulticast mode [ 89.162169][ T6006] bridge_slave_1: entered promiscuous mode [ 89.178132][ T6123] loop5: detected capacity change from 0 to 2048 [ 89.181148][ T6124] loop2: detected capacity change from 0 to 764 [ 89.221450][ T6123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.240267][ T6006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.250654][ T6124] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 89.258735][ T6006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.285662][ T6119] hub 6-0:1.0: USB hub found [ 89.290522][ T6119] hub 6-0:1.0: 8 ports detected [ 89.312060][ T6006] team0: Port device team_slave_0 added [ 89.321195][ T6006] team0: Port device team_slave_1 added [ 89.374618][ T6119] syzkaller0: entered promiscuous mode [ 89.380166][ T6119] syzkaller0: entered allmulticast mode [ 89.402935][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.409956][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.436123][ T6006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.469673][ T6006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.476854][ T6006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.498088][ T6144] netlink: 'syz.2.673': attribute type 153 has an invalid length. [ 89.502912][ T6006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.566268][ T6149] loop4: detected capacity change from 0 to 764 [ 89.595654][ T5659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.632210][ T6006] hsr_slave_0: entered promiscuous mode [ 89.646035][ T6006] hsr_slave_1: entered promiscuous mode [ 89.658662][ T4559] IPVS: starting estimator thread 0... [ 89.662648][ T6149] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 89.694313][ T6156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.774600][ T6154] IPVS: using max 2352 ests per chain, 117600 per kthread [ 89.943536][ T6182] loop4: detected capacity change from 0 to 512 [ 90.023280][ T6182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.039407][ T6182] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.214230][ T6189] loop1: detected capacity change from 0 to 2048 [ 90.266152][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.358686][ T6006] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 90.407977][ T6006] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 90.432991][ T6189] hub 6-0:1.0: USB hub found [ 90.445355][ T6189] hub 6-0:1.0: 8 ports detected [ 90.447440][ T6006] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 90.467493][ T6006] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 90.476120][ T6190] loop4: detected capacity change from 512 to 64 [ 90.517918][ T6189] syzkaller0: entered promiscuous mode [ 90.523722][ T6189] syzkaller0: entered allmulticast mode [ 90.573190][ T6006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.587855][ T6006] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.610352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.617674][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.664873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.672000][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.698022][ T6006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.708564][ T6006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.756666][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.686'. [ 90.771131][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.868576][ T5542] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Out of memory [ 90.886408][ T5542] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 90.894731][ T6006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.916788][ T6228] syzkaller0: entered promiscuous mode [ 90.922450][ T6228] syzkaller0: entered allmulticast mode [ 90.997940][ T6240] loop1: detected capacity change from 0 to 2048 [ 91.074558][ T6240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.134563][ T5542] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 91.206088][ T6240] hub 6-0:1.0: USB hub found [ 91.220599][ T6240] hub 6-0:1.0: 8 ports detected [ 91.246173][ T6006] veth0_vlan: entered promiscuous mode [ 91.286727][ T2630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.348018][ T6006] veth1_vlan: entered promiscuous mode [ 91.385004][ T6279] syzkaller0: entered promiscuous mode [ 91.390730][ T6279] syzkaller0: entered allmulticast mode [ 91.398909][ T6297] process 'syz.5.698' launched './file1' with NULL argv: empty string added [ 91.415153][ T2630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.481241][ T2630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.501434][ T6006] veth0_macvtap: entered promiscuous mode [ 91.512811][ T6006] veth1_macvtap: entered promiscuous mode [ 91.558627][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.575067][ T2630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.605934][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.657599][ T6006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.668712][ T6313] loop5: detected capacity change from 0 to 2048 [ 91.720111][ T1762] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.731543][ T6330] netlink: 'syz.1.705': attribute type 153 has an invalid length. [ 91.740379][ T2630] bridge_slave_1: left allmulticast mode [ 91.746187][ T2630] bridge_slave_1: left promiscuous mode [ 91.752063][ T2630] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.769837][ T6313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.783931][ T2630] bridge_slave_0: left allmulticast mode [ 91.789737][ T2630] bridge_slave_0: left promiscuous mode [ 91.795504][ T2630] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.828295][ T6313] hub 6-0:1.0: USB hub found [ 91.838328][ T6313] hub 6-0:1.0: 8 ports detected [ 91.846412][ T6336] loop2: detected capacity change from 0 to 2048 [ 91.872767][ T6336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.887402][ T2630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.893672][ T6336] hub 6-0:1.0: USB hub found [ 91.901258][ T6336] hub 6-0:1.0: 8 ports detected [ 91.906334][ T2630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.916493][ T2630] bond0 (unregistering): Released all slaves [ 91.930470][ T1762] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.939895][ T1762] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.969390][ T2630] hsr_slave_0: left promiscuous mode [ 91.980577][ T2630] hsr_slave_1: left promiscuous mode [ 91.986428][ T2630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.993920][ T2630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.003266][ T2630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.011161][ T2630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.031568][ T5659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.042306][ T2630] veth1_macvtap: left promiscuous mode [ 92.047915][ T2630] veth0_macvtap: left promiscuous mode [ 92.066531][ T6349] loop5: detected capacity change from 0 to 256 [ 92.068768][ T2630] veth1_vlan: left promiscuous mode [ 92.078781][ T6349] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.090320][ T2630] veth0_vlan: left promiscuous mode [ 92.188265][ T2630] team0 (unregistering): Port device team_slave_1 removed [ 92.198686][ T2630] team0 (unregistering): Port device team_slave_0 removed [ 92.232541][ T1762] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.257277][ T6331] syzkaller0: entered promiscuous mode [ 92.263073][ T6331] syzkaller0: entered allmulticast mode [ 92.408084][ T5579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.490216][ T6288] chnl_net:caif_netlink_parms(): no params data found [ 92.528314][ T2630] IPVS: stop unused estimator thread 0... [ 92.615938][ T6401] loop1: detected capacity change from 0 to 764 [ 92.643712][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.651237][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.665423][ T6288] bridge_slave_0: entered allmulticast mode [ 92.672272][ T6288] bridge_slave_0: entered promiscuous mode [ 92.679176][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.686408][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.693883][ T6288] bridge_slave_1: entered allmulticast mode [ 92.700717][ T6288] bridge_slave_1: entered promiscuous mode [ 92.822685][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.838707][ T6421] loop7: detected capacity change from 0 to 1024 [ 92.872861][ T6401] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 92.880213][ T4559] IPVS: starting estimator thread 0... [ 92.901631][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.926499][ T6419] loop2: detected capacity change from 0 to 2048 [ 92.949169][ T6421] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 92.960110][ T6421] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 92.983999][ T6419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.996461][ T6425] IPVS: using max 2352 ests per chain, 117600 per kthread [ 93.013706][ T6434] netlink: 'syz.1.717': attribute type 153 has an invalid length. [ 93.043532][ T6288] team0: Port device team_slave_0 added [ 93.046051][ T6421] JBD2: no valid journal superblock found [ 93.050390][ T6288] team0: Port device team_slave_1 added [ 93.055097][ T6421] EXT4-fs (loop7): Could not load journal inode [ 93.064390][ T6419] hub 6-0:1.0: USB hub found [ 93.093302][ T6419] hub 6-0:1.0: 8 ports detected [ 93.134267][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.141484][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.167791][ T6288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.183205][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.190243][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.216476][ T6288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.230895][ T6414] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 93.265546][ T6288] hsr_slave_0: entered promiscuous mode [ 93.281468][ T6288] hsr_slave_1: entered promiscuous mode [ 93.290751][ T5579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.292917][ T6288] debugfs: 'hsr0' already exists in 'hsr' [ 93.305623][ T6288] Cannot create hsr debugfs directory [ 93.384184][ T6466] loop2: detected capacity change from 0 to 512 [ 93.427920][ T6466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 93.483533][ T6466] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.628502][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 93.628519][ T29] audit: type=1326 audit(1755636567.156:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801566ebe9 code=0x7ffc0000 [ 93.632376][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.7.724'. [ 93.634998][ T29] audit: type=1326 audit(1755636567.156:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801566ebe9 code=0x7ffc0000 [ 93.662913][ T6503] ip6tnl1: entered allmulticast mode [ 93.667246][ T29] audit: type=1326 audit(1755636567.156:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f801566ebe9 code=0x7ffc0000 [ 93.719020][ T29] audit: type=1326 audit(1755636567.156:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801566ebe9 code=0x7ffc0000 [ 93.742616][ T29] audit: type=1326 audit(1755636567.156:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f801566ebe9 code=0x7ffc0000 [ 93.766168][ T6500] loop2: detected capacity change from 512 to 64 [ 93.798015][ T29] audit: type=1400 audit(1755636567.226:665): avc: denied { read } for pid=6502 comm="syz.7.724" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.821471][ T29] audit: type=1400 audit(1755636567.226:666): avc: denied { open } for pid=6502 comm="syz.7.724" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.845359][ T29] audit: type=1400 audit(1755636567.226:667): avc: denied { ioctl } for pid=6502 comm="syz.7.724" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.870880][ T29] audit: type=1326 audit(1755636567.226:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801566ebe9 code=0x7ffc0000 [ 93.894229][ T29] audit: type=1326 audit(1755636567.226:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6502 comm="syz.7.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f801566ebe9 code=0x7ffc0000 [ 94.044733][ T6288] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 94.074066][ T6288] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 94.083328][ T6539] loop7: detected capacity change from 0 to 764 [ 94.094485][ T6288] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 94.110453][ T6529] loop1: detected capacity change from 0 to 2048 [ 94.123580][ T6288] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 94.124697][ T4559] IPVS: starting estimator thread 0... [ 94.173779][ T6529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.221050][ T6542] IPVS: using max 2304 ests per chain, 115200 per kthread [ 94.227656][ T6529] hub 6-0:1.0: USB hub found [ 94.237592][ T6288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.249724][ T6288] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.264223][ T6529] hub 6-0:1.0: 8 ports detected [ 94.277510][ T5579] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Out of memory [ 94.290311][ T6560] netlink: 20 bytes leftover after parsing attributes in process `syz.7.730'. [ 94.302297][ T268] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.309473][ T268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.326049][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.333177][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.343362][ T5579] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 94.447409][ T6288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.452454][ T6571] loop7: detected capacity change from 0 to 1024 [ 94.485986][ T6571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.512698][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.520152][ T6006] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.548574][ T6006] EXT4-fs error (device loop7): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.576352][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 94.604299][ T5579] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 94.610234][ T6006] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.639561][ T6006] EXT4-fs error (device loop7): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.664432][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 94.676586][ T6006] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.687559][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.724198][ T1762] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.737341][ T6006] EXT4-fs error (device loop7): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.759035][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 94.785213][ T6006] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.818397][ T1762] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.860128][ T6006] EXT4-fs error (device loop7): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 94.962286][ T1762] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.974410][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 95.008720][ T6006] EXT4-fs error (device loop7): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /10/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 95.050198][ T1762] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.080723][ T6006] EXT4-fs error (device loop7): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 95.120232][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 95.133258][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 95.152742][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 95.170124][ T6288] veth0_vlan: entered promiscuous mode [ 95.184434][ T6288] veth1_vlan: entered promiscuous mode [ 95.192644][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 95.226583][ T6288] veth0_macvtap: entered promiscuous mode [ 95.238276][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 95.260720][ T6006] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 95.330269][ T6288] veth1_macvtap: entered promiscuous mode [ 95.343890][ T1762] bridge_slave_1: left allmulticast mode [ 95.349626][ T1762] bridge_slave_1: left promiscuous mode [ 95.355535][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.364764][ T1762] bridge_slave_0: left allmulticast mode [ 95.370466][ T1762] bridge_slave_0: left promiscuous mode [ 95.376325][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.495838][ T1762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.507002][ T1762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.517118][ T1762] bond0 (unregistering): Released all slaves [ 95.592236][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.623067][ T1762] hsr_slave_0: left promiscuous mode [ 95.631563][ T1762] hsr_slave_1: left promiscuous mode [ 95.643920][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.651386][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.667999][ T6687] loop5: detected capacity change from 0 to 512 [ 95.678881][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.686493][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.701289][ T6006] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.714964][ T6687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 95.727808][ T6687] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.729317][ T1762] veth1_macvtap: left promiscuous mode [ 95.753896][ T1762] veth0_macvtap: left promiscuous mode [ 95.759591][ T1762] veth1_vlan: left promiscuous mode [ 95.765188][ T1762] veth0_vlan: left promiscuous mode [ 95.811126][ T6687] loop5: detected capacity change from 512 to 64 [ 95.862304][ T5659] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Out of memory [ 95.895413][ T5659] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 95.935901][ T1762] team0 (unregistering): Port device team_slave_1 removed [ 95.966323][ T1762] team0 (unregistering): Port device team_slave_0 removed [ 96.033639][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.084197][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.117223][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.138064][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.169472][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 96.194740][ T5659] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.204365][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.275245][ T6738] loop1: detected capacity change from 0 to 512 [ 96.302150][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.696'. [ 96.323088][ T6738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.351850][ T6738] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.396437][ T1762] IPVS: stop unused estimator thread 0... [ 96.402737][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.410006][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.418201][ T6738] loop1: detected capacity change from 512 to 64 [ 96.434039][ T6602] bridge_slave_0: entered allmulticast mode [ 96.440965][ T6602] bridge_slave_0: entered promiscuous mode [ 96.448282][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.455429][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.462820][ T6602] bridge_slave_1: entered allmulticast mode [ 96.470028][ T6602] bridge_slave_1: entered promiscuous mode [ 96.493746][ T5620] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Out of memory [ 96.508746][ T5620] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 96.531957][ T6714] chnl_net:caif_netlink_parms(): no params data found [ 96.546128][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.566390][ T6755] loop8: detected capacity change from 0 to 512 [ 96.575135][ T1762] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.596467][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.633814][ T6755] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 96.655330][ T6755] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.661531][ T6602] team0: Port device team_slave_0 added [ 96.684680][ T1762] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.708088][ T6602] team0: Port device team_slave_1 added [ 96.740772][ T6755] loop8: detected capacity change from 512 to 64 [ 96.761970][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.769137][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.796015][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.811337][ T1762] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.824615][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 96.824713][ T6288] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Out of memory [ 96.843303][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.850392][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.857905][ T6714] bridge_slave_0: entered allmulticast mode [ 96.864282][ T6288] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 96.876942][ T6714] bridge_slave_0: entered promiscuous mode [ 96.891986][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.899419][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.908378][ T6714] bridge_slave_1: entered allmulticast mode [ 96.918272][ T6714] bridge_slave_1: entered promiscuous mode [ 96.941787][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.948858][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.974940][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.994015][ T1762] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.032187][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.074789][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.108396][ T6602] hsr_slave_0: entered promiscuous mode [ 97.121230][ T6602] hsr_slave_1: entered promiscuous mode [ 97.127260][ T6602] debugfs: 'hsr0' already exists in 'hsr' [ 97.133055][ T6602] Cannot create hsr debugfs directory [ 97.167595][ T6714] team0: Port device team_slave_0 added [ 97.176614][ T6714] team0: Port device team_slave_1 added [ 97.197775][ T6746] chnl_net:caif_netlink_parms(): no params data found [ 97.221434][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.228421][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.254586][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.278226][ T1762] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.289751][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.296958][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.323232][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.375231][ T1762] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.446874][ T1762] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.458779][ T6746] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.466105][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.475757][ T6746] bridge_slave_0: entered allmulticast mode [ 97.482613][ T6746] bridge_slave_0: entered promiscuous mode [ 97.491921][ T6714] hsr_slave_0: entered promiscuous mode [ 97.498105][ T6714] hsr_slave_1: entered promiscuous mode [ 97.504310][ T6714] debugfs: 'hsr0' already exists in 'hsr' [ 97.510062][ T6714] Cannot create hsr debugfs directory [ 97.520689][ T6746] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.527784][ T6746] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.535150][ T6746] bridge_slave_1: entered allmulticast mode [ 97.542087][ T6746] bridge_slave_1: entered promiscuous mode [ 97.582228][ T1762] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.604528][ T6746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.623289][ T6746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.696888][ T6746] team0: Port device team_slave_0 added [ 97.706819][ T6746] team0: Port device team_slave_1 added [ 97.735067][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.742203][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.768212][ T6746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.786214][ T6787] chnl_net:caif_netlink_parms(): no params data found [ 97.801927][ T6746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.808921][ T6746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.835185][ T6746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.903613][ T1762] bridge_slave_1: left allmulticast mode [ 97.909337][ T1762] bridge_slave_1: left promiscuous mode [ 97.915107][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.923839][ T1762] bridge_slave_0: left allmulticast mode [ 97.929521][ T1762] bridge_slave_0: left promiscuous mode [ 97.935287][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.944054][ T1762] bridge_slave_1: left allmulticast mode [ 97.949717][ T1762] bridge_slave_1: left promiscuous mode [ 97.955449][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.963291][ T1762] bridge_slave_0: left allmulticast mode [ 97.968985][ T1762] bridge_slave_0: left promiscuous mode [ 97.974691][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.983074][ T6288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 98.105487][ T1762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.115290][ T1762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.125226][ T1762] bond0 (unregistering): Released all slaves [ 98.193288][ T1762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.203336][ T1762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.213227][ T1762] bond0 (unregistering): Released all slaves [ 98.237936][ T6746] hsr_slave_0: entered promiscuous mode [ 98.244231][ T6746] hsr_slave_1: entered promiscuous mode [ 98.250188][ T6746] debugfs: 'hsr0' already exists in 'hsr' [ 98.256190][ T6746] Cannot create hsr debugfs directory [ 98.319778][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.327012][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.335924][ T6787] bridge_slave_0: entered allmulticast mode [ 98.343108][ T6787] bridge_slave_0: entered promiscuous mode [ 98.350448][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.357813][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.365531][ T6787] bridge_slave_1: entered allmulticast mode [ 98.372418][ T6787] bridge_slave_1: entered promiscuous mode [ 98.391186][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.412791][ T1762] hsr_slave_0: left promiscuous mode [ 98.418837][ T1762] hsr_slave_1: left promiscuous mode [ 98.424721][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.432361][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.439954][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.447557][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.456909][ T1762] hsr_slave_0: left promiscuous mode [ 98.462674][ T1762] hsr_slave_1: left promiscuous mode [ 98.468202][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.475710][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.483438][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.490972][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.503631][ T1762] veth1_macvtap: left promiscuous mode [ 98.509160][ T1762] veth0_macvtap: left promiscuous mode [ 98.514946][ T1762] veth1_vlan: left promiscuous mode [ 98.520185][ T1762] veth0_vlan: left promiscuous mode [ 98.526126][ T1762] veth1_macvtap: left promiscuous mode [ 98.531700][ T1762] veth0_macvtap: left promiscuous mode [ 98.537272][ T1762] veth1_vlan: left promiscuous mode [ 98.542634][ T1762] veth0_vlan: left promiscuous mode [ 98.643001][ T1762] team0 (unregistering): Port device team_slave_1 removed [ 98.653285][ T1762] team0 (unregistering): Port device team_slave_0 removed [ 98.709741][ T1762] team0 (unregistering): Port device team_slave_1 removed [ 98.719918][ T1762] team0 (unregistering): Port device team_slave_0 removed [ 98.756350][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.792096][ T6787] team0: Port device team_slave_0 added [ 98.810173][ T6787] team0: Port device team_slave_1 added [ 98.832804][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.840059][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.866064][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.877893][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.885004][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.911086][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.933188][ T6602] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 98.943608][ T6602] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 98.953428][ T6602] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 98.963671][ T6602] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 98.995917][ T6787] hsr_slave_0: entered promiscuous mode [ 99.002271][ T6787] hsr_slave_1: entered promiscuous mode [ 99.093448][ T6839] chnl_net:caif_netlink_parms(): no params data found [ 99.125576][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.155331][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.198812][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.206199][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.216645][ T6839] bridge_slave_0: entered allmulticast mode [ 99.223372][ T6839] bridge_slave_0: entered promiscuous mode [ 99.233582][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.240747][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.253385][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.260727][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.268095][ T6839] bridge_slave_1: entered allmulticast mode [ 99.274669][ T6839] bridge_slave_1: entered promiscuous mode [ 99.304735][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.311872][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.322247][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.352015][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.365106][ T6602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.396587][ T6839] team0: Port device team_slave_0 added [ 99.414895][ T1762] IPVS: stop unused estimator thread 0... [ 99.422051][ T6839] team0: Port device team_slave_1 added [ 99.430132][ T1762] IPVS: stop unused estimator thread 0... [ 99.460664][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.467775][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.494226][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.510373][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.517628][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.543929][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.578101][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.588624][ T6839] hsr_slave_0: entered promiscuous mode [ 99.596995][ T6839] hsr_slave_1: entered promiscuous mode [ 99.605164][ T6839] debugfs: 'hsr0' already exists in 'hsr' [ 99.611636][ T6839] Cannot create hsr debugfs directory [ 99.644094][ T1762] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.689621][ T6746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.704600][ T1762] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.716195][ T6746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.725643][ T6746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.737586][ T6746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.780098][ T1762] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.860788][ T6746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.875548][ T1762] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.905239][ T6746] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.918332][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.925529][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.940777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.947923][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.960679][ T6602] veth0_vlan: entered promiscuous mode [ 99.997971][ T1762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.013319][ T6602] veth1_vlan: entered promiscuous mode [ 100.068956][ T1762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.086084][ T6602] veth0_macvtap: entered promiscuous mode [ 100.097651][ T6714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.112081][ T6714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.127617][ T1762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.140795][ T6714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.150045][ T6714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.165915][ T6602] veth1_macvtap: entered promiscuous mode [ 100.183519][ T6746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.194278][ T1762] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.210417][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.231872][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.271377][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.280234][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.332099][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.358959][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.368244][ T1762] bridge_slave_1: left allmulticast mode [ 100.373974][ T1762] bridge_slave_1: left promiscuous mode [ 100.379830][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.398499][ T1762] bridge_slave_0: left allmulticast mode [ 100.404353][ T1762] bridge_slave_0: left promiscuous mode [ 100.410171][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.425739][ T1762] bridge_slave_1: left allmulticast mode [ 100.431521][ T1762] bridge_slave_1: left promiscuous mode [ 100.437288][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.448536][ T6990] loop6: detected capacity change from 0 to 256 [ 100.459692][ T6990] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.477170][ T1762] bridge_slave_0: left allmulticast mode [ 100.482948][ T1762] bridge_slave_0: left promiscuous mode [ 100.488740][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.635672][ T1762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.646673][ T1762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.658418][ T1762] bond0 (unregistering): Released all slaves [ 100.717469][ T1762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.728665][ T1762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.740326][ T1762] bond0 (unregistering): Released all slaves [ 100.757779][ T6714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.824213][ T1762] hsr_slave_0: left promiscuous mode [ 100.832250][ T1762] hsr_slave_1: left promiscuous mode [ 100.838157][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.845627][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.854222][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.862091][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.874250][ T1762] hsr_slave_0: left promiscuous mode [ 100.880065][ T1762] hsr_slave_1: left promiscuous mode [ 100.886432][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.894079][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.904430][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.912215][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.928429][ T1762] veth1_macvtap: left promiscuous mode [ 100.934108][ T1762] veth0_macvtap: left promiscuous mode [ 100.939979][ T1762] veth1_vlan: left promiscuous mode [ 100.945860][ T1762] veth0_vlan: left promiscuous mode [ 100.952154][ T1762] veth1_macvtap: left promiscuous mode [ 100.957787][ T1762] veth0_macvtap: left promiscuous mode [ 100.963737][ T1762] veth1_vlan: left promiscuous mode [ 100.969112][ T1762] veth0_vlan: left promiscuous mode [ 101.111015][ T1762] team0 (unregistering): Port device team_slave_1 removed [ 101.123106][ T1762] team0 (unregistering): Port device team_slave_0 removed [ 101.196752][ T1762] team0 (unregistering): Port device team_slave_1 removed [ 101.210218][ T1762] team0 (unregistering): Port device team_slave_0 removed [ 101.283600][ T6714] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.314686][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.322178][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.354236][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.361466][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.405594][ T7102] loop6: detected capacity change from 0 to 512 [ 101.408168][ T6787] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 101.431579][ T7102] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 101.448414][ T7102] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.476764][ T6787] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 101.492328][ T6787] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 101.504107][ T6787] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 101.530776][ T7102] loop6: detected capacity change from 512 to 64 [ 101.577085][ T6746] veth0_vlan: entered promiscuous mode [ 101.592052][ T6839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.592680][ T6602] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Out of memory [ 101.608647][ T6602] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 101.611836][ T6839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.630993][ T6839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.643002][ T6746] veth1_vlan: entered promiscuous mode [ 101.655554][ T6839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.679625][ T6714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.703581][ T6746] veth0_macvtap: entered promiscuous mode [ 101.713796][ T6746] veth1_macvtap: entered promiscuous mode [ 101.733998][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.756977][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.765830][ T6746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.781091][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.805471][ T1762] IPVS: stop unused estimator thread 0... [ 101.824451][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.839294][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.847320][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.868711][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.875819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.903118][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.913958][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.921101][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.958159][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.978632][ T6714] veth0_vlan: entered promiscuous mode [ 101.987470][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.994637][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.007365][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.011439][ T7152] netlink: 'syz.5.753': attribute type 153 has an invalid length. [ 102.014518][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.042410][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.075614][ T6714] veth1_vlan: entered promiscuous mode [ 102.111611][ T6714] veth0_macvtap: entered promiscuous mode [ 102.131549][ T6714] veth1_macvtap: entered promiscuous mode [ 102.152500][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.175747][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.195191][ T6839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.205759][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.218168][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.238117][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.266652][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.287430][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.401852][ T6839] veth0_vlan: entered promiscuous mode [ 102.424807][ T6839] veth1_vlan: entered promiscuous mode [ 102.467759][ T6839] veth0_macvtap: entered promiscuous mode [ 102.477805][ T6839] veth1_macvtap: entered promiscuous mode [ 102.487864][ T7203] loop0: detected capacity change from 0 to 764 [ 102.519049][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.557838][ T6839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.575187][ T7203] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 102.582458][ T4556] IPVS: starting estimator thread 0... [ 102.588119][ T1762] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.605656][ T6787] veth0_vlan: entered promiscuous mode [ 102.613777][ T1762] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.637483][ T6787] veth1_vlan: entered promiscuous mode [ 102.653165][ T1762] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.665356][ T1762] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.680769][ T7215] IPVS: using max 2352 ests per chain, 117600 per kthread [ 102.700346][ T6787] veth0_macvtap: entered promiscuous mode [ 102.718121][ T6787] veth1_macvtap: entered promiscuous mode [ 102.734055][ T6602] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 102.754090][ T2630] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.766500][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 102.766517][ T29] audit: type=1400 audit(1755636576.296:775): avc: denied { setopt } for pid=7224 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.782168][ T7225] loop0: detected capacity change from 0 to 2048 [ 102.801621][ T29] audit: type=1400 audit(1755636576.326:776): avc: denied { bind } for pid=7224 comm="syz.3.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.821281][ T29] audit: type=1400 audit(1755636576.326:777): avc: denied { name_bind } for pid=7224 comm="syz.3.768" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 102.843227][ T29] audit: type=1400 audit(1755636576.326:778): avc: denied { node_bind } for pid=7224 comm="syz.3.768" saddr=127.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 102.865497][ T29] audit: type=1400 audit(1755636576.326:779): avc: denied { write } for pid=7224 comm="syz.3.768" laddr=127.0.0.1 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.878347][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.897438][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.929754][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.953962][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.968744][ T7225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.993193][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.047458][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.062271][ T7225] hub 6-0:1.0: USB hub found [ 103.081812][ T7225] hub 6-0:1.0: 8 ports detected [ 103.135647][ T7242] loop3: detected capacity change from 0 to 2048 [ 103.149656][ T7257] netlink: 20 bytes leftover after parsing attributes in process `syz.5.778'. [ 103.167626][ T6714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.187562][ T7257] hsr_slave_1 (unregistering): left promiscuous mode [ 103.190285][ T7252] loop9: detected capacity change from 0 to 2048 [ 103.221295][ T7242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.256683][ T7252] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.276897][ T7268] loop0: detected capacity change from 0 to 764 [ 103.285587][ T2630] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.301981][ T7252] hub 6-0:1.0: USB hub found [ 103.307496][ T7252] hub 6-0:1.0: 8 ports detected [ 103.338057][ T7268] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 103.364354][ T6787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.376798][ T2630] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.413387][ T6839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.434057][ T2630] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.568372][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.782'. [ 103.577426][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 103.620982][ T29] audit: type=1400 audit(1755636577.136:780): avc: denied { create } for pid=7288 comm="syz.5.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 103.755298][ T7258] chnl_net:caif_netlink_parms(): no params data found [ 103.777924][ T7313] tipc: Started in network mode [ 103.783050][ T7313] tipc: Node identity d2d76640bbff, cluster identity 4711 [ 103.790312][ T7313] tipc: Enabled bearer , priority 0 [ 103.807264][ T2630] bridge_slave_1: left allmulticast mode [ 103.810064][ T7316] loop5: detected capacity change from 0 to 512 [ 103.813051][ T2630] bridge_slave_1: left promiscuous mode [ 103.813168][ T2630] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.834240][ T2630] bridge_slave_0: left allmulticast mode [ 103.840006][ T2630] bridge_slave_0: left promiscuous mode [ 103.841853][ T7316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 103.845858][ T2630] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.866732][ T7316] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.920764][ T7316] loop5: detected capacity change from 512 to 64 [ 103.938671][ T6746] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Out of memory [ 103.948521][ T6746] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 103.963086][ T2630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.982018][ T2630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.992116][ T2630] bond0 (unregistering): Released all slaves [ 104.016529][ T7320] tipc: Resetting bearer [ 104.044592][ T7311] tipc: Disabling bearer [ 104.059279][ T2630] hsr_slave_0: left promiscuous mode [ 104.065507][ T2630] hsr_slave_1: left promiscuous mode [ 104.071902][ T2630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.079332][ T2630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.089656][ T2630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.097207][ T2630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.109865][ T2630] veth1_macvtap: left promiscuous mode [ 104.118808][ T2630] veth0_macvtap: left promiscuous mode [ 104.127797][ T2630] veth1_vlan: left promiscuous mode [ 104.133171][ T2630] veth0_vlan: left promiscuous mode [ 104.163145][ T6746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.221936][ T7329] loop9: detected capacity change from 0 to 2048 [ 104.230369][ T7331] netlink: 'syz.0.792': attribute type 153 has an invalid length. [ 104.239360][ T2630] team0 (unregistering): Port device team_slave_1 removed [ 104.262704][ T2630] team0 (unregistering): Port device team_slave_0 removed [ 104.271095][ T7329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.346080][ T7329] hub 6-0:1.0: USB hub found [ 104.353752][ T7329] hub 6-0:1.0: 8 ports detected [ 104.395597][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.402860][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.412077][ T7258] bridge_slave_0: entered allmulticast mode [ 104.419241][ T7258] bridge_slave_0: entered promiscuous mode [ 104.427344][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.434584][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.443767][ T7258] bridge_slave_1: entered allmulticast mode [ 104.468554][ T7258] bridge_slave_1: entered promiscuous mode [ 104.504289][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.529365][ T6787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.544742][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.592490][ T29] audit: type=1400 audit(1755636578.116:781): avc: denied { create } for pid=7362 comm="syz.9.799" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.613268][ T29] audit: type=1400 audit(1755636578.116:782): avc: denied { read } for pid=7362 comm="syz.9.799" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.635528][ T29] audit: type=1400 audit(1755636578.116:783): avc: denied { open } for pid=7362 comm="syz.9.799" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.669477][ T7258] team0: Port device team_slave_0 added [ 104.687101][ T7258] team0: Port device team_slave_1 added [ 104.709815][ T7366] tipc: Started in network mode [ 104.714792][ T7366] tipc: Node identity 96aed8bd652e, cluster identity 4711 [ 104.722079][ T7366] tipc: Enabled bearer , priority 0 [ 104.791832][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.799096][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.825060][ T7258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.845328][ T29] audit: type=1400 audit(1755636578.366:784): avc: denied { unlink } for pid=6787 comm="syz-executor" name="file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 104.869977][ T7258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.877080][ T7258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.903284][ T7258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.926662][ T7373] tipc: Resetting bearer [ 104.946838][ T7365] tipc: Disabling bearer [ 104.988506][ T7258] hsr_slave_0: entered promiscuous mode [ 104.996354][ T7258] hsr_slave_1: entered promiscuous mode [ 105.003179][ T7258] debugfs: 'hsr0' already exists in 'hsr' [ 105.009082][ T7258] Cannot create hsr debugfs directory [ 105.035872][ T2630] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.175163][ T2630] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.232432][ T7403] FAULT_INJECTION: forcing a failure. [ 105.232432][ T7403] name failslab, interval 1, probability 0, space 0, times 1 [ 105.245197][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.3.806 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.245227][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.245285][ T7403] Call Trace: [ 105.245292][ T7403] [ 105.245301][ T7403] __dump_stack+0x1d/0x30 [ 105.245324][ T7403] dump_stack_lvl+0xe8/0x140 [ 105.245345][ T7403] dump_stack+0x15/0x1b [ 105.245362][ T7403] should_fail_ex+0x265/0x280 [ 105.245449][ T7403] should_failslab+0x8c/0xb0 [ 105.245476][ T7403] __kvmalloc_node_noprof+0x123/0x4e0 [ 105.245546][ T7403] ? io_pin_pages+0x9a/0x170 [ 105.245573][ T7403] ? __kmalloc_noprof+0x1dd/0x3e0 [ 105.245632][ T7403] io_pin_pages+0x9a/0x170 [ 105.245659][ T7403] io_sqe_buffer_register+0x184/0x1430 [ 105.245692][ T7403] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 105.245731][ T7403] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 105.245768][ T7403] io_sqe_buffers_register+0x2ac/0x530 [ 105.245806][ T7403] io_register_rsrc+0x1b2/0x1e0 [ 105.245835][ T7403] __se_sys_io_uring_register+0x9e5/0xeb0 [ 105.245864][ T7403] ? fput+0x8f/0xc0 [ 105.245919][ T7403] ? ksys_write+0x192/0x1a0 [ 105.245959][ T7403] __x64_sys_io_uring_register+0x55/0x70 [ 105.245993][ T7403] x64_sys_call+0x18a3/0x2ff0 [ 105.246018][ T7403] do_syscall_64+0xd2/0x200 [ 105.246050][ T7403] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.246080][ T7403] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.246154][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.246181][ T7403] RIP: 0033:0x7f2a1e84ebe9 [ 105.246199][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.246289][ T7403] RSP: 002b:00007f2a1d2b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 105.246357][ T7403] RAX: ffffffffffffffda RBX: 00007f2a1ea75fa0 RCX: 00007f2a1e84ebe9 [ 105.246375][ T7403] RDX: 0000200000000480 RSI: 000000000000000f RDI: 0000000000000004 [ 105.246390][ T7403] RBP: 00007f2a1d2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.246407][ T7403] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 105.246423][ T7403] R13: 00007f2a1ea76038 R14: 00007f2a1ea75fa0 R15: 00007ffe8863b6b8 [ 105.246445][ T7403] [ 105.483746][ T2630] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.535917][ T7336] chnl_net:caif_netlink_parms(): no params data found [ 105.593287][ T2630] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.627015][ T7419] loop3: detected capacity change from 0 to 512 [ 105.634384][ T7419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.667409][ T7419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 105.694843][ T7419] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.754895][ T6839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.786582][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.793828][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.804977][ T7336] bridge_slave_0: entered allmulticast mode [ 105.813304][ T7336] bridge_slave_0: entered promiscuous mode [ 105.825642][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.832775][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.840109][ T7336] bridge_slave_1: entered allmulticast mode [ 105.848105][ T7336] bridge_slave_1: entered promiscuous mode [ 105.872794][ T7432] tipc: Enabling of bearer rejected, failed to enable media [ 105.893608][ T7336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.913217][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 105.923489][ T7336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.932753][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 105.943486][ T7441] tipc: Can't bind to reserved service type 0 [ 105.949616][ T7441] FAULT_INJECTION: forcing a failure. [ 105.949616][ T7441] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.962897][ T7441] CPU: 1 UID: 0 PID: 7441 Comm: syz.0.816 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.963004][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.963016][ T7441] Call Trace: [ 105.963022][ T7441] [ 105.963029][ T7441] __dump_stack+0x1d/0x30 [ 105.963050][ T7441] dump_stack_lvl+0xe8/0x140 [ 105.963073][ T7441] dump_stack+0x15/0x1b [ 105.963090][ T7441] should_fail_ex+0x265/0x280 [ 105.963142][ T7441] should_fail+0xb/0x20 [ 105.963230][ T7441] should_fail_usercopy+0x1a/0x20 [ 105.963256][ T7441] _copy_to_user+0x20/0xa0 [ 105.963287][ T7441] simple_read_from_buffer+0xb5/0x130 [ 105.963336][ T7441] proc_fail_nth_read+0x10e/0x150 [ 105.963368][ T7441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.963394][ T7441] vfs_read+0x1a8/0x770 [ 105.963414][ T7441] ? __rcu_read_unlock+0x4f/0x70 [ 105.963441][ T7441] ? __fget_files+0x184/0x1c0 [ 105.963541][ T7441] ? __sys_bind+0x223/0x2a0 [ 105.963579][ T7441] ksys_read+0xda/0x1a0 [ 105.963606][ T7441] __x64_sys_read+0x40/0x50 [ 105.963632][ T7441] x64_sys_call+0x27bc/0x2ff0 [ 105.963703][ T7441] do_syscall_64+0xd2/0x200 [ 105.963735][ T7441] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.963767][ T7441] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.963794][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.963878][ T7441] RIP: 0033:0x7f4b3602d5fc [ 105.963896][ T7441] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.963919][ T7441] RSP: 002b:00007f4b34a97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.963941][ T7441] RAX: ffffffffffffffda RBX: 00007f4b36255fa0 RCX: 00007f4b3602d5fc [ 105.963954][ T7441] RDX: 000000000000000f RSI: 00007f4b34a970a0 RDI: 0000000000000008 [ 105.963966][ T7441] RBP: 00007f4b34a97090 R08: 0000000000000000 R09: 0000000000000000 [ 105.963977][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.964068][ T7441] R13: 00007f4b36256038 R14: 00007f4b36255fa0 R15: 00007ffc7b937938 [ 105.964086][ T7441] [ 106.182425][ T2630] bridge_slave_1: left allmulticast mode [ 106.188179][ T2630] bridge_slave_1: left promiscuous mode [ 106.194052][ T2630] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.201152][ T7447] netlink: 'syz.0.817': attribute type 1 has an invalid length. [ 106.210049][ T2630] bridge_slave_0: left allmulticast mode [ 106.215941][ T2630] bridge_slave_0: left promiscuous mode [ 106.222240][ T2630] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.264136][ T7449] can: request_module (can-proto-3) failed. [ 106.270412][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 106.302929][ T2630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.312956][ T2630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.322486][ T2630] bond0 (unregistering): Released all slaves [ 106.339436][ T7336] team0: Port device team_slave_0 added [ 106.346478][ T7336] team0: Port device team_slave_1 added [ 106.360197][ T7451] dummy0: entered promiscuous mode [ 106.383409][ T2630] hsr_slave_0: left promiscuous mode [ 106.389953][ T2630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.397526][ T2630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.407177][ T7454] netlink: 'syz.3.818': attribute type 153 has an invalid length. [ 106.417094][ T2630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.425101][ T2630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.437527][ T2630] veth1_macvtap: left promiscuous mode [ 106.444386][ T2630] veth0_macvtap: left promiscuous mode [ 106.458901][ T2630] veth1_vlan: left promiscuous mode [ 106.466129][ T2630] veth0_vlan: left promiscuous mode [ 106.479515][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 106.490065][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 106.581262][ T2630] team0 (unregistering): Port device team_slave_1 removed [ 106.592924][ T2630] team0 (unregistering): Port device team_slave_0 removed [ 106.633987][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.641036][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.667126][ T7336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.679469][ T7478] tipc: Enabling of bearer rejected, failed to enable media [ 106.697942][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.704989][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.731131][ T7336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.772724][ T7336] hsr_slave_0: entered promiscuous mode [ 106.779005][ T7336] hsr_slave_1: entered promiscuous mode [ 106.785306][ T7336] debugfs: 'hsr0' already exists in 'hsr' [ 106.791090][ T7336] Cannot create hsr debugfs directory [ 106.809285][ T7258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.832795][ T7258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.842560][ T7258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.856877][ T7258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.863879][ T7487] loop0: detected capacity change from 0 to 512 [ 106.871929][ T7487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.883899][ T7487] EXT4-fs (loop0): 1 truncate cleaned up [ 106.890417][ T7487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.947374][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.959978][ T7258] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.969446][ T2630] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.976760][ T2630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.992302][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.999473][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.079093][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.152427][ T7336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.162607][ T7336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.171724][ T7336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.181156][ T7336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.227462][ T7336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.241816][ T7495] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.257167][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.277666][ T7336] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.291942][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.308481][ T2630] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.315665][ T2630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.331748][ T7258] veth0_vlan: entered promiscuous mode [ 107.339550][ T2630] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.346736][ T2630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.380152][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.407455][ T7258] veth1_vlan: entered promiscuous mode [ 107.436766][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.448959][ T7258] veth0_macvtap: entered promiscuous mode [ 107.469156][ T7258] veth1_macvtap: entered promiscuous mode [ 107.510872][ T7258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.532924][ T7258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.556126][ T2630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.566354][ T51] bridge_slave_1: left allmulticast mode [ 107.572059][ T51] bridge_slave_1: left promiscuous mode [ 107.577761][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.586629][ T51] bridge_slave_0: left allmulticast mode [ 107.592500][ T51] bridge_slave_0: left promiscuous mode [ 107.598467][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.688404][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.9.834'. [ 107.732865][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.742972][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.752592][ T51] bond0 (unregistering): Released all slaves [ 107.768142][ T2630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.777476][ T2630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.797076][ T2630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.813699][ T51] tipc: Left network mode [ 107.822194][ T7336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.840061][ T51] hsr_slave_0: left promiscuous mode [ 107.842544][ T7548] loop4: detected capacity change from 0 to 512 [ 107.852384][ T51] hsr_slave_1: left promiscuous mode [ 107.858189][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.865823][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.872736][ T7548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.886297][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.887202][ T7548] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.893895][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.921188][ T51] veth1_macvtap: left promiscuous mode [ 107.926945][ T51] veth0_macvtap: left promiscuous mode [ 107.933496][ T51] veth1_vlan: left promiscuous mode [ 107.938898][ T51] veth0_vlan: left promiscuous mode [ 107.960779][ T7548] loop4: detected capacity change from 512 to 64 [ 107.982788][ T7258] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Out of memory [ 107.992234][ T7258] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 108.029486][ T51] team0 (unregistering): Port device team_slave_1 removed [ 108.039794][ T51] team0 (unregistering): Port device team_slave_0 removed [ 108.072071][ T7545] tipc: Enabling of bearer rejected, failed to enable media [ 108.144972][ T7564] netlink: 'syz.3.837': attribute type 153 has an invalid length. [ 108.200164][ T7524] chnl_net:caif_netlink_parms(): no params data found [ 108.216634][ T7336] veth0_vlan: entered promiscuous mode [ 108.234526][ T7336] veth1_vlan: entered promiscuous mode [ 108.279696][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.286910][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.295871][ T7524] bridge_slave_0: entered allmulticast mode [ 108.302960][ T7524] bridge_slave_0: entered promiscuous mode [ 108.310072][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.317323][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.324709][ T7524] bridge_slave_1: entered allmulticast mode [ 108.331577][ T7524] bridge_slave_1: entered promiscuous mode [ 108.350860][ T7524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.366358][ T7336] veth0_macvtap: entered promiscuous mode [ 108.374050][ T7336] veth1_macvtap: entered promiscuous mode [ 108.382810][ T7524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.396609][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.419683][ T7524] team0: Port device team_slave_0 added [ 108.426746][ T7524] team0: Port device team_slave_1 added [ 108.433952][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.448031][ T51] IPVS: stop unused estimator thread 0... [ 108.462565][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.469701][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.495786][ T7524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.507351][ T7524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.514499][ T7524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.540792][ T7524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.551951][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.566816][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.590279][ T7524] hsr_slave_0: entered promiscuous mode [ 108.596748][ T7524] hsr_slave_1: entered promiscuous mode [ 108.603820][ T7524] debugfs: 'hsr0' already exists in 'hsr' [ 108.609612][ T7524] Cannot create hsr debugfs directory [ 108.615273][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.632435][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.698466][ T29] kauditd_printk_skb: 1906 callbacks suppressed [ 108.698560][ T29] audit: type=1400 audit(1755636582.226:2688): avc: denied { name_bind } for pid=7583 comm="syz.2.794" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 108.957083][ T7524] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 108.966636][ T7524] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 108.976502][ T7524] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 108.985785][ T7524] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 108.998035][ T29] audit: type=1326 audit(1755636582.526:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.021612][ T29] audit: type=1326 audit(1755636582.526:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.045002][ T29] audit: type=1326 audit(1755636582.526:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.050362][ T7588] netlink: 'syz.3.839': attribute type 21 has an invalid length. [ 109.068630][ T29] audit: type=1326 audit(1755636582.526:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.099833][ T29] audit: type=1326 audit(1755636582.526:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.123241][ T29] audit: type=1326 audit(1755636582.526:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.135115][ T7588] netlink: 132 bytes leftover after parsing attributes in process `syz.3.839'. [ 109.146973][ T29] audit: type=1326 audit(1755636582.526:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.179642][ T29] audit: type=1326 audit(1755636582.526:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.203266][ T29] audit: type=1326 audit(1755636582.526:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7585 comm="syz.3.839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a1e84ebe9 code=0x7ffc0000 [ 109.223410][ T7524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.239328][ T7524] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.250118][ T2630] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.255194][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.9.841'. [ 109.257415][ T2630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.277520][ T7598] ip6tnl1: entered allmulticast mode [ 109.287143][ T2630] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.294445][ T2630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.312389][ T7524] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.322863][ T7524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.322926][ T7600] netlink: 8 bytes leftover after parsing attributes in process `syz.9.842'. [ 109.378730][ T7606] loop9: detected capacity change from 0 to 128 [ 109.391331][ T7606] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.392580][ T7524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.405782][ T7606] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.437694][ T6787] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.462565][ T7613] netlink: 80 bytes leftover after parsing attributes in process `syz.9.844'. [ 109.502853][ T7258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.517592][ T1762] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.554799][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.9.846'. [ 109.572408][ T7624] netlink: 'syz.2.848': attribute type 153 has an invalid length. [ 109.643148][ T7524] veth0_vlan: entered promiscuous mode [ 109.654442][ T7524] veth1_vlan: entered promiscuous mode [ 109.702191][ T7524] veth0_macvtap: entered promiscuous mode [ 109.715794][ T7524] veth1_macvtap: entered promiscuous mode [ 109.742426][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.756687][ T7524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.780384][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.796440][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.811294][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.824180][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.896042][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 109.977060][ T7649] vlan2: entered allmulticast mode [ 109.993720][ T7653] netlink: 52 bytes leftover after parsing attributes in process `syz.9.853'. [ 110.051019][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 110.077063][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.854'. [ 110.086045][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.854'. [ 110.157389][ T7668] FAULT_INJECTION: forcing a failure. [ 110.157389][ T7668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.170719][ T7668] CPU: 1 UID: 0 PID: 7668 Comm: syz.3.858 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.170751][ T7668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.170768][ T7668] Call Trace: [ 110.170775][ T7668] [ 110.170793][ T7668] __dump_stack+0x1d/0x30 [ 110.170834][ T7668] dump_stack_lvl+0xe8/0x140 [ 110.170859][ T7668] dump_stack+0x15/0x1b [ 110.170878][ T7668] should_fail_ex+0x265/0x280 [ 110.170963][ T7668] should_fail+0xb/0x20 [ 110.170985][ T7668] should_fail_usercopy+0x1a/0x20 [ 110.171013][ T7668] _copy_to_user+0x20/0xa0 [ 110.171045][ T7668] simple_read_from_buffer+0xb5/0x130 [ 110.171071][ T7668] proc_pid_attr_read+0x134/0x1a0 [ 110.171171][ T7668] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 110.171270][ T7668] vfs_readv+0x3fb/0x690 [ 110.171296][ T7668] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 110.171323][ T7668] ? mutex_lock+0xd/0x30 [ 110.171342][ T7668] do_readv+0xe7/0x210 [ 110.171373][ T7668] __x64_sys_readv+0x45/0x50 [ 110.171393][ T7668] x64_sys_call+0x29f8/0x2ff0 [ 110.171411][ T7668] do_syscall_64+0xd2/0x200 [ 110.171433][ T7668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.171505][ T7668] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.171578][ T7668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.171597][ T7668] RIP: 0033:0x7f2a1e84ebe9 [ 110.171610][ T7668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.171692][ T7668] RSP: 002b:00007f2a1d2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 110.171716][ T7668] RAX: ffffffffffffffda RBX: 00007f2a1ea75fa0 RCX: 00007f2a1e84ebe9 [ 110.171727][ T7668] RDX: 0000000000000002 RSI: 0000200000001440 RDI: 0000000000000003 [ 110.171737][ T7668] RBP: 00007f2a1d2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 110.171748][ T7668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.171759][ T7668] R13: 00007f2a1ea76038 R14: 00007f2a1ea75fa0 R15: 00007ffe8863b6b8 [ 110.171776][ T7668] [ 110.560133][ T7673] loop2: detected capacity change from 0 to 128 [ 110.601920][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.609125][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.650516][ T7632] bridge_slave_0: entered allmulticast mode [ 110.680410][ T7632] bridge_slave_0: entered promiscuous mode [ 110.688238][ T7675] FAULT_INJECTION: forcing a failure. [ 110.688238][ T7675] name failslab, interval 1, probability 0, space 0, times 0 [ 110.700941][ T7675] CPU: 1 UID: 0 PID: 7675 Comm: syz.3.861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.700969][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.700982][ T7675] Call Trace: [ 110.700990][ T7675] [ 110.701000][ T7675] __dump_stack+0x1d/0x30 [ 110.701039][ T7675] dump_stack_lvl+0xe8/0x140 [ 110.701142][ T7675] dump_stack+0x15/0x1b [ 110.701158][ T7675] should_fail_ex+0x265/0x280 [ 110.701179][ T7675] should_failslab+0x8c/0xb0 [ 110.701209][ T7675] kmem_cache_alloc_node_noprof+0x57/0x320 [ 110.701436][ T7675] ? __alloc_skb+0x101/0x320 [ 110.701526][ T7675] __alloc_skb+0x101/0x320 [ 110.701570][ T7675] alloc_skb_with_frags+0x7d/0x470 [ 110.701591][ T7675] ? ref_tracker_alloc+0x1f2/0x2f0 [ 110.701615][ T7675] sock_alloc_send_pskb+0x43a/0x4f0 [ 110.701647][ T7675] ? __rcu_read_unlock+0x4f/0x70 [ 110.701734][ T7675] ? __rcu_read_unlock+0x4f/0x70 [ 110.701760][ T7675] packet_sendmsg+0x222b/0x31f0 [ 110.701804][ T7675] ? avc_has_perm+0xf7/0x180 [ 110.701830][ T7675] ? selinux_socket_sendmsg+0x175/0x1b0 [ 110.701937][ T7675] ? __pfx_packet_sendmsg+0x10/0x10 [ 110.701975][ T7675] __sock_sendmsg+0x142/0x180 [ 110.702010][ T7675] __sys_sendto+0x268/0x330 [ 110.702097][ T7675] __x64_sys_sendto+0x76/0x90 [ 110.702139][ T7675] x64_sys_call+0x2d05/0x2ff0 [ 110.702183][ T7675] do_syscall_64+0xd2/0x200 [ 110.702250][ T7675] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.702279][ T7675] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 110.702302][ T7675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.702324][ T7675] RIP: 0033:0x7f2a1e84ebe9 [ 110.702342][ T7675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.702378][ T7675] RSP: 002b:00007f2a1d2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 110.702402][ T7675] RAX: ffffffffffffffda RBX: 00007f2a1ea75fa0 RCX: 00007f2a1e84ebe9 [ 110.702453][ T7675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 110.702509][ T7675] RBP: 00007f2a1d2b7090 R08: 00002000000002c0 R09: 0000000000000014 [ 110.702522][ T7675] R10: 000000000004c001 R11: 0000000000000246 R12: 0000000000000001 [ 110.702533][ T7675] R13: 00007f2a1ea76038 R14: 00007f2a1ea75fa0 R15: 00007ffe8863b6b8 [ 110.702554][ T7675] [ 110.939118][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.946378][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.954039][ T7632] bridge_slave_1: entered allmulticast mode [ 110.969736][ T7632] bridge_slave_1: entered promiscuous mode [ 111.005184][ T7679] capability: warning: `syz.7.863' uses 32-bit capabilities (legacy support in use) [ 111.053430][ T7684] netlink: 52 bytes leftover after parsing attributes in process `syz.9.865'. [ 111.054917][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.089730][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.115596][ T7632] team0: Port device team_slave_0 added [ 111.123633][ T7632] team0: Port device team_slave_1 added [ 111.183026][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.190125][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.216650][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.239696][ T7695] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.242137][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.254061][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.254881][ T7695] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 111.280756][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.363771][ T7632] hsr_slave_0: entered promiscuous mode [ 111.383665][ T7632] hsr_slave_1: entered promiscuous mode [ 111.389935][ T7632] debugfs: 'hsr0' already exists in 'hsr' [ 111.395961][ T7632] Cannot create hsr debugfs directory [ 111.408417][ T7704] loop9: detected capacity change from 0 to 7 [ 111.415787][ T7704] buffer_io_error: 10 callbacks suppressed [ 111.415827][ T7704] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.439460][ T7704] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.447484][ T7704] loop9: unable to read partition table [ 111.458930][ T7704] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 111.458930][ T7704] ) failed (rc=-5) [ 111.550787][ T7710] netlink: 'syz.3.870': attribute type 153 has an invalid length. [ 111.595570][ T7714] loop2: detected capacity change from 0 to 2048 [ 111.651257][ T7714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.665486][ T1762] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.680726][ T7714] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.736036][ T7336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.772271][ T1762] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.789008][ T7704] program syz.9.868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.873061][ T1762] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.959534][ T1762] bridge_slave_1: left allmulticast mode [ 111.965386][ T1762] bridge_slave_1: left promiscuous mode [ 111.971131][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.982843][ T1762] bridge_slave_0: left allmulticast mode [ 111.988546][ T1762] bridge_slave_0: left promiscuous mode [ 111.994478][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.104032][ T1762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.116045][ T1762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.126489][ T1762] bond0 (unregistering): Released all slaves [ 112.288051][ T1762] hsr_slave_0: left promiscuous mode [ 112.293888][ T1762] hsr_slave_1: left promiscuous mode [ 112.299670][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.307150][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.314990][ T1762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.322504][ T1762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.334272][ T1762] veth1_macvtap: left promiscuous mode [ 112.340124][ T1762] veth0_macvtap: left promiscuous mode [ 112.346202][ T1762] veth1_vlan: left promiscuous mode [ 112.352893][ T1762] veth0_vlan: left promiscuous mode [ 112.463016][ T1762] team0 (unregistering): Port device team_slave_1 removed [ 112.474396][ T1762] team0 (unregistering): Port device team_slave_0 removed [ 112.545812][ T7632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.563731][ T7632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.579718][ T7632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.599976][ T7632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.635590][ T7747] loop3: detected capacity change from 0 to 1024 [ 112.642320][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811123d200: rx timeout, send abort [ 112.650623][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811123d400: rx timeout, send abort [ 112.659136][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811123d200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.673506][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811123d400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.717500][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.723852][ T7755] loop7: detected capacity change from 0 to 164 [ 112.726740][ T7747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.753022][ T7755] rock: directory entry would overflow storage [ 112.759258][ T7755] rock: sig=0x66, size=4, remaining=3 [ 112.778701][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.798285][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.805546][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.874213][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.881410][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.928036][ T7632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.928324][ T7747] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.882: Allocating blocks 449-513 which overlap fs metadata [ 113.009102][ T7746] EXT4-fs (loop3): pa ffff888106b5a310: logic 48, phys. 177, len 21 [ 113.017364][ T7746] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 113.021558][ T7770] netlink: 'syz.7.888': attribute type 153 has an invalid length. [ 113.111378][ T7747] syz.3.882 (7747) used greatest stack depth: 10232 bytes left [ 113.147606][ T6839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.225062][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.258053][ T7790] loop3: detected capacity change from 0 to 1024 [ 113.284701][ T7790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.315704][ T7790] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.349443][ T7793] can0: slcan on ttyS3. [ 113.359459][ T7788] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 15) [ 113.374456][ T7788] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 113.387206][ T7788] EXT4-fs (loop3): This should not happen!! Data will be lost [ 113.387206][ T7788] [ 113.409195][ T7790] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.416388][ T7632] veth0_vlan: entered promiscuous mode [ 113.431648][ T7793] can0 (unregistered): slcan off ttyS3. [ 113.448505][ T7809] can0: slcan on ttyS3. [ 113.449272][ T7632] veth1_vlan: entered promiscuous mode [ 113.461245][ T7788] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 113.485168][ T7785] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.494025][ T7632] veth0_macvtap: entered promiscuous mode [ 113.507217][ T7790] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.521007][ T7632] veth1_macvtap: entered promiscuous mode [ 113.527439][ T7785] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.544353][ T7792] can0 (unregistered): slcan off ttyS3. [ 113.549209][ T7785] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.564588][ T7788] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.573314][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.581306][ T7788] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.603027][ T7785] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.890: lblock 1 mapped to illegal pblock 1 (length 3) [ 113.615427][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.639348][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.698117][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.710389][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.728211][ T7815] netlink: 'syz.9.894': attribute type 10 has an invalid length. [ 113.751007][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.767741][ T7815] team0: Port device dummy0 added [ 113.790732][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 113.790829][ T29] audit: type=1400 audit(1755636587.326:3035): avc: denied { watch } for pid=7817 comm="syz.1.849" path="/0/control" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.840365][ T7815] syz.9.894 (7815) used greatest stack depth: 10112 bytes left [ 113.848467][ T29] audit: type=1326 audit(1755636587.336:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 113.871943][ T29] audit: type=1326 audit(1755636587.336:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 113.896075][ T29] audit: type=1326 audit(1755636587.366:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 113.919613][ T29] audit: type=1326 audit(1755636587.366:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 113.964289][ T29] audit: type=1400 audit(1755636587.436:3040): avc: denied { ioctl } for pid=7785 comm="syz.3.890" path="/32/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.989090][ T29] audit: type=1326 audit(1755636587.476:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 113.992527][ T6839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.012736][ T29] audit: type=1326 audit(1755636587.476:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 114.045312][ T29] audit: type=1326 audit(1755636587.476:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 114.068838][ T29] audit: type=1326 audit(1755636587.476:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.2.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6fa5b9ebe9 code=0x7ffc0000 [ 114.107118][ T7827] loop7: detected capacity change from 0 to 1024 [ 114.141352][ T7827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.243491][ T7855] netlink: 'syz.3.906': attribute type 153 has an invalid length. [ 114.251758][ T7827] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 114.272876][ T7827] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 114.352346][ T7827] ================================================================== [ 114.360485][ T7827] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 114.369899][ T7827] [ 114.372329][ T7827] write to 0xffff8881057c6d10 of 4 bytes by task 7862 on cpu 0: [ 114.380009][ T7827] writeback_single_inode+0x14a/0x3e0 [ 114.385534][ T7827] sync_inode_metadata+0x5b/0x90 [ 114.390610][ T7827] generic_buffers_fsync_noflush+0xd9/0x120 [ 114.396719][ T7827] ext4_sync_file+0x1ab/0x690 [ 114.401565][ T7827] vfs_fsync_range+0x10d/0x130 [ 114.406364][ T7827] ext4_buffered_write_iter+0x34f/0x3c0 [ 114.411964][ T7827] ext4_file_write_iter+0x383/0xf00 [ 114.417233][ T7827] iter_file_splice_write+0x663/0xa60 [ 114.423142][ T7827] direct_splice_actor+0x153/0x2a0 [ 114.428389][ T7827] splice_direct_to_actor+0x30f/0x680 [ 114.433823][ T7827] do_splice_direct+0xda/0x150 [ 114.438757][ T7827] do_sendfile+0x380/0x650 [ 114.443242][ T7827] __x64_sys_sendfile64+0x105/0x150 [ 114.448564][ T7827] x64_sys_call+0x2bb0/0x2ff0 [ 114.453453][ T7827] do_syscall_64+0xd2/0x200 [ 114.458000][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.463927][ T7827] [ 114.466284][ T7827] read to 0xffff8881057c6d10 of 4 bytes by task 7827 on cpu 1: [ 114.473853][ T7827] generic_buffers_fsync_noflush+0x80/0x120 [ 114.479779][ T7827] ext4_sync_file+0x1ab/0x690 [ 114.484520][ T7827] vfs_fsync_range+0x10d/0x130 [ 114.489325][ T7827] ext4_buffered_write_iter+0x34f/0x3c0 [ 114.495154][ T7827] ext4_file_write_iter+0x383/0xf00 [ 114.500411][ T7827] iter_file_splice_write+0x663/0xa60 [ 114.505831][ T7827] direct_splice_actor+0x153/0x2a0 [ 114.510981][ T7827] splice_direct_to_actor+0x30f/0x680 [ 114.516404][ T7827] do_splice_direct+0xda/0x150 [ 114.521283][ T7827] do_sendfile+0x380/0x650 [ 114.525832][ T7827] __x64_sys_sendfile64+0x105/0x150 [ 114.531074][ T7827] x64_sys_call+0x2bb0/0x2ff0 [ 114.535789][ T7827] do_syscall_64+0xd2/0x200 [ 114.540384][ T7827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.546324][ T7827] [ 114.548680][ T7827] value changed: 0x00000038 -> 0x00000002 [ 114.554422][ T7827] [ 114.556772][ T7827] Reported by Kernel Concurrency Sanitizer on: [ 114.562955][ T7827] CPU: 1 UID: 0 PID: 7827 Comm: syz.7.896 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.572616][ T7827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.582802][ T7827] ================================================================== [ 114.803484][ T7867] __nla_validate_parse: 2 callbacks suppressed [ 114.803502][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 114.819271][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 114.854391][ T7524] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.