last executing test programs: 1m5.649257848s ago: executing program 32 (id=36): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xe8) write$qrtrtun(r1, &(0x7f0000000300)="9cf35470044693", 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000005d5048d25009b3f5ffffff2046bf7c2bb04e1d5bf30b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 1m1.014577466s ago: executing program 33 (id=144): r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000100)=0x9, 0x4) 1m0.541372902s ago: executing program 34 (id=156): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x92d, &(0x7f0000000140)={0x0, 0x102119, 0x0, 0xfffffffe, 0x401ee}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2}, 0x0, 0x2001, 0x1}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000080), 0x4, 0x582, &(0x7f0000000540)="$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") io_uring_enter(r1, 0x47f6, 0xd0ab, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_config_ext={0xed, 0x10001}, 0x115428, 0x1, 0x0, 0x0, 0x5f4d, 0x10000001}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe364, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$selinux_load(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}]}]}, 0x17c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) 1m0.306996185s ago: executing program 35 (id=158): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 59.660452613s ago: executing program 36 (id=166): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x0) 59.048848151s ago: executing program 37 (id=171): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xa000032a) 54.170158632s ago: executing program 6 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 54.004648584s ago: executing program 6 (id=177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{}, &(0x7f0000001c00), &(0x7f0000001c40)=r0}, 0x20) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x0, 0x4f1, &(0x7f0000000740)="$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") 53.709261818s ago: executing program 6 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 53.709089598s ago: executing program 38 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 53.319410733s ago: executing program 9 (id=167): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000001300)) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020bf49f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) close(0x3) 52.413779564s ago: executing program 9 (id=188): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) write$selinux_access(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x6a, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/85, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/68, 0x44}, {&(0x7f0000000200)=""/77, 0xa1}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) fsopen(&(0x7f0000000100)='sysv\x00', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a183000000000000000005000000080003"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000bc0)={0x9c, r5, 0x516, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3a5, 0x3a}}}}, [@NL80211_ATTR_SSID={0x1f, 0x34, @random="90be98e44a79a5062fa4c4b121b24adb060ca871d4154456724524"}, @NL80211_ATTR_PMKID={0x14, 0x55, "6588cf8746b3b6489890115b3f59df8d"}, @NL80211_ATTR_PMKID={0x14, 0x55, "cee31b98d705c1754d09cc00dbcb1244"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "8ecfa2f04150361e417effc2dd1627cf"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@usrquota}, {@barrier}, {@data_err_abort}, {@min_batch_time={'min_batch_time', 0x3d, 0x101}}, {@errors_remount}, {@bh}]}, 0x6, 0x600, &(0x7f0000001200)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x80000400, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 51.891309151s ago: executing program 7 (id=194): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) open(&(0x7f00000000c0)='./bus\x00', 0x400141042, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f0000000200)=@v3, 0x18, 0x0) 51.847884581s ago: executing program 9 (id=196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xdd, 0x11ff, &(0x7f0000003300)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xb8, 0x11, 0x148, 0x0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0xb8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x4}}}, {{@ip={@multicast2, @loopback, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x39}, [0x0, 0x0, 0xff, 0xff], 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x5, 0x4, 0x3, 0xc0002000, 0x10000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) r3 = fcntl$dupfd(r1, 0x0, r2) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r5, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000880)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000240)=""/75) 51.553212865s ago: executing program 9 (id=197): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000001300)) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020bf49f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) close(0x3) 51.477012426s ago: executing program 7 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 51.475599126s ago: executing program 39 (id=199): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 51.025192121s ago: executing program 9 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x96, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (fail_nth: 5) 51.024064392s ago: executing program 40 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0x96, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (fail_nth: 5) 14.970277433s ago: executing program 3 (id=776): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000006b113c0000000000851000008ac90000890000007600f2e094000000000000009500a505000000000ba6c1e82ef21d22c091d73dd9306cec29df3f996e5552cdd810545a92483ea8ef816c7378a68bef9e2425002d9bb00eaff0d87ce34d469902aef7913830201eb882f0841ab3351a7f10390456a7e1aae892b1d3cd384c21f9f8808f771a59b0dc7fa9aa3a1be713956c4b24f1b1ae7ede225f8192b8c35244f7db89e2e723d2aba6980dbf183b8d50a320e5f65c1d374cabb303efaf999d8a4eb2bf07dfad6503339473374d2c26c088659f1093d705f6078ed0da4410e5768b6cc8c0c3d998"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x310, 0x11, 0x148, 0x0, 0x0, 0x3a0, 0x2a8, 0x2a8, 0x3a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x40, 0x0, [{0xc6f2, 0x4d, 0xe4, 0x8001}, {0x9, 0x8, 0x24, 0x3}, {0xf, 0x5, 0xfd, 0x6}, {0x3, 0x1, 0x5, 0x7}, {0xffff, 0xb, 0x3, 0x5}, {0x40, 0x6, 0x50, 0x2}, {0x8, 0x35, 0xa, 0xf1a3}, {0x0, 0x3, 0xe, 0x8}, {0x6, 0x7, 0x3, 0x7}, {0x7, 0x3, 0x9, 0x3}, {0x4, 0x78, 0x0, 0x5}, {0xfc00, 0x9, 0x58}, {0x6fe6, 0x9, 0x4}, {0x4, 0x3, 0x3b, 0x8}, {0xda, 0x0, 0x8, 0x1}, {0x0, 0x3, 0x4f, 0x401}, {0x8001, 0x9, 0x8, 0xa148}, {0x6a, 0x1, 0x3, 0x9b}, {0x0, 0x8, 0xb, 0xff}, {0x4, 0xe, 0x81}, {0xc27, 0x7, 0x7, 0x100}, {0xfffe, 0xb4, 0x4, 0x175b2476}, {0x1, 0xd4, 0x10, 0x1000}, {0x9, 0x2, 0x7, 0x1}, {0x0, 0xa, 0x8, 0x7f}, {0x3000, 0x1, 0x80, 0xf}, {0x5, 0x5, 0x35, 0x3}, {0x8, 0x8, 0x8, 0x1000}, {0x4, 0x1, 0xf6, 0x7}, {0x5, 0xaa, 0x8, 0x3}, {0x0, 0xfc, 0x6, 0x8}, {0xffff, 0x3c, 0x5, 0x5}, {0x2, 0x1, 0x3, 0xe7}, {0x1, 0x5, 0x40, 0x7}, {0x6, 0x5, 0x2, 0xffff}, {0x800, 0x0, 0x10, 0x6}, {0x9, 0x3, 0x8, 0x8}, {0xd191, 0x8, 0x2, 0x8000}, {0x4, 0x1, 0x6f, 0x4}, {0x53a, 0xd2, 0x9, 0x6}, {0x40, 0xd, 0x8, 0x5}, {0x3, 0x5, 0x9, 0x5}, {0x76, 0x7, 0x7, 0x2}, {0x4, 0x20, 0x7, 0x1e14}, {0x2, 0x24, 0x7}, {0x4, 0x3, 0x5, 0x8}, {0x40, 0x5, 0x3, 0x96}, {0x0, 0x1, 0x8, 0x7}, {0x4, 0xb2, 0x4, 0x1}, {0x36c, 0xb9, 0x2, 0x7}, {0x1, 0x8, 0x51, 0x8}, {0x1, 0x58, 0x9, 0x1d}, {0x1, 0x2, 0x5, 0x7}, {0x5, 0x4, 0xfd}, {0x9, 0x4, 0x4, 0x7000}, {0x8, 0x8, 0x5}, {0x3, 0x7, 0x20}, {0x4, 0x7, 0x2, 0x40}, {0x9, 0x4, 0xd, 0x36ab}, {0x0, 0x9, 0x3, 0xd}, {0x1000, 0x5, 0x9, 0x6}, {0x401, 0x1, 0xff, 0x2}, {0x2, 0x5, 0x2}, {0x0, 0x5, 0x0, 0x400}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x10000}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r2, 0x1, 0x42, 0x0, &(0x7f0000000fc0)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 14.886279164s ago: executing program 3 (id=780): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x0, 0x0, 0x401) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file2/../file0\x00', 0x4) llistxattr(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) sendfile(r2, r2, 0x0, 0xfffe80) 14.748234606s ago: executing program 3 (id=786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20008044) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1afbaaa444607715328a15b826ec37dfce74fce0f9cf73ef315bf69f04000000000000008d58d78af8ea58dc00bd22d2ddb947257d9766576363c6a9e0b4dbfa013f665d5e431c16cf1b6232c8c8be4f82406f1bfb9a36692c5675e53ff039a012f594ce7b7632635e660bf480c05e6c8c223a5d038e088b92d94faabaf7c7a82c523b9fe7de94b567c24786df5c8153d069bd1ee8378e055f1f76628184ea8133d98e45e2"], 0x48}}, 0x0) 14.42253202s ago: executing program 3 (id=790): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x8, &(0x7f0000000a40), 0xfd, 0x1e8, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x290) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x218f, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) r7 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setfsgid(0x0) mq_timedreceive(r7, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 14.265590821s ago: executing program 3 (id=793): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x0, 0x0, 0x401) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file2/../file0\x00', 0x4) llistxattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002480)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x258, 0x258, 0x118, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x5], 0x0, 0x50, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x1, 0x8, 0x3ff, 0x3, 0x6, 0x2, 0x6]}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'wg0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 13.961289376s ago: executing program 3 (id=801): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000001300)) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020bf49f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) close(0x3) 13.960495896s ago: executing program 41 (id=801): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, &(0x7f0000001300)) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020bf49f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_nanosleep(0x5, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r1 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x3e12, 0x2, 0x2, 0x3b1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x8, 0x8}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) close(0x3) 7.782845703s ago: executing program 4 (id=940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x318a054d}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@errors_remount}, {@noload}, {@user_xattr}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 7.478664237s ago: executing program 4 (id=951): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 7.401984997s ago: executing program 4 (id=953): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sigaltstack(&(0x7f0000001040)={&(0x7f0000001080)=""/4125, 0x80000000, 0x101d}, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 7.400953717s ago: executing program 4 (id=955): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x8, &(0x7f0000000a40), 0xfd, 0x1e8, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x290) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x218f, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) r7 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setfsgid(0x0) mq_timedreceive(r7, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) 7.282378989s ago: executing program 4 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r6, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x4000, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x7}, 0x18930, 0x1, 0x0, 0x3, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.140742791s ago: executing program 4 (id=963): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 7.140455581s ago: executing program 42 (id=963): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 6.182038353s ago: executing program 0 (id=989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex_waitv(&(0x7f0000000c80)=[{0x5, &(0x7f00000002c0)=0x8, 0x82}, {0x51c5, &(0x7f0000000300)=0x7f, 0x83}, {0xda1, &(0x7f0000000340)=0x9, 0x2}, {0x7cf, &(0x7f0000000380)=0xecf5, 0x82}, {0xd27, &(0x7f0000000400)=0x8, 0x2}, {0x395, &(0x7f0000000440)=0x6, 0x82}, {0xbf86, &(0x7f00000004c0)=0x4, 0x82}, {0xb27, &(0x7f0000000500)=0x100000001, 0x2}, {0x8, &(0x7f0000000580)=0x9, 0x2}, {0x6, &(0x7f00000005c0)=0xb2, 0x2}, {0xc, &(0x7f0000000600), 0x2}, {0x65, &(0x7f0000000640)=0x6, 0x82}, {0x215, &(0x7f0000000680)=0x100000000, 0x82}, {0x3, &(0x7f00000006c0)=0x200000000000006, 0x82}, {0x6, &(0x7f0000000700), 0x2}, {0x2, &(0x7f0000000740)=0x4, 0x82}, {0xe3, &(0x7f0000000780), 0x2}, {0x9, &(0x7f0000001000)=0x5c11, 0x2}, {0x7, &(0x7f0000000800)=0x3, 0x2}, {0xe0000000000000, &(0x7f0000000840)=0x7, 0x82}, {0x8000000000000001, &(0x7f0000000880)=0x6, 0x2}, {0x64, &(0x7f00000008c0)=0x8, 0x2}, {0x100000001, &(0x7f0000000900)=0x7fffffffffffffff, 0x2}, {0x2273, &(0x7f0000000940)=0x400, 0x82}, {0x3, &(0x7f0000000980)=0x1}, {0x3, &(0x7f0000000a00)=0x9, 0x2}, {0x0, &(0x7f0000000a40)=0x2, 0x82}, {0xe000000, &(0x7f0000000ac0), 0x2}, {0x80000001, &(0x7f0000000b00)=0x3, 0x2}, {0xfffffffffffffffa, &(0x7f0000000b40), 0x82}, {0x2, &(0x7f0000000b80)=0x5ed, 0x2}, {0x1000, &(0x7f0000000c00)=0x8000000000000001, 0x2}, {0x5, &(0x7f0000000c40)=0x3, 0x82}], 0x21, 0x0, &(0x7f0000000fc0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') 6.121670154s ago: executing program 0 (id=991): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) timer_delete(0x0) creat(&(0x7f0000000240)='./bus\x00', 0xc2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x47b, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 5.441000632s ago: executing program 0 (id=1003): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.335205914s ago: executing program 0 (id=1007): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x8, &(0x7f0000000a40), 0xfd, 0x1e8, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x290) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x218f, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) r7 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setfsgid(0x0) mq_timedreceive(r7, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 5.173258206s ago: executing program 0 (id=1010): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000006b113c0000000000851000008ac90000890000007600f2e094000000000000009500a505000000000ba6c1e82ef21d22c091d73dd9306cec29df3f996e5552cdd810545a92483ea8ef816c7378a68bef9e2425002d9bb00eaff0d87ce34d469902aef7913830201eb882f0841ab3351a7f10390456a7e1aae892b1d3cd384c21f9f8808f771a59b0dc7fa9aa3a1be713956c4b24f1b1ae7ede225f8192b8c35244f7db89e2e723d2aba6980dbf183b8d50a320e5f65c1d374cabb303efaf999d8a4eb2bf07dfad6503339473374d2c26c088659f1093d705f6078ed0da4410e5768b6cc8c0c3d998"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.988247608s ago: executing program 8 (id=1013): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) utimes(0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xd50, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.964331628s ago: executing program 8 (id=1014): unshare(0x2040400) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mm_compaction_migratepages\x00', r0, 0x0, 0x4000000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r1 = memfd_create(0x0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r1, 0x0, 0x400000000000000, 0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x9, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket(0xa, 0x3, 0x3a) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') read(r7, &(0x7f0000001b00)=""/194, 0xc2) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.895119709s ago: executing program 8 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) 4.850007379s ago: executing program 0 (id=1016): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.849701549s ago: executing program 43 (id=1016): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.81458686s ago: executing program 8 (id=1019): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x8, &(0x7f0000000a40), 0xfd, 0x1e8, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x290) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x218f, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) r7 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setfsgid(0x0) mq_timedreceive(r7, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.639772662s ago: executing program 8 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x318a054d}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@errors_remount}, {@noload}, {@user_xattr}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 4.632333792s ago: executing program 5 (id=1022): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001200)={0x60000010}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socketpair(0x1d, 0x4a8afd496012cb33, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000edea1fc911cd146c93a399f65d413d7dc962e442ea1cf945f8680faba182ae9f696f0ddaecd51be03954c6255de2ee8d7fecfd28064617dec65fd8b956adc9b38ae5a86918d3349d981b6c3b7d2fb15a6a55", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 4.465206544s ago: executing program 2 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0xfd, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8, 0x6364, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x10) 4.460360834s ago: executing program 2 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) shutdown(r4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES8=r2, @ANYRESDEC=r4, @ANYRES32=r3, @ANYRESOCT=r1, @ANYRES8=r1, @ANYRESHEX=0x0, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000040)={0x80, 0x18, 0x2, 0xfffffff9, 0x0, 0x9}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@setlink={0x34, 0x13, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x20820}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x6004001}, 0x0) 4.422996575s ago: executing program 8 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000006b113c0000000000851000008ac90000890000007600f2e094000000000000009500a505000000000ba6c1e82ef21d22c091d73dd9306cec29df3f996e5552cdd810545a92483ea8ef816c7378a68bef9e2425002d9bb00eaff0d87ce34d469902aef7913830201eb882f0841ab3351a7f10390456a7e1aae892b1d3cd384c21f9f8808f771a59b0dc7fa9aa3a1be713956c4b24f1b1ae7ede225f8192b8c35244f7db89e2e723d2aba6980dbf183b8d50a320e5f65c1d374cabb303efaf999d8a4eb2bf07dfad6503339473374d2c26c088659f1093d705f6078ed0da4410e5768b6cc8c0c3d998"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.331734456s ago: executing program 44 (id=1025): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000006b113c0000000000851000008ac90000890000007600f2e094000000000000009500a505000000000ba6c1e82ef21d22c091d73dd9306cec29df3f996e5552cdd810545a92483ea8ef816c7378a68bef9e2425002d9bb00eaff0d87ce34d469902aef7913830201eb882f0841ab3351a7f10390456a7e1aae892b1d3cd384c21f9f8808f771a59b0dc7fa9aa3a1be713956c4b24f1b1ae7ede225f8192b8c35244f7db89e2e723d2aba6980dbf183b8d50a320e5f65c1d374cabb303efaf999d8a4eb2bf07dfad6503339473374d2c26c088659f1093d705f6078ed0da4410e5768b6cc8c0c3d998"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4.306675826s ago: executing program 2 (id=1028): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0x0) 4.250263907s ago: executing program 2 (id=1030): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x8, &(0x7f0000000a40), 0xfd, 0x1e8, &(0x7f0000000c80)="$eJzs3cFqE0EYB/AvsU1SEclNEIUFLx6kqE9QkSpqQFBy0JNC9dKIYC/RS/oYvouv4wNIT7noSN1t124XW4vpaP39Lvl2//kyMyHZ5JLJiytvNjfebr3+fOljDAad6K7FWsw7MYxu7NkOAOAsmacUX1Ip91wAgNNxxOd/Smn2NcO0AIAFevrs+aM7o9H6k6IYROxsT8fTcXlb5vcejNZvFj8M666d6XR8bj+/VTS/O+zmy3G+ym+X/cXBvBfXr5X5bnb38aiR92NjsUsHAAAAAAAAAAAAAAAAAAAAAIBsrkaxp3V/n9XVZr5S5eXRT/sDNfbvWYrLS9VhvT1Qmp3GogAAAAAAAAAAAAAAAAAAAOAfs/X+w+bLyeTVu7roR8TBM79TdKoHPmH7IothS9SNX3dFXIxjDPHw040L+ReYrfh2PyLX6P2WF1vxdzwtk8PvguWIOLK9FxEtUe9PTGyeUmqNOo0z9TWin+viBAAAAAAAAAAAAAAAAAAA/5n6R7+Hs0GOCQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABABvX//5+gmEXEMe68P9hK1qUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwhn0PAAD//4jrMjA=") mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x290) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x218f, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x2, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) r7 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setfsgid(0x0) mq_timedreceive(r7, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00'}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.131146868s ago: executing program 2 (id=1031): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000000)={[{@errors_remount}, {@noload}, {@user_xattr}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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") 3.747853093s ago: executing program 5 (id=1032): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex_waitv(&(0x7f0000000c80)=[{0x5, &(0x7f00000002c0)=0x8, 0x82}, {0x51c5, &(0x7f0000000300)=0x7f, 0x83}, {0xda1, &(0x7f0000000340)=0x9, 0x2}, {0x7cf, &(0x7f0000000380)=0xecf5, 0x82}, {0xd27, &(0x7f0000000400)=0x8, 0x2}, {0x395, &(0x7f0000000440)=0x6, 0x82}, {0xbf86, &(0x7f00000004c0)=0x4, 0x82}, {0xb27, &(0x7f0000000500)=0x100000001, 0x2}, {0x8, &(0x7f0000000580)=0x9, 0x2}, {0x6, &(0x7f00000005c0)=0xb2, 0x2}, {0xc, &(0x7f0000000600), 0x2}, {0x65, &(0x7f0000000640)=0x6, 0x82}, {0x215, &(0x7f0000000680)=0x100000000, 0x82}, {0x3, &(0x7f00000006c0)=0x200000000000006, 0x82}, {0x6, &(0x7f0000000700), 0x2}, {0x2, &(0x7f0000000740)=0x4, 0x82}, {0xe3, &(0x7f0000000780), 0x2}, {0x9, &(0x7f0000001000)=0x5c11, 0x2}, {0x7, &(0x7f0000000800)=0x3, 0x2}, {0xe0000000000000, &(0x7f0000000840)=0x7, 0x82}, {0x8000000000000001, &(0x7f0000000880)=0x6, 0x2}, {0x64, &(0x7f00000008c0)=0x8, 0x2}, {0x100000001, &(0x7f0000000900)=0x7fffffffffffffff, 0x2}, {0x2273, &(0x7f0000000940)=0x400, 0x82}, {0x3, &(0x7f0000000980)=0x1}, {0x3, &(0x7f0000000a00)=0x9, 0x2}, {0x0, &(0x7f0000000a40)=0x2, 0x82}, {0xe000000, &(0x7f0000000ac0), 0x2}, {0x80000001, &(0x7f0000000b00)=0x3, 0x2}, {0xfffffffffffffffa, &(0x7f0000000b40), 0x82}, {0x2, &(0x7f0000000b80)=0x5ed, 0x2}, {0x1000, &(0x7f0000000c00)=0x8000000000000001, 0x2}, {0x5, &(0x7f0000000c40)=0x3, 0x82}], 0x21, 0x0, &(0x7f0000000fc0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, &(0x7f0000000200)) rename(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000140)='./control\x00', 0x8) 3.383831098s ago: executing program 5 (id=1033): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0xfd, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8, 0x6364, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x10) 3.287995439s ago: executing program 5 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x5ae05eee874e7560, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140"], 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x6, 0x80, 0x5f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0x0, 0x0, {0x7, 0x25, 0x1, 0x82, 0x8, 0x58}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x81, 0x4, 0x1, {0x7, 0x25, 0x1, 0x0, 0x1, 0x5}}}}}}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 2.39657363s ago: executing program 2 (id=1035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4000000000002ab}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 2.396312s ago: executing program 45 (id=1035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4000000000002ab}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 1.016388657s ago: executing program 6 (id=1017): socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x7, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = dup2(r2, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x60eaabaa, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b0001006970766c616e00000348028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020aac2bf7c0ba283335e21c00"/25], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = syz_open_dev$evdev(&(0x7f0000000240), 0x4, 0xe400) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000001440)=""/4096) perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x2096, 0x0, 0x0, 0x80000, 0x7fd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) 989.584948ms ago: executing program 1 (id=1042): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 949.971818ms ago: executing program 1 (id=1043): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex_waitv(&(0x7f0000000c80)=[{0x5, &(0x7f00000002c0)=0x8, 0x82}, {0x51c5, &(0x7f0000000300)=0x7f, 0x83}, {0xda1, &(0x7f0000000340)=0x9, 0x2}, {0x7cf, &(0x7f0000000380)=0xecf5, 0x82}, {0xd27, &(0x7f0000000400)=0x8, 0x2}, {0x395, &(0x7f0000000440)=0x6, 0x82}, {0xbf86, &(0x7f00000004c0)=0x4, 0x82}, {0xb27, &(0x7f0000000500)=0x100000001, 0x2}, {0x8, &(0x7f0000000580)=0x9, 0x2}, {0x6, &(0x7f00000005c0)=0xb2, 0x2}, {0xc, &(0x7f0000000600), 0x2}, {0x65, &(0x7f0000000640)=0x6, 0x82}, {0x215, &(0x7f0000000680)=0x100000000, 0x82}, {0x3, &(0x7f00000006c0)=0x200000000000006, 0x82}, {0x6, &(0x7f0000000700), 0x2}, {0x2, &(0x7f0000000740)=0x4, 0x82}, {0xe3, &(0x7f0000000780), 0x2}, {0x9, &(0x7f0000001000)=0x5c11, 0x2}, {0x7, &(0x7f0000000800)=0x3, 0x2}, {0xe0000000000000, &(0x7f0000000840)=0x7, 0x82}, {0x8000000000000001, &(0x7f0000000880)=0x6, 0x2}, {0x64, &(0x7f00000008c0)=0x8, 0x2}, {0x100000001, &(0x7f0000000900)=0x7fffffffffffffff, 0x2}, {0x2273, &(0x7f0000000940)=0x400, 0x82}, {0x3, &(0x7f0000000980)=0x1}, {0x3, &(0x7f0000000a00)=0x9, 0x2}, {0x0, &(0x7f0000000a40)=0x2, 0x82}, {0xe000000, &(0x7f0000000ac0), 0x2}, {0x80000001, &(0x7f0000000b00)=0x3, 0x2}, {0xfffffffffffffffa, &(0x7f0000000b40), 0x82}, {0x2, &(0x7f0000000b80)=0x5ed, 0x2}, {0x1000, &(0x7f0000000c00)=0x8000000000000001, 0x2}, {0x5, &(0x7f0000000c40)=0x3, 0x82}], 0x21, 0x0, &(0x7f0000000fc0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, &(0x7f0000000200)) rename(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000140)='./control\x00', 0x8) 817.80295ms ago: executing program 1 (id=1044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 784.016651ms ago: executing program 1 (id=1045): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) 709.128301ms ago: executing program 7 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x40000000000}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r5) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x4, 0x80000000, @vifc_lcl_ifindex, @local}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000003d76000049a9f8fffcffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20400, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) connect$phonet_pipe(r6, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) 673.940542ms ago: executing program 1 (id=1046): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/28, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r2, {0x3}}, './bus\x00'}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$null(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 403.108565ms ago: executing program 1 (id=1047): recvmsg(0xffffffffffffffff, 0x0, 0x40000022) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x200980) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r3}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000780)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x25, &(0x7f0000000c80)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000000000000000000000100000018320000050000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="000000004000320258a00228d0251c13a1b4384a440000b70500000800000085000000a500000058120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000850000004c000000185300"/64], &(0x7f0000000900)='GPL\x00', 0x6, 0xf4, &(0x7f0000000a80)=""/244, 0x40f00, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0x9, 0x49d486a6, 0x2}, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r0, r3], 0x0, 0x10, 0x800, @void, @value}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x70658fa67e07ae5f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x8, 0x5}, 0x1100, 0x5dd8, 0x10001, 0x5, 0x400, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84842, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400100000080102000000000000eaff00000001"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x810) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xfffffff7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r11, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) 366.632956ms ago: executing program 7 (id=1048): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r5, 0x4e, 0x0) write$binfmt_script(r4, &(0x7f0000000800)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) set_mempolicy(0x3, &(0x7f0000000000)=0xffffffffffffffff, 0x200) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00ce0f536f4d20fdcde46ccd8637259f29f9a7e3f690ee473f3f86bc20176bb9eb019132b19d"], 0x1, 0x2c4, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x12, 0x0, 0x27) 254.208127ms ago: executing program 5 (id=1049): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x20008044) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) epoll_create1(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1afbaaa444607715328a15b826ec37dfce74fce0f9cf73ef315bf69f04000000000000008d58d78af8ea58dc00bd22d2ddb947257d9766576363c6a9e0b4dbfa013f665d5e431c16cf1b6232c8c8be4f82406f1bfb9a36692c5675e53ff039a012f594ce7b7632635e660bf480c05e6c8c223a5d038e088b92d94faabaf7c7a82c523b9fe7de94b567c24786df5c8153d069bd1ee8378e055f1f76628184ea8133d98e45e2"], 0x48}}, 0x0) 178.454728ms ago: executing program 7 (id=1050): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x0, 0x0, 0x401) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file2/../file0\x00', 0x4) llistxattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="d30c024700000000fc020000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aafe880000000000000000000000000001fe8000000000000000000000000000bbfc010000000000000000000000000000c4f248546856383b63c77813c6b7f2119f5c8bfe5fb9c0ab90f4cc054adcc5b46883"], 0x68) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002480)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x258, 0x258, 0x118, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x5], 0x0, 0x50, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x1, 0x8, 0x3ff, 0x3, 0x6, 0x2, 0x6]}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'wg0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 125.343069ms ago: executing program 6 (id=1051): socket$nl_route(0x10, 0x3, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) memfd_create(0x0, 0x4) 98.089669ms ago: executing program 6 (id=1052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x0, 0x0, 0x401) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file2/../file0\x00', 0x4) llistxattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000600)=ANY=[@ANYBLOB="d30c024700000000fc020000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aafe880000000000000000000000000001fe8000000000000000000000000000bbfc010000000000000000000000000000c4f248546856383b63c77813c6b7f2119f5c8bfe5fb9c0ab90f4cc054adcc5b46883"], 0x68) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002480)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x258, 0x258, 0x118, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x5], 0x0, 0x50, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x1, 0x8, 0x3ff, 0x3, 0x6, 0x2, 0x6]}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@eui64={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'wg0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) 7.79399ms ago: executing program 7 (id=1053): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') 0s ago: executing program 5 (id=1054): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001200)={0x60000010}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) socketpair(0x1d, 0x4a8afd496012cb33, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000008000/0x4000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000edea1fc911cd146c93a399f65d413d7dc962e442ea1cf945f8680faba182ae9f696f0ddaecd51be03954c6255de2ee8d7fecfd28064617dec65fd8b956adc9b38ae5a86918d3349d981b6c3b7d2fb15a6a55", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): e_1: left promiscuous mode [ 69.431595][ T6271] batadv0: left promiscuous mode [ 69.562437][ T6291] siw: device registration error -23 [ 69.646411][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.661632][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.703301][ T6316] loop4: detected capacity change from 0 to 512 [ 69.715649][ T6317] loop1: detected capacity change from 0 to 512 [ 69.738128][ T6317] journal_path: Non-blockdev passed as './bus' [ 69.744428][ T6317] EXT4-fs: error: could not find journal device path [ 69.800114][ T6324] loop1: detected capacity change from 0 to 512 [ 69.815476][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.824282][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.841101][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.851252][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.874888][ T6324] EXT4-fs (loop1): too many log groups per flexible block group [ 69.882976][ T6324] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 69.896713][ T6324] EXT4-fs (loop1): mount failed [ 70.258402][ T6383] loop5: detected capacity change from 0 to 512 [ 70.344261][ T6392] loop3: detected capacity change from 0 to 512 [ 70.375157][ T6392] EXT4-fs (loop3): too many log groups per flexible block group [ 70.383034][ T6392] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 70.390951][ T6392] EXT4-fs (loop3): mount failed [ 70.496173][ T6409] loop5: detected capacity change from 0 to 512 [ 70.514363][ T6413] xt_CT: No such helper "syz0" [ 70.522510][ T6409] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 70.547707][ T6409] syz.5.481: attempt to access beyond end of device [ 70.547707][ T6409] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 70.606262][ T6409] EXT4-fs (loop5): couldn't read superblock of external journal [ 70.629963][ T6430] bond0: entered promiscuous mode [ 70.635261][ T6430] bond_slave_0: entered promiscuous mode [ 70.641199][ T6430] bond_slave_1: entered promiscuous mode [ 70.648467][ T6432] loop1: detected capacity change from 0 to 512 [ 70.694965][ T6430] batadv0: entered promiscuous mode [ 70.721482][ T6430] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 70.736976][ T6430] bond0: left promiscuous mode [ 70.741874][ T6430] bond_slave_0: left promiscuous mode [ 70.747376][ T6430] bond_slave_1: left promiscuous mode [ 70.768342][ T6430] batadv0: left promiscuous mode [ 70.947680][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 70.947705][ T29] audit: type=1326 audit(1745631136.321:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 70.977396][ T29] audit: type=1326 audit(1745631136.321:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 70.997936][ T6474] loop1: detected capacity change from 0 to 2048 [ 71.000746][ T29] audit: type=1326 audit(1745631136.321:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.016165][ T6472] loop3: detected capacity change from 0 to 8192 [ 71.030394][ T29] audit: type=1326 audit(1745631136.321:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.060355][ T29] audit: type=1326 audit(1745631136.321:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.083878][ T29] audit: type=1326 audit(1745631136.321:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.107268][ T29] audit: type=1326 audit(1745631136.321:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.109419][ T6472] x_tables: duplicate underflow at hook 2 [ 71.130745][ T29] audit: type=1326 audit(1745631136.321:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.130778][ T29] audit: type=1326 audit(1745631136.321:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.183343][ T29] audit: type=1326 audit(1745631136.321:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6471 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb2363ee969 code=0x7ffc0000 [ 71.223130][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.240256][ T6474] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.315994][ T6493] siw: device registration error -23 [ 71.408998][ T6501] netlink: 'syz.3.500': attribute type 10 has an invalid length. [ 71.456012][ T6501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.476272][ T6501] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 71.488706][ T6503] loop8: detected capacity change from 0 to 8192 [ 71.546789][ T6503] x_tables: duplicate underflow at hook 2 [ 71.591958][ T6520] loop5: detected capacity change from 0 to 1024 [ 71.609264][ T6520] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 71.620057][ T6520] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 71.632833][ T6520] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #32: comm syz.5.504: iget: special inode unallocated [ 71.646661][ T6520] EXT4-fs (loop5): Remounting filesystem read-only [ 71.653377][ T6520] EXT4-fs (loop5): no journal found [ 71.658600][ T6520] EXT4-fs (loop5): can't get journal size [ 71.669617][ T6520] EXT4-fs (loop5): failed to initialize system zone (-117) [ 71.678283][ T6520] EXT4-fs (loop5): mount failed [ 71.694098][ T6528] loop8: detected capacity change from 0 to 512 [ 71.716114][ T6528] EXT4-fs (loop8): too many log groups per flexible block group [ 71.724074][ T6528] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 71.740489][ T6528] EXT4-fs (loop8): mount failed [ 71.774239][ T4119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.805297][ T6544] SELinux: Context  is not valid (left unmapped). [ 71.896648][ T6554] loop1: detected capacity change from 0 to 512 [ 71.934067][ T6554] EXT4-fs (loop1): too many log groups per flexible block group [ 71.942019][ T6554] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 71.949127][ T6566] __nla_validate_parse: 13 callbacks suppressed [ 71.949143][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.8.512'. [ 71.963192][ T6554] EXT4-fs (loop1): mount failed [ 72.095445][ T6582] netlink: 'syz.8.516': attribute type 10 has an invalid length. [ 72.134633][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.157649][ T6582] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 72.171949][ T6586] loop3: detected capacity change from 0 to 1024 [ 72.184964][ T6590] loop1: detected capacity change from 0 to 512 [ 72.198778][ T6586] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 72.214986][ T6586] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 72.237882][ T6590] EXT4-fs (loop1): too many log groups per flexible block group [ 72.245813][ T6590] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 72.272878][ T6586] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #32: comm syz.3.517: iget: special inode unallocated [ 72.303031][ T6590] EXT4-fs (loop1): mount failed [ 72.320976][ T6586] EXT4-fs (loop3): Remounting filesystem read-only [ 72.327654][ T6586] EXT4-fs (loop3): no journal found [ 72.332922][ T6586] EXT4-fs (loop3): can't get journal size [ 72.363588][ T6586] EXT4-fs (loop3): failed to initialize system zone (-117) [ 72.388687][ T6586] EXT4-fs (loop3): mount failed [ 72.398324][ T6618] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 72.411210][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 72.447915][ T6618] loop5: detected capacity change from 0 to 2048 [ 72.478008][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 72.748677][ T6659] netlink: 'syz.8.531': attribute type 10 has an invalid length. [ 72.819716][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.535'. [ 72.887409][ T6668] sit0: entered allmulticast mode [ 72.897465][ T6668] sit0: left allmulticast mode [ 72.954884][ T4214] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.987030][ T6684] loop8: detected capacity change from 0 to 512 [ 72.987841][ T4214] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 73.256246][ T6706] loop5: detected capacity change from 0 to 512 [ 73.265252][ T6706] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 73.274896][ T6706] syz.5.545: attempt to access beyond end of device [ 73.274896][ T6706] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 73.293978][ T6706] EXT4-fs (loop5): couldn't read superblock of external journal [ 73.354235][ T6716] siw: device registration error -23 [ 73.400228][ T6723] bond0: entered promiscuous mode [ 73.405439][ T6723] bond_slave_0: entered promiscuous mode [ 73.411390][ T6723] bond_slave_1: entered promiscuous mode [ 73.417337][ T6723] batadv0: entered promiscuous mode [ 73.429408][ T6723] bond0: left promiscuous mode [ 73.434331][ T6723] bond_slave_0: left promiscuous mode [ 73.439865][ T6723] bond_slave_1: left promiscuous mode [ 73.445497][ T6723] batadv0: left promiscuous mode [ 73.464131][ T6721] loop1: detected capacity change from 0 to 512 [ 73.482526][ T6721] journal_path: Non-blockdev passed as './bus' [ 73.488762][ T6721] EXT4-fs: error: could not find journal device path [ 73.635671][ T6742] loop5: detected capacity change from 0 to 512 [ 73.693542][ T6742] journal_path: Non-blockdev passed as './bus' [ 73.695716][ T6755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'. [ 73.699883][ T6742] EXT4-fs: error: could not find journal device path [ 73.722930][ T6759] siw: device registration error -23 [ 73.755022][ T6755] loop1: detected capacity change from 0 to 512 [ 73.796828][ T6755] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 73.821405][ T6755] syz.1.558: attempt to access beyond end of device [ 73.821405][ T6755] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 73.837794][ T6755] EXT4-fs (loop1): couldn't read superblock of external journal [ 73.923140][ T6773] loop4: detected capacity change from 0 to 1024 [ 73.943249][ T6773] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 73.958279][ T6773] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.981243][ T6779] loop3: detected capacity change from 0 to 512 [ 73.987509][ T6773] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.562: iget: special inode unallocated [ 74.000525][ T6773] EXT4-fs (loop4): Remounting filesystem read-only [ 74.007413][ T6773] EXT4-fs (loop4): no journal found [ 74.008713][ T6779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.012880][ T6773] EXT4-fs (loop4): can't get journal size [ 74.028106][ T6773] EXT4-fs (loop4): failed to initialize system zone (-117) [ 74.036193][ T6773] EXT4-fs (loop4): mount failed [ 74.052441][ T6779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.068578][ T6779] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.095336][ T4375] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.144466][ T6788] loop3: detected capacity change from 0 to 128 [ 74.189211][ T6791] loop4: detected capacity change from 0 to 512 [ 74.217144][ T6791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.238485][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 74.255849][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 74.256450][ T6791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.280480][ T6791] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.329642][ T6810] netlink: 176 bytes leftover after parsing attributes in process `syz.3.571'. [ 74.415714][ T6825] loop1: detected capacity change from 0 to 512 [ 74.423153][ T6825] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 74.460102][ T6830] netlink: 176 bytes leftover after parsing attributes in process `syz.5.576'. [ 74.475170][ T6825] syz.1.575: attempt to access beyond end of device [ 74.475170][ T6825] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 74.525718][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.538897][ T6845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=6845 comm=syz.3.579 [ 74.555389][ T6825] EXT4-fs (loop1): couldn't read superblock of external journal [ 74.570223][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.614146][ T6849] bond0: entered promiscuous mode [ 74.619260][ T6849] bond_slave_0: entered promiscuous mode [ 74.625148][ T6849] bond_slave_1: entered promiscuous mode [ 74.630997][ T6849] batadv0: entered promiscuous mode [ 74.650681][ T6849] bond0: left promiscuous mode [ 74.655661][ T6849] bond_slave_0: left promiscuous mode [ 74.661326][ T6849] bond_slave_1: left promiscuous mode [ 74.665308][ T6851] FAULT_INJECTION: forcing a failure. [ 74.665308][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 74.666829][ T6849] batadv0: left promiscuous mode [ 74.679410][ T6851] CPU: 1 UID: 0 PID: 6851 Comm: syz.1.581 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 74.679451][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 74.679467][ T6851] Call Trace: [ 74.679474][ T6851] [ 74.679484][ T6851] __dump_stack+0x1d/0x30 [ 74.679513][ T6851] dump_stack_lvl+0xe8/0x140 [ 74.679539][ T6851] dump_stack+0x15/0x1b [ 74.679628][ T6851] should_fail_ex+0x265/0x280 [ 74.679669][ T6851] should_failslab+0x8c/0xb0 [ 74.679706][ T6851] kmem_cache_alloc_noprof+0x50/0x310 [ 74.679814][ T6851] ? skb_clone+0x151/0x1f0 [ 74.679917][ T6851] skb_clone+0x151/0x1f0 [ 74.679939][ T6851] __netlink_deliver_tap+0x2c9/0x500 [ 74.679983][ T6851] netlink_unicast+0x64c/0x670 [ 74.680020][ T6851] netlink_sendmsg+0x58b/0x6b0 [ 74.680073][ T6851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.680171][ T6851] __sock_sendmsg+0x142/0x180 [ 74.680215][ T6851] ____sys_sendmsg+0x31e/0x4e0 [ 74.680260][ T6851] ___sys_sendmsg+0x17b/0x1d0 [ 74.680361][ T6851] __x64_sys_sendmsg+0xd4/0x160 [ 74.680444][ T6851] x64_sys_call+0x2999/0x2fb0 [ 74.680472][ T6851] do_syscall_64+0xd0/0x1a0 [ 74.680499][ T6851] ? clear_bhb_loop+0x25/0x80 [ 74.680594][ T6851] ? clear_bhb_loop+0x25/0x80 [ 74.680635][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.680723][ T6851] RIP: 0033:0x7f3aba32e969 [ 74.680742][ T6851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.680766][ T6851] RSP: 002b:00007f3ab8997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.680833][ T6851] RAX: ffffffffffffffda RBX: 00007f3aba555fa0 RCX: 00007f3aba32e969 [ 74.680849][ T6851] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 74.680865][ T6851] RBP: 00007f3ab8997090 R08: 0000000000000000 R09: 0000000000000000 [ 74.680881][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.680904][ T6851] R13: 0000000000000000 R14: 00007f3aba555fa0 R15: 00007ffe1b964cd8 [ 74.680928][ T6851] [ 74.945970][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 75.029724][ T6871] siw: device registration error -23 [ 75.049627][ T4524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.150640][ T6882] loop4: detected capacity change from 0 to 512 [ 75.253668][ T6900] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 75.296812][ T6902] loop3: detected capacity change from 0 to 1024 [ 75.308045][ T6902] EXT4-fs: Ignoring removed bh option [ 75.315469][ T6900] loop4: detected capacity change from 0 to 2048 [ 75.322577][ T6902] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.332973][ T6902] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 75.407646][ T6902] loop3: detected capacity change from 0 to 512 [ 75.454637][ T6902] EXT4-fs (loop3): too many log groups per flexible block group [ 75.462424][ T6902] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 75.481279][ T6902] EXT4-fs (loop3): mount failed [ 75.595373][ T6944] loop4: detected capacity change from 0 to 512 [ 75.661409][ T6944] EXT4-fs (loop4): too many log groups per flexible block group [ 75.669188][ T6944] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 75.699556][ T6944] EXT4-fs (loop4): mount failed [ 75.805483][ T7009] loop4: detected capacity change from 0 to 512 [ 75.818732][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 75.829252][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.846870][ T7009] EXT4-fs (loop4): too many log groups per flexible block group [ 75.854655][ T7009] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 75.864947][ T6998] loop5: detected capacity change from 0 to 512 [ 75.866782][ T7009] EXT4-fs (loop4): mount failed [ 75.964946][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 75.964963][ T29] audit: type=1326 audit(1745632167.342:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 76.042557][ T29] audit: type=1326 audit(1745632167.372:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 76.066017][ T29] audit: type=1326 audit(1745632167.372:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 76.089512][ T29] audit: type=1326 audit(1745632167.372:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 76.112921][ T29] audit: type=1326 audit(1745632167.372:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 76.136381][ T29] audit: type=1326 audit(1745632167.372:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6997 comm="syz.5.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 76.207570][ T7033] siw: device registration error -23 [ 76.221068][ T29] audit: type=1326 audit(1745632167.592:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09556c5927 code=0x7ffc0000 [ 76.244632][ T29] audit: type=1326 audit(1745632167.592:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f095566ab39 code=0x7ffc0000 [ 76.268014][ T29] audit: type=1326 audit(1745632167.592:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f09556c5927 code=0x7ffc0000 [ 76.291412][ T29] audit: type=1326 audit(1745632167.592:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f095566ab39 code=0x7ffc0000 [ 76.351474][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 76.388127][ T7037] loop5: detected capacity change from 0 to 128 [ 76.395922][ T9] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 76.470701][ T7044] xt_CT: No such helper "syz0" [ 76.483180][ T7035] loop4: detected capacity change from 0 to 8192 [ 76.523352][ T7035] x_tables: duplicate underflow at hook 2 [ 76.579152][ T7049] bond0: entered promiscuous mode [ 76.584444][ T7049] bond_slave_0: entered promiscuous mode [ 76.590319][ T7049] bond_slave_1: entered promiscuous mode [ 76.596165][ T7049] batadv0: entered promiscuous mode [ 76.614072][ T7049] bond0: left promiscuous mode [ 76.618976][ T7049] bond_slave_0: left promiscuous mode [ 76.624690][ T7049] bond_slave_1: left promiscuous mode [ 76.630238][ T7049] batadv0: left promiscuous mode [ 76.687335][ T7051] loop5: detected capacity change from 0 to 8192 [ 76.746907][ T7061] loop4: detected capacity change from 0 to 128 [ 76.764520][ T7062] loop3: detected capacity change from 0 to 128 [ 76.877019][ T7067] bond0: entered promiscuous mode [ 76.883509][ T7067] bond_slave_0: entered promiscuous mode [ 76.889470][ T7067] bond_slave_1: entered promiscuous mode [ 76.893663][ T7071] netlink: 'syz.4.618': attribute type 10 has an invalid length. [ 76.912245][ T7067] batadv0: entered promiscuous mode [ 76.918395][ T7067] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 76.930168][ T7067] bond0: left promiscuous mode [ 76.935115][ T7067] bond_slave_0: left promiscuous mode [ 76.940613][ T7073] loop3: detected capacity change from 0 to 128 [ 76.940764][ T7067] bond_slave_1: left promiscuous mode [ 76.966544][ T7074] loop5: detected capacity change from 0 to 512 [ 76.973721][ T7067] batadv0: left promiscuous mode [ 76.999148][ T7074] EXT4-fs (loop5): too many log groups per flexible block group [ 77.007036][ T7074] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 77.045496][ T7074] EXT4-fs (loop5): mount failed [ 77.115106][ T7089] xt_hashlimit: max too large, truncated to 1048576 [ 77.129386][ T7083] loop1: detected capacity change from 0 to 1024 [ 77.140080][ T7091] __nla_validate_parse: 3 callbacks suppressed [ 77.140096][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.628'. [ 77.158539][ T7083] EXT4-fs: Ignoring removed bh option [ 77.187275][ T7089] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.194809][ T7083] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 77.205266][ T7083] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 77.220542][ T7091] loop3: detected capacity change from 0 to 8192 [ 77.221620][ T7089] loop4: detected capacity change from 0 to 1024 [ 77.241721][ T7089] EXT4-fs: Ignoring removed nobh option [ 77.247415][ T7089] EXT4-fs: Ignoring removed bh option [ 77.253398][ T7083] loop1: detected capacity change from 0 to 512 [ 77.265092][ T7096] loop5: detected capacity change from 0 to 128 [ 77.270426][ T7091] x_tables: duplicate underflow at hook 2 [ 77.287769][ T7089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.350848][ T1051] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 77.357407][ T7083] EXT4-fs (loop1): too many log groups per flexible block group [ 77.366146][ T7083] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 77.366682][ T1051] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.395844][ T7104] sit0: entered allmulticast mode [ 77.401062][ T7083] EXT4-fs (loop1): mount failed [ 77.410200][ T7089] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.627: Allocating blocks 385-513 which overlap fs metadata [ 77.412194][ T7104] sit0: left allmulticast mode [ 77.548694][ T7088] EXT4-fs (loop4): pa ffff8881065cd070: logic 16, phys. 129, len 24 [ 77.556824][ T7088] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 77.562602][ T7112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 77.596525][ T4524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.610106][ T7110] loop5: detected capacity change from 0 to 512 [ 77.635305][ T7110] EXT4-fs (loop5): too many log groups per flexible block group [ 77.643302][ T7110] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 77.692225][ T7110] EXT4-fs (loop5): mount failed [ 77.733508][ T7113] loop1: detected capacity change from 0 to 8192 [ 77.804359][ T7122] bond0: entered promiscuous mode [ 77.809449][ T7122] bond_slave_0: entered promiscuous mode [ 77.815499][ T7122] bond_slave_1: entered promiscuous mode [ 77.821278][ T7122] batadv0: entered promiscuous mode [ 77.837046][ T7122] bond0: left promiscuous mode [ 77.842029][ T7122] bond_slave_0: left promiscuous mode [ 77.847621][ T7122] bond_slave_1: left promiscuous mode [ 77.853364][ T7122] batadv0: left promiscuous mode [ 77.919517][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.640'. [ 77.934466][ T7131] loop3: detected capacity change from 0 to 512 [ 77.965278][ T7131] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 77.982216][ T36] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 77.991478][ T7131] syz.3.640: attempt to access beyond end of device [ 77.991478][ T7131] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 78.000528][ T36] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 78.016308][ T7135] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.030909][ T7131] EXT4-fs (loop3): couldn't read superblock of external journal [ 78.159191][ T7141] loop1: detected capacity change from 0 to 512 [ 78.171237][ T7143] loop4: detected capacity change from 0 to 512 [ 78.223672][ T7148] bond0: entered promiscuous mode [ 78.228797][ T7148] bond_slave_0: entered promiscuous mode [ 78.234787][ T7148] bond_slave_1: entered promiscuous mode [ 78.243013][ T7148] batadv0: entered promiscuous mode [ 78.250134][ T7148] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 78.260800][ T7148] bond0: left promiscuous mode [ 78.265805][ T7148] bond_slave_0: left promiscuous mode [ 78.271378][ T7148] bond_slave_1: left promiscuous mode [ 78.277527][ T7148] batadv0: left promiscuous mode [ 78.379501][ T7154] netlink: 176 bytes leftover after parsing attributes in process `syz.1.650'. [ 78.404394][ T7156] bond0: entered promiscuous mode [ 78.409595][ T7156] bond_slave_0: entered promiscuous mode [ 78.415417][ T7156] bond_slave_1: entered promiscuous mode [ 78.421214][ T7156] batadv0: entered promiscuous mode [ 78.428477][ T7156] bond0: left promiscuous mode [ 78.433317][ T7156] bond_slave_0: left promiscuous mode [ 78.438820][ T7156] bond_slave_1: left promiscuous mode [ 78.444567][ T7156] batadv0: left promiscuous mode [ 78.578641][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.8.655'. [ 78.597645][ T7166] loop8: detected capacity change from 0 to 512 [ 78.613129][ T7166] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 78.627795][ T7166] syz.8.655: attempt to access beyond end of device [ 78.627795][ T7166] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 78.641309][ T7166] EXT4-fs (loop8): couldn't read superblock of external journal [ 78.660020][ T7168] loop3: detected capacity change from 0 to 1024 [ 78.673720][ T7168] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 78.683727][ T7168] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.694790][ T7168] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: inode #32: comm syz.3.656: iget: special inode unallocated [ 78.697191][ T7170] FAULT_INJECTION: forcing a failure. [ 78.697191][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 78.707890][ T7168] EXT4-fs (loop3): Remounting filesystem read-only [ 78.720061][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.1.657 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 78.720096][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.720113][ T7170] Call Trace: [ 78.720122][ T7170] [ 78.720195][ T7170] __dump_stack+0x1d/0x30 [ 78.720223][ T7170] dump_stack_lvl+0xe8/0x140 [ 78.720248][ T7170] dump_stack+0x15/0x1b [ 78.720291][ T7170] should_fail_ex+0x265/0x280 [ 78.720332][ T7170] should_failslab+0x8c/0xb0 [ 78.720369][ T7170] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 78.720413][ T7170] ? __d_alloc+0x3d/0x350 [ 78.720530][ T7170] __d_alloc+0x3d/0x350 [ 78.720634][ T7170] ? mpol_shared_policy_init+0xbd/0x4c0 [ 78.720666][ T7170] d_alloc_pseudo+0x1e/0x80 [ 78.720706][ T7170] alloc_file_pseudo+0x71/0x160 [ 78.720791][ T7170] __shmem_file_setup+0x1b9/0x1f0 [ 78.720825][ T7170] shmem_file_setup+0x3b/0x50 [ 78.720855][ T7170] __se_sys_memfd_create+0x2c3/0x590 [ 78.720889][ T7170] __x64_sys_memfd_create+0x31/0x40 [ 78.720988][ T7170] x64_sys_call+0x122f/0x2fb0 [ 78.721014][ T7170] do_syscall_64+0xd0/0x1a0 [ 78.721041][ T7170] ? clear_bhb_loop+0x25/0x80 [ 78.721069][ T7170] ? clear_bhb_loop+0x25/0x80 [ 78.721117][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.721144][ T7170] RIP: 0033:0x7f3aba32e969 [ 78.721163][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.721211][ T7170] RSP: 002b:00007f3ab8996e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 78.721235][ T7170] RAX: ffffffffffffffda RBX: 000000000000045c RCX: 00007f3aba32e969 [ 78.721252][ T7170] RDX: 00007f3ab8996ef0 RSI: 0000000000000000 RDI: 00007f3aba3b1444 [ 78.721268][ T7170] RBP: 0000200000002400 R08: 00007f3ab8996bb7 R09: 00007f3ab8996e40 [ 78.721284][ T7170] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 78.721299][ T7170] R13: 00007f3ab8996ef0 R14: 00007f3ab8996eb0 R15: 0000200000000680 [ 78.721324][ T7170] [ 78.927473][ T7168] EXT4-fs (loop3): no journal found [ 78.932692][ T7168] EXT4-fs (loop3): can't get journal size [ 78.939089][ T7168] EXT4-fs (loop3): failed to initialize system zone (-117) [ 78.947761][ T7168] EXT4-fs (loop3): mount failed [ 78.964342][ T7173] loop1: detected capacity change from 0 to 512 [ 78.973095][ T7173] EXT4-fs: Ignoring removed nobh option [ 78.979558][ T7173] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.005722][ T7173] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #16: comm syz.1.658: corrupted inode contents [ 79.017893][ T7173] EXT4-fs (loop1): Remounting filesystem read-only [ 79.024652][ T7173] EXT4-fs (loop1): 1 truncate cleaned up [ 79.030647][ T7173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.044260][ T7173] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.045124][ T6977] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.065426][ T6977] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 79.078088][ T6977] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 79.093271][ T4119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.129458][ T7179] bond0: entered promiscuous mode [ 79.134738][ T7179] bond_slave_0: entered promiscuous mode [ 79.140486][ T7179] bond_slave_1: entered promiscuous mode [ 79.146281][ T7179] batadv0: entered promiscuous mode [ 79.168959][ T7179] bond0: left promiscuous mode [ 79.173855][ T7179] bond_slave_0: left promiscuous mode [ 79.179476][ T7179] bond_slave_1: left promiscuous mode [ 79.184941][ T7179] batadv0: left promiscuous mode [ 79.202308][ T7180] xt_CT: No such helper "syz0" [ 79.210688][ T7180] bridge0: port 3(gretap0) entered blocking state [ 79.217320][ T7180] bridge0: port 3(gretap0) entered disabled state [ 79.233740][ T7180] gretap0: entered allmulticast mode [ 79.240243][ T7180] gretap0: entered promiscuous mode [ 79.251918][ T7180] bridge0: port 3(gretap0) entered blocking state [ 79.258540][ T7180] bridge0: port 3(gretap0) entered forwarding state [ 79.265414][ T7188] loop5: detected capacity change from 0 to 512 [ 79.289965][ T7191] bond0: entered promiscuous mode [ 79.295239][ T7191] bond_slave_0: entered promiscuous mode [ 79.301058][ T7191] bond_slave_1: entered promiscuous mode [ 79.306856][ T7191] batadv0: entered promiscuous mode [ 79.315841][ T7186] loop1: detected capacity change from 0 to 1024 [ 79.324694][ T7186] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 79.339502][ T7186] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 79.344112][ T7195] loop3: detected capacity change from 0 to 128 [ 79.351205][ T7186] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.662: iget: special inode unallocated [ 79.361155][ T7191] bond0: left promiscuous mode [ 79.373448][ T7191] bond_slave_0: left promiscuous mode [ 79.378995][ T7191] bond_slave_1: left promiscuous mode [ 79.384627][ T7191] batadv0: left promiscuous mode [ 79.401905][ T7188] EXT4-fs (loop5): too many log groups per flexible block group [ 79.407945][ T7199] loop8: detected capacity change from 0 to 512 [ 79.409663][ T7188] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 79.439498][ T7201] loop8: detected capacity change from 0 to 128 [ 79.442716][ T7186] EXT4-fs (loop1): Remounting filesystem read-only [ 79.452502][ T7186] EXT4-fs (loop1): no journal found [ 79.457741][ T7186] EXT4-fs (loop1): can't get journal size [ 79.477576][ T7188] EXT4-fs (loop5): mount failed [ 79.488395][ T7186] EXT4-fs (loop1): failed to initialize system zone (-117) [ 79.496418][ T7186] EXT4-fs (loop1): mount failed [ 79.510196][ T7204] loop3: detected capacity change from 0 to 512 [ 79.510666][ T7204] journal_path: Non-blockdev passed as './bus' [ 79.510700][ T7204] EXT4-fs: error: could not find journal device path [ 79.601029][ T7209] netlink: 72 bytes leftover after parsing attributes in process `syz.8.671'. [ 79.627820][ T7212] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 79.629624][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.675'. [ 79.652821][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 79.653299][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.655024][ T7209] loop8: detected capacity change from 0 to 1024 [ 79.655380][ T7209] EXT4-fs: Ignoring removed nobh option [ 79.711001][ T7221] FAULT_INJECTION: forcing a failure. [ 79.711001][ T7221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.737473][ T7224] sit0: entered allmulticast mode [ 79.738034][ T7221] CPU: 0 UID: 0 PID: 7221 Comm: syz.3.677 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 79.738150][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.738220][ T7221] Call Trace: [ 79.738227][ T7221] [ 79.738234][ T7221] __dump_stack+0x1d/0x30 [ 79.738306][ T7221] dump_stack_lvl+0xe8/0x140 [ 79.738327][ T7221] dump_stack+0x15/0x1b [ 79.738346][ T7221] should_fail_ex+0x265/0x280 [ 79.738387][ T7221] should_fail+0xb/0x20 [ 79.738423][ T7221] should_fail_usercopy+0x1a/0x20 [ 79.738543][ T7221] _copy_from_user+0x1c/0xb0 [ 79.738570][ T7221] __sys_bpf+0x178/0x790 [ 79.738615][ T7221] __x64_sys_bpf+0x41/0x50 [ 79.738708][ T7221] x64_sys_call+0x2478/0x2fb0 [ 79.738736][ T7221] do_syscall_64+0xd0/0x1a0 [ 79.738781][ T7221] ? clear_bhb_loop+0x25/0x80 [ 79.738810][ T7221] ? clear_bhb_loop+0x25/0x80 [ 79.738864][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.738890][ T7221] RIP: 0033:0x7fb2363ee969 [ 79.738910][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.738933][ T7221] RSP: 002b:00007fb234a57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.738957][ T7221] RAX: ffffffffffffffda RBX: 00007fb236615fa0 RCX: 00007fb2363ee969 [ 79.739021][ T7221] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 79.739037][ T7221] RBP: 00007fb234a57090 R08: 0000000000000000 R09: 0000000000000000 [ 79.739058][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.739073][ T7221] R13: 0000000000000000 R14: 00007fb236615fa0 R15: 00007ffc0414c868 [ 79.739098][ T7221] [ 79.896499][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.5.679'. [ 79.949502][ T7209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.981627][ T7226] loop5: detected capacity change from 0 to 8192 [ 79.999297][ T7226] x_tables: duplicate underflow at hook 2 [ 80.067067][ T4026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.085568][ T7240] loop1: detected capacity change from 0 to 512 [ 80.109284][ T7240] EXT4-fs (loop1): too many log groups per flexible block group [ 80.117134][ T7240] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 80.131932][ T7244] loop5: detected capacity change from 0 to 512 [ 80.138465][ T7240] EXT4-fs (loop1): mount failed [ 80.157719][ T7244] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 80.167643][ T7244] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 80.176332][ T7249] loop8: detected capacity change from 0 to 512 [ 80.193333][ T7244] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.686: iget: special inode unallocated [ 80.210991][ T7249] journal_path: Non-blockdev passed as './bus' [ 80.217285][ T7249] EXT4-fs: error: could not find journal device path [ 80.240759][ T7244] EXT4-fs (loop5): get root inode failed [ 80.246696][ T7244] EXT4-fs (loop5): mount failed [ 80.259839][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 80.333760][ T36] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 80.346604][ T36] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 80.414956][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.423380][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.427808][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.441946][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.444863][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.458483][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.460488][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.487642][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.642964][ T7268] sit0: entered allmulticast mode [ 80.810283][ T7272] bond0: entered promiscuous mode [ 80.815633][ T7272] bond_slave_0: entered promiscuous mode [ 80.821541][ T7272] bond_slave_1: entered promiscuous mode [ 80.827438][ T7272] batadv0: entered promiscuous mode [ 80.834037][ T7272] bond0: left promiscuous mode [ 80.838836][ T7272] bond_slave_0: left promiscuous mode [ 80.844444][ T7272] bond_slave_1: left promiscuous mode [ 80.849940][ T7272] batadv0: left promiscuous mode [ 80.940211][ T7276] xt_CT: No such helper "syz0" [ 81.028322][ T7281] loop4: detected capacity change from 0 to 2048 [ 81.072401][ T3380] loop4: p1 < > p3 [ 81.077916][ T3380] loop4: p3 size 134217728 extends beyond EOD, truncated [ 81.127674][ T7281] loop4: p1 < > p3 [ 81.132906][ T7281] loop4: p3 size 134217728 extends beyond EOD, truncated [ 81.140271][ T7285] loop1: detected capacity change from 0 to 1024 [ 81.148401][ T7285] EXT4-fs: Ignoring removed bh option [ 81.155404][ T7285] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.165766][ T7285] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 81.183814][ T7285] loop1: detected capacity change from 0 to 512 [ 81.220376][ T7285] EXT4-fs (loop1): too many log groups per flexible block group [ 81.228422][ T7285] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 81.236677][ T7285] EXT4-fs (loop1): mount failed [ 81.242521][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 81.242537][ T29] audit: type=1326 audit(1745632685.624:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7280 comm="syz.4.700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x0 [ 81.272144][ T29] audit: type=1326 audit(1745632685.624:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 81.295798][ T29] audit: type=1326 audit(1745632685.624:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7284 comm="syz.1.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 81.387186][ T7293] loop1: detected capacity change from 0 to 2048 [ 81.422464][ T3380] loop1: p1 < > p3 [ 81.427371][ T3380] loop1: p3 size 134217728 extends beyond EOD, truncated [ 81.476777][ T7293] loop1: p1 < > p3 [ 81.483141][ T7293] loop1: p3 size 134217728 extends beyond EOD, truncated [ 81.558389][ T29] audit: type=1326 audit(1745632685.934:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.3.705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2363ee969 code=0x0 [ 81.581429][ T29] audit: type=1326 audit(1745632685.934:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7292 comm="syz.1.702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x0 [ 81.964594][ T7316] loop4: detected capacity change from 0 to 1024 [ 81.971615][ T7316] EXT4-fs: Ignoring removed bh option [ 81.978920][ T7316] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.989361][ T7316] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 82.004083][ T7316] loop4: detected capacity change from 0 to 512 [ 82.024646][ T7316] EXT4-fs (loop4): too many log groups per flexible block group [ 82.032605][ T7316] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 82.039498][ T7316] EXT4-fs (loop4): mount failed [ 82.049082][ T29] audit: type=1326 audit(1745632686.424:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 82.072879][ T29] audit: type=1326 audit(1745632686.444:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7315 comm="syz.4.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 82.149969][ T29] audit: type=1326 audit(1745632686.524:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 82.175609][ T29] audit: type=1326 audit(1745632686.524:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 82.199001][ T29] audit: type=1326 audit(1745632686.524:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7322 comm="syz.4.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 82.302037][ T7334] loop1: detected capacity change from 0 to 512 [ 82.309196][ T7334] journal_path: Non-blockdev passed as './bus' [ 82.315771][ T7334] EXT4-fs: error: could not find journal device path [ 82.370683][ T7339] loop1: detected capacity change from 0 to 128 [ 82.446625][ T7344] loop4: detected capacity change from 0 to 2048 [ 82.459193][ T36] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 82.484542][ T36] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.507141][ T7344] loop4: p1 < > p3 [ 82.524827][ T7344] loop4: p3 size 134217728 extends beyond EOD, truncated [ 82.528750][ T7348] loop1: detected capacity change from 0 to 1024 [ 82.542029][ T7348] EXT4-fs: Ignoring removed bh option [ 82.566766][ T7348] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.577268][ T7348] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 82.596467][ T7348] loop1: detected capacity change from 0 to 512 [ 82.633957][ T7348] EXT4-fs (loop1): too many log groups per flexible block group [ 82.641970][ T7348] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 82.648902][ T7348] EXT4-fs (loop1): mount failed [ 82.728528][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.721'. [ 82.770796][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.722'. [ 82.809723][ T7359] loop1: detected capacity change from 0 to 8192 [ 82.825188][ T7359] x_tables: duplicate underflow at hook 2 [ 82.946804][ T7368] loop1: detected capacity change from 0 to 512 [ 82.963965][ T7368] EXT4-fs (loop1): too many log groups per flexible block group [ 82.971851][ T7368] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 82.978680][ T7368] EXT4-fs (loop1): mount failed [ 83.014240][ T7372] bond0: entered promiscuous mode [ 83.019404][ T7372] bond_slave_0: entered promiscuous mode [ 83.025496][ T7372] bond_slave_1: entered promiscuous mode [ 83.032573][ T7372] batadv0: entered promiscuous mode [ 83.038545][ T7372] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.047784][ T7372] bond0: left promiscuous mode [ 83.052598][ T7372] bond_slave_0: left promiscuous mode [ 83.058077][ T7372] bond_slave_1: left promiscuous mode [ 83.064207][ T7372] batadv0: left promiscuous mode [ 83.244425][ T7376] bond0: entered promiscuous mode [ 83.249594][ T7376] bond_slave_0: entered promiscuous mode [ 83.255607][ T7376] bond_slave_1: entered promiscuous mode [ 83.264791][ T7376] batadv0: entered promiscuous mode [ 83.271107][ T7376] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.283630][ T7376] bond0: left promiscuous mode [ 83.288600][ T7376] bond_slave_0: left promiscuous mode [ 83.294692][ T7376] bond_slave_1: left promiscuous mode [ 83.302050][ T7376] batadv0: left promiscuous mode [ 83.340099][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 83.403355][ T7384] loop1: detected capacity change from 0 to 1024 [ 83.410898][ T7384] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 83.423531][ T7384] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.435141][ T7384] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.731: iget: special inode unallocated [ 83.456736][ T7389] loop8: detected capacity change from 0 to 512 [ 83.474228][ T7384] EXT4-fs (loop1): Remounting filesystem read-only [ 83.480992][ T7384] EXT4-fs (loop1): no journal found [ 83.486299][ T7384] EXT4-fs (loop1): can't get journal size [ 83.495464][ T7384] EXT4-fs (loop1): failed to initialize system zone (-117) [ 83.505687][ T7384] EXT4-fs (loop1): mount failed [ 83.527092][ T7387] loop5: detected capacity change from 0 to 512 [ 83.566835][ T7397] loop8: detected capacity change from 0 to 512 [ 83.610840][ T7397] journal_path: Non-blockdev passed as './bus' [ 83.614841][ T7392] loop3: detected capacity change from 0 to 8192 [ 83.617104][ T7397] EXT4-fs: error: could not find journal device path [ 83.627497][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.737'. [ 83.640391][ T7401] loop1: detected capacity change from 0 to 128 [ 83.662187][ T7401] msdos: Unknown parameter '' [ 83.713143][ T7403] loop8: detected capacity change from 0 to 1024 [ 83.735286][ T7403] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 83.746591][ T7399] loop5: detected capacity change from 0 to 8192 [ 83.760353][ T7403] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 83.777601][ T7403] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.739: iget: special inode unallocated [ 83.806402][ T7403] EXT4-fs (loop8): Remounting filesystem read-only [ 83.813138][ T7403] EXT4-fs (loop8): no journal found [ 83.818399][ T7403] EXT4-fs (loop8): can't get journal size [ 83.824623][ T7395] loop4: detected capacity change from 0 to 8192 [ 83.826610][ T7403] EXT4-fs (loop8): failed to initialize system zone (-117) [ 83.838691][ T7403] EXT4-fs (loop8): mount failed [ 83.887351][ T7408] loop3: detected capacity change from 0 to 2048 [ 83.889410][ T7405] bond0: entered promiscuous mode [ 83.899033][ T7405] bond_slave_0: entered promiscuous mode [ 83.904850][ T7405] bond_slave_1: entered promiscuous mode [ 83.919302][ T7411] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.934075][ T7405] batadv0: entered promiscuous mode [ 83.940044][ T7405] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 83.946381][ T7414] loop5: detected capacity change from 0 to 512 [ 83.963637][ T3472] loop3: p1 < > p3 [ 83.973535][ T3472] loop3: p3 size 134217728 extends beyond EOD, truncated [ 83.984936][ T7405] bond0: left promiscuous mode [ 83.989769][ T7405] bond_slave_0: left promiscuous mode [ 83.995544][ T7405] bond_slave_1: left promiscuous mode [ 84.009768][ T7416] loop5: detected capacity change from 0 to 128 [ 84.021750][ T7405] batadv0: left promiscuous mode [ 84.052919][ T7418] bond0: entered promiscuous mode [ 84.058017][ T7418] bond_slave_0: entered promiscuous mode [ 84.063825][ T7418] bond_slave_1: entered promiscuous mode [ 84.069595][ T7418] batadv0: entered promiscuous mode [ 84.089728][ T7418] bond0: left promiscuous mode [ 84.094619][ T7418] bond_slave_0: left promiscuous mode [ 84.100211][ T7418] bond_slave_1: left promiscuous mode [ 84.105856][ T7418] batadv0: left promiscuous mode [ 84.137986][ T7408] loop3: p1 < > p3 [ 84.142750][ T7408] loop3: p3 size 134217728 extends beyond EOD, truncated [ 84.168425][ T7429] loop8: detected capacity change from 0 to 1024 [ 84.180951][ T7432] siw: device registration error -23 [ 84.181830][ T7429] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 84.212229][ T7425] loop5: detected capacity change from 0 to 1024 [ 84.221452][ T7425] EXT4-fs: Ignoring removed bh option [ 84.227108][ T7429] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 84.246764][ T7429] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.749: iget: special inode unallocated [ 84.261236][ T7425] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.261959][ T7429] EXT4-fs (loop8): Remounting filesystem read-only [ 84.271618][ T7425] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 84.278154][ T7429] EXT4-fs (loop8): no journal found [ 84.278169][ T7429] EXT4-fs (loop8): can't get journal size [ 84.335709][ T7434] loop4: detected capacity change from 0 to 512 [ 84.352407][ T7425] loop5: detected capacity change from 0 to 512 [ 84.366542][ T7425] EXT4-fs (loop5): too many log groups per flexible block group [ 84.366634][ T7429] EXT4-fs (loop8): failed to initialize system zone (-117) [ 84.366661][ T7429] EXT4-fs (loop8): mount failed [ 84.374410][ T7425] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 84.394598][ T7438] loop1: detected capacity change from 0 to 8192 [ 84.402628][ T7425] EXT4-fs (loop5): mount failed [ 84.436853][ T7434] EXT4-fs (loop4): too many log groups per flexible block group [ 84.444641][ T7434] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 84.451951][ T7434] EXT4-fs (loop4): mount failed [ 84.544614][ T7451] bond0: entered promiscuous mode [ 84.549811][ T7451] bond_slave_0: entered promiscuous mode [ 84.555666][ T7451] bond_slave_1: entered promiscuous mode [ 84.561425][ T7451] batadv0: entered promiscuous mode [ 84.561962][ T7454] loop8: detected capacity change from 0 to 128 [ 84.571589][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.5.756'. [ 84.583787][ T7451] bond0: left promiscuous mode [ 84.588583][ T7451] bond_slave_0: left promiscuous mode [ 84.594140][ T7451] bond_slave_1: left promiscuous mode [ 84.599588][ T7451] batadv0: left promiscuous mode [ 84.616378][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.623907][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.625986][ T7456] netlink: 'syz.1.754': attribute type 10 has an invalid length. [ 84.639494][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.647003][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.672035][ T7456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.703815][ T7456] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.715092][ T7460] bond0: entered promiscuous mode [ 84.720256][ T7460] bond_slave_0: entered promiscuous mode [ 84.726151][ T7460] bond_slave_1: entered promiscuous mode [ 84.731938][ T7460] batadv0: entered promiscuous mode [ 84.740490][ T7460] bond0: left promiscuous mode [ 84.745341][ T7460] bond_slave_0: left promiscuous mode [ 84.750822][ T7460] bond_slave_1: left promiscuous mode [ 84.756392][ T7460] batadv0: left promiscuous mode [ 84.864044][ T7466] loop4: detected capacity change from 0 to 1024 [ 84.873222][ T7466] EXT4-fs: Ignoring removed bh option [ 84.884536][ T7466] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.894924][ T7466] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 84.946395][ T7479] bond0: entered promiscuous mode [ 84.951489][ T7479] bond_slave_0: entered promiscuous mode [ 84.957302][ T7479] bond_slave_1: entered promiscuous mode [ 84.963174][ T7479] batadv0: entered promiscuous mode [ 84.971606][ T7481] xt_CT: No such helper "syz0" [ 84.976906][ T7466] loop4: detected capacity change from 0 to 512 [ 84.986163][ T7479] bond0: left promiscuous mode [ 84.990991][ T7479] bond_slave_0: left promiscuous mode [ 84.996595][ T7479] bond_slave_1: left promiscuous mode [ 85.002146][ T7479] batadv0: left promiscuous mode [ 85.036675][ T7488] loop1: detected capacity change from 0 to 128 [ 85.056414][ T7466] EXT4-fs (loop4): too many log groups per flexible block group [ 85.064202][ T7466] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 85.071482][ T7466] EXT4-fs (loop4): mount failed [ 85.120923][ T7494] loop1: detected capacity change from 0 to 2048 [ 85.163465][ T7498] loop4: detected capacity change from 0 to 128 [ 85.182135][ T3380] loop1: p1 < > p3 [ 85.186629][ T3380] loop1: p3 size 134217728 extends beyond EOD, truncated [ 85.202384][ T7498] msdos: Unknown parameter '' [ 85.217762][ T7505] siw: device registration error -23 [ 85.228522][ T7502] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 85.272922][ T7510] siw: device registration error -23 [ 85.301188][ T7494] loop1: p1 < > p3 [ 85.305748][ T7494] loop1: p3 size 134217728 extends beyond EOD, truncated [ 85.364430][ T7518] loop5: detected capacity change from 0 to 128 [ 85.386081][ T7514] loop3: detected capacity change from 0 to 8192 [ 85.399509][ T7520] loop8: detected capacity change from 0 to 128 [ 85.438282][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.784'. [ 85.507938][ T7525] loop5: detected capacity change from 0 to 1024 [ 85.515099][ T7525] EXT4-fs: Ignoring removed bh option [ 85.523284][ T7527] bond0: entered promiscuous mode [ 85.528458][ T7527] bond_slave_0: entered promiscuous mode [ 85.533990][ T7525] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.534252][ T7527] bond_slave_1: entered promiscuous mode [ 85.544435][ T7525] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 85.550197][ T7527] batadv0: entered promiscuous mode [ 85.565489][ T7527] bond0: left promiscuous mode [ 85.570309][ T7527] bond_slave_0: left promiscuous mode [ 85.575929][ T7527] bond_slave_1: left promiscuous mode [ 85.581437][ T7527] batadv0: left promiscuous mode [ 85.584787][ T7525] loop5: detected capacity change from 0 to 512 [ 85.602309][ T7523] bond1: entered promiscuous mode [ 85.603129][ T7525] EXT4-fs (loop5): too many log groups per flexible block group [ 85.607385][ T7523] bond1: entered allmulticast mode [ 85.615079][ T7525] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 85.622196][ T7523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.632383][ T7525] EXT4-fs (loop5): mount failed [ 85.641162][ T7536] loop4: detected capacity change from 0 to 1024 [ 85.649251][ T7536] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.662240][ T7536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.697848][ T7540] loop8: detected capacity change from 0 to 2048 [ 85.722249][ T7542] loop5: detected capacity change from 0 to 512 [ 85.745900][ T7542] EXT4-fs (loop5): too many log groups per flexible block group [ 85.753676][ T7542] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 85.757093][ T7546] loop3: detected capacity change from 0 to 256 [ 85.768811][ T7542] EXT4-fs (loop5): mount failed [ 85.773976][ T3380] loop8: p1 < > p3 [ 85.779200][ T3380] loop8: p3 size 134217728 extends beyond EOD, truncated [ 85.815836][ T4524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.856172][ T7553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.791'. [ 85.868315][ T7553] loop4: detected capacity change from 0 to 512 [ 85.875882][ T7540] loop8: p1 < > p3 [ 85.880699][ T7540] loop8: p3 size 134217728 extends beyond EOD, truncated [ 85.889827][ T7553] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 85.900665][ T7553] syz.4.791: attempt to access beyond end of device [ 85.900665][ T7553] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 85.923365][ T7553] EXT4-fs (loop4): couldn't read superblock of external journal [ 86.092965][ T7570] loop1: detected capacity change from 0 to 8192 [ 86.169849][ T7583] loop1: detected capacity change from 0 to 1024 [ 86.182994][ T7583] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 86.194200][ T7583] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 86.208921][ T6977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.224098][ T7581] loop5: detected capacity change from 0 to 512 [ 86.233967][ T7583] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.800: iget: special inode unallocated [ 86.256032][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 86.256047][ T29] audit: type=1326 audit(1745632690.634:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 86.287676][ T7583] EXT4-fs (loop1): Remounting filesystem read-only [ 86.294568][ T7583] EXT4-fs (loop1): no journal found [ 86.297427][ T29] audit: type=1326 audit(1745632690.644:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7580 comm="syz.5.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 86.300021][ T7583] EXT4-fs (loop1): can't get journal size [ 86.332543][ T29] audit: type=1400 audit(1745632690.714:3805): avc: denied { mounton } for pid=7586 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 86.339630][ T7583] EXT4-fs (loop1): failed to initialize system zone (-117) [ 86.384948][ T6977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.397046][ T7583] EXT4-fs (loop1): mount failed [ 86.418566][ T7594] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.447840][ T6977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.483853][ T29] audit: type=1326 audit(1745632690.864:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 86.507438][ T29] audit: type=1326 audit(1745632690.864:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 86.522942][ T7599] loop4: detected capacity change from 0 to 8192 [ 86.530929][ T29] audit: type=1326 audit(1745632690.864:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 86.541052][ T4214] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 86.560487][ T29] audit: type=1326 audit(1745632690.864:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 86.591375][ T29] audit: type=1326 audit(1745632690.864:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 86.614733][ T29] audit: type=1326 audit(1745632690.864:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 86.638218][ T29] audit: type=1326 audit(1745632690.864:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.4.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f09556ce969 code=0x7ffc0000 [ 86.670479][ T7586] dummy0 speed is unknown, defaulting to 1000 [ 86.677707][ T4214] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.768827][ T6977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.790896][ T7606] bond0: entered promiscuous mode [ 86.796136][ T7606] bond_slave_0: entered promiscuous mode [ 86.802069][ T7606] bond_slave_1: entered promiscuous mode [ 86.807867][ T7606] batadv0: entered promiscuous mode [ 86.815993][ T7606] bond0: left promiscuous mode [ 86.820816][ T7606] bond_slave_0: left promiscuous mode [ 86.826392][ T7606] bond_slave_1: left promiscuous mode [ 86.832023][ T7606] batadv0: left promiscuous mode [ 86.845636][ T7612] all: renamed from lo [ 86.870434][ T7612] bridge0: entered promiscuous mode [ 86.877334][ T7612] bridge0: port 4(macsec0) entered blocking state [ 86.883964][ T7612] bridge0: port 4(macsec0) entered disabled state [ 86.890583][ T7612] macsec0: entered allmulticast mode [ 86.895950][ T7612] bridge0: entered allmulticast mode [ 86.901825][ T7612] macsec0: left allmulticast mode [ 86.906876][ T7612] bridge0: left allmulticast mode [ 86.921603][ T7612] bridge0: left promiscuous mode [ 86.998522][ T6977] gretap0: left allmulticast mode [ 87.003719][ T6977] gretap0: left promiscuous mode [ 87.008802][ T6977] bridge0: port 3(gretap0) entered disabled state [ 87.029845][ T6977] bridge_slave_1: left allmulticast mode [ 87.035685][ T6977] bridge_slave_1: left promiscuous mode [ 87.041447][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.050408][ T6977] bridge_slave_0: left allmulticast mode [ 87.056273][ T6977] bridge_slave_0: left promiscuous mode [ 87.062021][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.179009][ T7626] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 87.195692][ T6977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.206096][ T6977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.216741][ T6977] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 87.228841][ T6977] bond0 (unregistering): Released all slaves [ 87.239218][ T7625] bond0: entered promiscuous mode [ 87.244372][ T7625] bond_slave_0: entered promiscuous mode [ 87.250235][ T7625] bond_slave_1: entered promiscuous mode [ 87.256077][ T7625] batadv0: entered promiscuous mode [ 87.263134][ T7625] bond0: left promiscuous mode [ 87.267923][ T7625] bond_slave_0: left promiscuous mode [ 87.273402][ T7625] bond_slave_1: left promiscuous mode [ 87.278963][ T7625] batadv0: left promiscuous mode [ 87.292348][ T7586] chnl_net:caif_netlink_parms(): no params data found [ 87.316286][ T6977] hsr_slave_0: left promiscuous mode [ 87.324103][ T6977] hsr_slave_1: left promiscuous mode [ 87.330564][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.338082][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.356131][ T6977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.363771][ T6977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.371996][ T7631] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.386066][ T6977] veth1_macvtap: left promiscuous mode [ 87.391799][ T6977] veth0_macvtap: left promiscuous mode [ 87.401808][ T6977] veth1_vlan: left promiscuous mode [ 87.407134][ T6977] veth0_vlan: left promiscuous mode [ 87.416569][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.817'. [ 87.456997][ T7639] loop4: detected capacity change from 0 to 128 [ 87.525526][ T7644] netlink: 176 bytes leftover after parsing attributes in process `syz.5.820'. [ 87.535504][ T6977] team0 (unregistering): Port device team_slave_1 removed [ 87.547861][ T6977] team0 (unregistering): Port device team_slave_0 removed [ 87.601535][ T9] dummy0 speed is unknown, defaulting to 1000 [ 87.606981][ T7635] bond0: entered promiscuous mode [ 87.607739][ T9] infiniband syz2: ib_query_port failed (-19) [ 87.612710][ T7635] bond_slave_0: entered promiscuous mode [ 87.612854][ T7635] bond_slave_1: entered promiscuous mode [ 87.630234][ T7635] batadv0: entered promiscuous mode [ 87.637088][ T7635] bond0: left promiscuous mode [ 87.641950][ T7635] bond_slave_0: left promiscuous mode [ 87.647448][ T7635] bond_slave_1: left promiscuous mode [ 87.653017][ T7635] batadv0: left promiscuous mode [ 87.694543][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.701635][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.709089][ T7586] bridge_slave_0: entered allmulticast mode [ 87.715807][ T7586] bridge_slave_0: entered promiscuous mode [ 87.722979][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.730133][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.737512][ T7586] bridge_slave_1: entered allmulticast mode [ 87.744087][ T7586] bridge_slave_1: entered promiscuous mode [ 87.749100][ T7656] loop5: detected capacity change from 0 to 512 [ 87.795592][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.812872][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.825'. [ 87.817541][ T7662] xt_CT: No such helper "syz0" [ 87.827829][ T7660] loop5: detected capacity change from 0 to 128 [ 87.833327][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.869776][ T7665] loop1: detected capacity change from 0 to 1024 [ 87.884890][ T7586] team0: Port device team_slave_0 added [ 87.892811][ T7586] team0: Port device team_slave_1 added [ 87.905262][ T7665] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 87.925396][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 87.925847][ T7665] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 87.944616][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.951803][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.977831][ T7586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.990765][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 87.991244][ T7665] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.828: iget: special inode unallocated [ 88.027361][ T7670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.830'. [ 88.043080][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.046906][ T7670] loop4: detected capacity change from 0 to 512 [ 88.050101][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.082403][ T7586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.093318][ T7665] EXT4-fs (loop1): Remounting filesystem read-only [ 88.099907][ T7665] EXT4-fs (loop1): no journal found [ 88.105206][ T7665] EXT4-fs (loop1): can't get journal size [ 88.113067][ T7670] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 88.122314][ T7665] EXT4-fs (loop1): failed to initialize system zone (-117) [ 88.129664][ T7665] EXT4-fs (loop1): mount failed [ 88.130447][ T7670] syz.4.830: attempt to access beyond end of device [ 88.130447][ T7670] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 88.148371][ T7670] EXT4-fs (loop4): couldn't read superblock of external journal [ 88.204076][ T7586] hsr_slave_0: entered promiscuous mode [ 88.204884][ T7676] netlink: 176 bytes leftover after parsing attributes in process `syz.4.831'. [ 88.230410][ T7586] hsr_slave_1: entered promiscuous mode [ 88.234410][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.832'. [ 88.280834][ T7675] bond1: entered promiscuous mode [ 88.286087][ T7675] bond1: entered allmulticast mode [ 88.295152][ T7675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.301261][ T7681] netlink: 20 bytes leftover after parsing attributes in process `syz.4.834'. [ 88.321831][ T7681] loop4: detected capacity change from 0 to 512 [ 88.343522][ T7681] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 88.355485][ T7675] loop1: detected capacity change from 0 to 1024 [ 88.358344][ T7681] syz.4.834: attempt to access beyond end of device [ 88.358344][ T7681] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 88.368162][ T7675] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.392949][ T7681] EXT4-fs (loop4): couldn't read superblock of external journal [ 88.423329][ T7688] loop8: detected capacity change from 0 to 512 [ 88.430137][ T7675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.486088][ T7691] bond0: entered promiscuous mode [ 88.491318][ T7691] bond_slave_0: entered promiscuous mode [ 88.497202][ T7691] bond_slave_1: entered promiscuous mode [ 88.502937][ T7691] batadv0: entered promiscuous mode [ 88.511504][ T7691] bond0: left promiscuous mode [ 88.516370][ T7691] bond_slave_0: left promiscuous mode [ 88.522019][ T7691] bond_slave_1: left promiscuous mode [ 88.527596][ T7691] batadv0: left promiscuous mode [ 88.593481][ T4119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.624855][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 88.647095][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz.8.842'. [ 88.647308][ T36] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 88.662343][ T7700] loop8: detected capacity change from 0 to 512 [ 88.682025][ T7700] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 88.704539][ T7700] syz.8.842: attempt to access beyond end of device [ 88.704539][ T7700] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 88.732546][ T7700] EXT4-fs (loop8): couldn't read superblock of external journal [ 88.793510][ T7586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.819189][ T7586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.834908][ T7586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.854469][ T7710] loop1: detected capacity change from 0 to 512 [ 88.873254][ T7586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.894311][ T7712] loop8: detected capacity change from 0 to 256 [ 88.949117][ T7715] loop1: detected capacity change from 0 to 128 [ 88.971420][ T7715] msdos: Unknown parameter '' [ 88.994898][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.021760][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.032906][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.040047][ T6996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.060450][ T7586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.071012][ T7586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.093269][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.100364][ T6996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.126590][ T7730] netlink: 176 bytes leftover after parsing attributes in process `syz.1.852'. [ 89.170809][ T7735] loop5: detected capacity change from 0 to 128 [ 89.184444][ T7586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.271787][ T9] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 89.279791][ T9] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.329319][ T7586] veth0_vlan: entered promiscuous mode [ 89.338429][ T7586] veth1_vlan: entered promiscuous mode [ 89.365639][ T7586] veth0_macvtap: entered promiscuous mode [ 89.374942][ T7586] veth1_macvtap: entered promiscuous mode [ 89.387494][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.398136][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.408084][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.418589][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.433847][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.434265][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.859'. [ 89.448958][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.460555][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.470469][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.480953][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.492028][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.502690][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.510187][ T7755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.517907][ T7755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.526775][ T7755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.537781][ T7755] bond0: (slave batadv0): Releasing backup interface [ 89.551343][ T7586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.560124][ T7586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.568977][ T7586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.577713][ T7586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.626741][ T7758] loop0: detected capacity change from 0 to 512 [ 89.671019][ T7758] EXT4-fs (loop0): too many log groups per flexible block group [ 89.678819][ T7758] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 89.686810][ T7758] EXT4-fs (loop0): mount failed [ 89.718347][ T7764] loop4: detected capacity change from 0 to 128 [ 89.745879][ T7766] bond0: entered promiscuous mode [ 89.750974][ T7766] bond_slave_0: entered promiscuous mode [ 89.756837][ T7766] bond_slave_1: entered promiscuous mode [ 89.789566][ T7770] loop8: detected capacity change from 0 to 1024 [ 89.792534][ T7766] batadv0: entered promiscuous mode [ 89.797496][ T7770] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 89.808141][ T7766] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 89.812412][ T7770] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 89.828296][ T7770] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.863: iget: special inode unallocated [ 89.828418][ T7766] bond0: left promiscuous mode [ 89.841016][ T7770] EXT4-fs (loop8): Remounting filesystem read-only [ 89.845819][ T7766] bond_slave_0: left promiscuous mode [ 89.852312][ T7770] EXT4-fs (loop8): no journal found [ 89.852328][ T7770] EXT4-fs (loop8): can't get journal size [ 89.864665][ T7770] EXT4-fs (loop8): failed to initialize system zone (-117) [ 89.868991][ T7766] bond_slave_1: left promiscuous mode [ 89.879352][ T7770] EXT4-fs (loop8): mount failed [ 89.895677][ T7766] batadv0: left promiscuous mode [ 89.917366][ T7768] bond0: entered promiscuous mode [ 89.922579][ T7768] bond_slave_0: entered promiscuous mode [ 89.928561][ T7768] bond_slave_1: entered promiscuous mode [ 89.934434][ T7768] batadv0: entered promiscuous mode [ 89.941357][ T7768] bond0: left promiscuous mode [ 89.946205][ T7768] bond_slave_0: left promiscuous mode [ 89.951879][ T7768] bond_slave_1: left promiscuous mode [ 89.957340][ T7768] batadv0: left promiscuous mode [ 90.021082][ T7780] siw: device registration error -23 [ 90.026933][ T7781] loop0: detected capacity change from 0 to 128 [ 90.042195][ T7781] msdos: Unknown parameter '' [ 90.051580][ T1051] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 90.059657][ T1051] hid-generic 0000:0000:0000.000F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 90.129923][ T7787] loop0: detected capacity change from 0 to 512 [ 90.156456][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 90.169286][ T7787] EXT4-fs (loop0): too many log groups per flexible block group [ 90.177297][ T7787] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 90.184699][ T7787] EXT4-fs (loop0): mount failed [ 90.253478][ T7795] loop1: detected capacity change from 0 to 128 [ 90.268562][ T7797] netlink: 176 bytes leftover after parsing attributes in process `syz.0.875'. [ 90.287568][ T7795] msdos: Unknown parameter '' [ 90.386840][ T7805] syzkaller0: entered promiscuous mode [ 90.392605][ T7805] syzkaller0: entered allmulticast mode [ 90.502564][ T7823] loop5: detected capacity change from 0 to 512 [ 90.540955][ T7830] loop0: detected capacity change from 0 to 1024 [ 90.553145][ T7830] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 90.553449][ T7823] EXT4-fs (loop5): too many log groups per flexible block group [ 90.564260][ T7830] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 90.570491][ T7823] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 90.591330][ T7823] EXT4-fs (loop5): mount failed [ 90.597440][ T7830] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #32: comm syz.0.889: iget: special inode unallocated [ 90.612843][ T7830] EXT4-fs (loop0): Remounting filesystem read-only [ 90.619405][ T7830] EXT4-fs (loop0): no journal found [ 90.624679][ T7830] EXT4-fs (loop0): can't get journal size [ 90.660701][ T7830] EXT4-fs (loop0): failed to initialize system zone (-117) [ 90.668180][ T7830] EXT4-fs (loop0): mount failed [ 90.724691][ T7842] netlink: 'syz.5.892': attribute type 10 has an invalid length. [ 90.802901][ T7849] siw: device registration error -23 [ 90.817272][ T7851] loop1: detected capacity change from 0 to 128 [ 90.916286][ T7861] xt_CT: No such helper "syz0" [ 90.923443][ T7864] loop1: detected capacity change from 0 to 512 [ 90.957428][ T7864] EXT4-fs (loop1): too many log groups per flexible block group [ 90.965239][ T7864] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 90.975666][ T7864] EXT4-fs (loop1): mount failed [ 90.984598][ T7867] loop5: detected capacity change from 0 to 512 [ 91.003335][ T7867] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 91.027161][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.035764][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.055575][ T7867] syz.5.904: attempt to access beyond end of device [ 91.055575][ T7867] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 91.055896][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.099081][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.104547][ T7867] EXT4-fs (loop5): couldn't read superblock of external journal [ 91.116842][ T7878] loop1: detected capacity change from 0 to 512 [ 91.129113][ T7878] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 91.157713][ T7878] syz.1.908: attempt to access beyond end of device [ 91.157713][ T7878] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 91.172895][ T7878] EXT4-fs (loop1): couldn't read superblock of external journal [ 91.248549][ T7888] netlink: 'syz.8.910': attribute type 10 has an invalid length. [ 91.252850][ T7884] loop5: detected capacity change from 0 to 128 [ 91.264904][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 91.264919][ T29] audit: type=1326 audit(1745633721.642:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29b63bd5ca code=0x7ffc0000 [ 91.301042][ T29] audit: type=1326 audit(1745633721.662:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 91.319913][ T7886] xt_CT: No such helper "syz0" [ 91.324536][ T29] audit: type=1326 audit(1745633721.662:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 91.352688][ T29] audit: type=1326 audit(1745633721.662:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 91.376311][ T29] audit: type=1326 audit(1745633721.662:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 91.399784][ T29] audit: type=1326 audit(1745633721.662:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 91.423253][ T29] audit: type=1326 audit(1745633721.662:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 91.446674][ T29] audit: type=1326 audit(1745633721.662:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7889 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3aba32e969 code=0x7ffc0000 [ 91.470117][ T29] audit: type=1326 audit(1745633721.672:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f29b63bd5ca code=0x7ffc0000 [ 91.483311][ T7884] msdos: Unknown parameter '' [ 91.493264][ T29] audit: type=1326 audit(1745633721.672:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7883 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f29b63bd1d7 code=0x7ffc0000 [ 91.545798][ T7895] loop1: detected capacity change from 0 to 512 [ 91.601377][ T7900] loop8: detected capacity change from 0 to 128 [ 91.619719][ T7895] EXT4-fs (loop1): too many log groups per flexible block group [ 91.627747][ T7895] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 91.662474][ T7895] EXT4-fs (loop1): mount failed [ 91.716033][ T7911] loop8: detected capacity change from 0 to 512 [ 91.732360][ T7911] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 91.760641][ T7911] syz.8.922: attempt to access beyond end of device [ 91.760641][ T7911] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 91.774839][ T7911] EXT4-fs (loop8): couldn't read superblock of external journal [ 91.788453][ T7917] bond0: entered promiscuous mode [ 91.793646][ T7917] bond_slave_0: entered promiscuous mode [ 91.799425][ T7917] bond_slave_1: entered promiscuous mode [ 91.805243][ T7917] batadv0: entered promiscuous mode [ 91.818348][ T7915] loop1: detected capacity change from 0 to 1024 [ 91.825672][ T7915] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 91.837273][ T7917] bond0: left promiscuous mode [ 91.842247][ T7917] bond_slave_0: left promiscuous mode [ 91.847798][ T7917] bond_slave_1: left promiscuous mode [ 91.853661][ T7917] batadv0: left promiscuous mode [ 91.861069][ T7915] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 91.873112][ T7915] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.924: iget: special inode unallocated [ 91.908355][ T7915] EXT4-fs (loop1): Remounting filesystem read-only [ 91.914983][ T7915] EXT4-fs (loop1): no journal found [ 91.920223][ T7915] EXT4-fs (loop1): can't get journal size [ 91.942681][ T7915] EXT4-fs (loop1): failed to initialize system zone (-117) [ 91.951897][ T7915] EXT4-fs (loop1): mount failed [ 91.998935][ T7928] loop4: detected capacity change from 0 to 128 [ 92.009338][ T7928] msdos: Unknown parameter '' [ 92.093037][ T7931] netlink: 'syz.5.928': attribute type 10 has an invalid length. [ 92.165814][ T7941] loop4: detected capacity change from 0 to 128 [ 92.252071][ T7943] loop8: detected capacity change from 0 to 512 [ 92.276290][ T7943] EXT4-fs (loop8): too many log groups per flexible block group [ 92.284454][ T7943] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 92.299724][ T7950] loop5: detected capacity change from 0 to 512 [ 92.304612][ T7943] EXT4-fs (loop8): mount failed [ 92.321165][ T7950] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 92.352099][ T7950] syz.5.938: attempt to access beyond end of device [ 92.352099][ T7950] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 92.372818][ T7950] EXT4-fs (loop5): couldn't read superblock of external journal [ 92.400483][ T7955] loop4: detected capacity change from 0 to 1024 [ 92.411064][ T7955] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 92.464494][ T7955] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.494457][ T7955] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #32: comm syz.4.940: iget: special inode unallocated [ 92.513543][ T7965] loop1: detected capacity change from 0 to 512 [ 92.538844][ T7955] EXT4-fs (loop4): Remounting filesystem read-only [ 92.545564][ T7955] EXT4-fs (loop4): no journal found [ 92.550825][ T7955] EXT4-fs (loop4): can't get journal size [ 92.561301][ T7961] loop8: detected capacity change from 0 to 8192 [ 92.595857][ T7955] EXT4-fs (loop4): failed to initialize system zone (-117) [ 92.604502][ T7955] EXT4-fs (loop4): mount failed [ 92.624359][ T7967] loop5: detected capacity change from 0 to 8192 [ 92.704008][ T7977] loop8: detected capacity change from 0 to 128 [ 92.775148][ T7985] loop4: detected capacity change from 0 to 256 [ 92.809652][ T7989] loop8: detected capacity change from 0 to 512 [ 92.826682][ T7989] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 92.836047][ T7989] syz.8.954: attempt to access beyond end of device [ 92.836047][ T7989] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 92.850176][ T7989] EXT4-fs (loop8): couldn't read superblock of external journal [ 92.952178][ T8002] loop8: detected capacity change from 0 to 1024 [ 92.959270][ T8002] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 92.970366][ T8002] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.984854][ T8002] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.962: iget: special inode unallocated [ 92.997805][ T8002] EXT4-fs (loop8): Remounting filesystem read-only [ 93.004433][ T8002] EXT4-fs (loop8): no journal found [ 93.009681][ T8002] EXT4-fs (loop8): can't get journal size [ 93.033299][ T8002] EXT4-fs (loop8): failed to initialize system zone (-117) [ 93.040774][ T8002] EXT4-fs (loop8): mount failed [ 93.259556][ T8005] chnl_net:caif_netlink_parms(): no params data found [ 93.271197][ T8028] loop8: detected capacity change from 0 to 512 [ 93.281444][ T6975] gretap0: left allmulticast mode [ 93.286697][ T6975] gretap0: left promiscuous mode [ 93.291980][ T6975] bridge0: port 3(gretap0) entered disabled state [ 93.300168][ T8028] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 93.314314][ T6975] bridge_slave_1: left allmulticast mode [ 93.320010][ T6975] bridge_slave_1: left promiscuous mode [ 93.324536][ T8028] syz.8.969: attempt to access beyond end of device [ 93.324536][ T8028] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 93.325743][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.338501][ T8028] EXT4-fs (loop8): couldn't read superblock of external journal [ 93.366466][ T6975] bridge_slave_0: left allmulticast mode [ 93.372258][ T6975] bridge_slave_0: left promiscuous mode [ 93.378085][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.427765][ T8036] loop8: detected capacity change from 0 to 128 [ 93.471263][ T8038] loop8: detected capacity change from 0 to 512 [ 93.492362][ T6975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.503155][ T6975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.517748][ T6975] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 93.528093][ T6975] bond0 (unregistering): Released all slaves [ 93.537004][ T6975] bond1 (unregistering): Released all slaves [ 93.623209][ T6975] hsr_slave_0: left promiscuous mode [ 93.637847][ T8052] __nla_validate_parse: 3 callbacks suppressed [ 93.637865][ T8052] netlink: 24 bytes leftover after parsing attributes in process `syz.8.980'. [ 93.653482][ T6975] hsr_slave_1: left promiscuous mode [ 93.663731][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.674681][ T8053] loop1: detected capacity change from 0 to 512 [ 93.674874][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.693467][ T8056] x_tables: duplicate underflow at hook 2 [ 93.771112][ T8058] loop5: detected capacity change from 0 to 512 [ 93.779022][ T8058] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 93.790653][ T8058] syz.5.982: attempt to access beyond end of device [ 93.790653][ T8058] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 93.804642][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 93.811357][ T8058] EXT4-fs (loop5): couldn't read superblock of external journal [ 93.869510][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.876964][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.898199][ T8005] bridge_slave_0: entered allmulticast mode [ 93.904945][ T8005] bridge_slave_0: entered promiscuous mode [ 93.912028][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.919199][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.928395][ T8005] bridge_slave_1: entered allmulticast mode [ 93.935207][ T8005] bridge_slave_1: entered promiscuous mode [ 93.950194][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 93.998193][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.023397][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.060805][ T8075] netlink: 'syz.8.986': attribute type 10 has an invalid length. [ 94.061544][ T8005] team0: Port device team_slave_0 added [ 94.083354][ T8005] team0: Port device team_slave_1 added [ 94.110845][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.117865][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.143897][ T8005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.174923][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.181986][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.207966][ T8005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.257443][ T8005] hsr_slave_0: entered promiscuous mode [ 94.272328][ T8005] hsr_slave_1: entered promiscuous mode [ 94.276685][ T8088] loop8: detected capacity change from 0 to 512 [ 94.284550][ T8005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.299596][ T8088] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 94.308388][ T8005] Cannot create hsr debugfs directory [ 94.329224][ T8092] loop5: detected capacity change from 0 to 2048 [ 94.346143][ T8088] syz.8.995: attempt to access beyond end of device [ 94.346143][ T8088] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 94.369328][ T8088] EXT4-fs (loop8): couldn't read superblock of external journal [ 94.378653][ T8092] loop5: p1 < > p3 [ 94.389495][ T8092] loop5: p3 size 134217728 extends beyond EOD, truncated [ 94.433585][ T8096] loop8: detected capacity change from 0 to 1024 [ 94.447643][ T8079] loop0: detected capacity change from 0 to 512 [ 94.455384][ T8079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.466624][ T8096] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 94.478776][ T8096] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.491539][ T8079] EXT4-fs (loop0): 1 truncate cleaned up [ 94.499635][ T8079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.508071][ T8096] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.998: iget: special inode unallocated [ 94.514513][ T8079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.525104][ T8096] EXT4-fs (loop8): Remounting filesystem read-only [ 94.540043][ T8096] EXT4-fs (loop8): no journal found [ 94.545383][ T8096] EXT4-fs (loop8): can't get journal size [ 94.553079][ T8079] loop0: detected capacity change from 0 to 512 [ 94.562986][ T8096] EXT4-fs (loop8): failed to initialize system zone (-117) [ 94.570413][ T8096] EXT4-fs (loop8): mount failed [ 94.584806][ T8079] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 94.606701][ T8079] EXT4-fs (loop0): invalid journal inode [ 94.615717][ T8079] EXT4-fs (loop0): can't get journal size [ 94.626905][ T8079] EXT4-fs (loop0): 1 truncate cleaned up [ 94.641474][ T8079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.713263][ T7586] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.758814][ T8005] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.790079][ T8005] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.808307][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 94.809816][ T8005] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.836216][ T8005] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.836246][ T3379] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.857898][ T8120] loop0: detected capacity change from 0 to 256 [ 94.922322][ T8125] loop8: detected capacity change from 0 to 1024 [ 94.938477][ T8125] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 94.956558][ T8005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.963461][ T8125] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.991075][ T8005] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.999557][ T8125] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #32: comm syz.8.1009: iget: special inode unallocated [ 95.011932][ T8005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.022612][ T8005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.044958][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.052135][ T7023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.060607][ T8125] EXT4-fs (loop8): Remounting filesystem read-only [ 95.067284][ T8125] EXT4-fs (loop8): no journal found [ 95.069940][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.072544][ T8125] EXT4-fs (loop8): can't get journal size [ 95.079626][ T7023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.094231][ T8125] EXT4-fs (loop8): failed to initialize system zone (-117) [ 95.106930][ T8125] EXT4-fs (loop8): mount failed [ 95.136080][ T8005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.254536][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1012'. [ 95.259450][ T8005] veth0_vlan: entered promiscuous mode [ 95.275559][ T8005] veth1_vlan: entered promiscuous mode [ 95.302518][ T6996] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.322796][ T8005] veth0_macvtap: entered promiscuous mode [ 95.345084][ T8005] veth1_macvtap: entered promiscuous mode [ 95.359256][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.369776][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.373535][ T8157] loop8: detected capacity change from 0 to 256 [ 95.379631][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.396356][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.416080][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.431448][ T6996] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.448067][ T8161] loop5: detected capacity change from 0 to 128 [ 95.464866][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.475403][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.485280][ T8005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.495782][ T8005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.509401][ T8005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.522228][ T6996] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.535753][ T8005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.544553][ T8005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.553361][ T8005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.562143][ T8005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.576710][ T8166] loop5: detected capacity change from 0 to 2048 [ 95.606844][ T6996] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.632505][ T8166] loop5: p1 < > p3 [ 95.643995][ T8166] loop5: p3 size 134217728 extends beyond EOD, truncated [ 95.752984][ T8181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.755089][ T3006] loop5: p1 < > p3 [ 95.761912][ T8181] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 95.782772][ T6996] bridge_slave_1: left allmulticast mode [ 95.788438][ T6996] bridge_slave_1: left promiscuous mode [ 95.794196][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.805395][ T6996] bridge_slave_0: left allmulticast mode [ 95.811118][ T6996] bridge_slave_0: left promiscuous mode [ 95.811862][ T3006] loop5: p3 size 134217728 extends beyond EOD, truncated [ 95.817073][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.931813][ T8195] loop2: detected capacity change from 0 to 256 [ 95.975769][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.980419][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.993031][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.001155][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.003439][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.018821][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.022473][ T6996] bond0 (unregistering): Released all slaves [ 96.045102][ T8156] chnl_net:caif_netlink_parms(): no params data found [ 96.103027][ T6996] hsr_slave_0: left promiscuous mode [ 96.108732][ T6996] hsr_slave_1: left promiscuous mode [ 96.115110][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.122638][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.130532][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.138081][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.148727][ T6996] veth1_macvtap: left promiscuous mode [ 96.154319][ T6996] veth0_macvtap: left promiscuous mode [ 96.159931][ T6996] veth1_vlan: left promiscuous mode [ 96.165307][ T6996] veth0_vlan: left promiscuous mode [ 96.234218][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 96.244630][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 96.287364][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.294547][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.303018][ T8156] bridge_slave_0: entered allmulticast mode [ 96.309562][ T8156] bridge_slave_0: entered promiscuous mode [ 96.317313][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.324790][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.339627][ T8156] bridge_slave_1: entered allmulticast mode [ 96.346172][ T8156] bridge_slave_1: entered promiscuous mode [ 96.374831][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.386224][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.417343][ T8156] team0: Port device team_slave_0 added [ 96.433503][ T8156] team0: Port device team_slave_1 added [ 96.469222][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.470580][ T29] kauditd_printk_skb: 758 callbacks suppressed [ 96.470596][ T29] audit: type=1326 audit(1745634752.845:5090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.476390][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.476423][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.482240][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 96.484704][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 96.507225][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.548226][ T29] audit: type=1326 audit(1745634752.925:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.552271][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.562141][ T29] audit: type=1326 audit(1745634752.925:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.568962][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.652730][ T29] audit: type=1326 audit(1745634752.925:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.657566][ T8214] loop5: detected capacity change from 0 to 128 [ 96.676233][ T29] audit: type=1326 audit(1745634752.925:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.676275][ T29] audit: type=1326 audit(1745634752.925:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.709698][ T8214] msdos: Unknown parameter '' [ 96.729589][ T29] audit: type=1326 audit(1745634752.925:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.758015][ T29] audit: type=1326 audit(1745634752.925:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.781622][ T29] audit: type=1326 audit(1745634752.925:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.808164][ T29] audit: type=1326 audit(1745634753.005:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8213 comm="syz.5.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29b63be969 code=0x7ffc0000 [ 96.841861][ T8156] hsr_slave_0: entered promiscuous mode [ 96.848320][ T8156] hsr_slave_1: entered promiscuous mode [ 96.866947][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 96.949191][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.958015][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.967392][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.978395][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.994332][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.001498][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.009279][ T8190] bridge_slave_0: entered allmulticast mode [ 97.015814][ T8190] bridge_slave_0: entered promiscuous mode [ 97.025430][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.032568][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.039819][ T8190] bridge_slave_1: entered allmulticast mode [ 97.046511][ T8190] bridge_slave_1: entered promiscuous mode [ 97.084836][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.096585][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.118606][ T6996] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.138600][ T8190] team0: Port device team_slave_0 added [ 97.152619][ T8190] team0: Port device team_slave_1 added [ 97.179749][ T6996] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.191320][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.198400][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.224507][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.236723][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.243775][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.269912][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.290020][ T6996] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.320854][ T8190] hsr_slave_0: entered promiscuous mode [ 97.327190][ T8190] hsr_slave_1: entered promiscuous mode [ 97.333545][ T8190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.341201][ T8190] Cannot create hsr debugfs directory [ 97.358820][ T6996] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.447118][ T8156] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.457098][ T8156] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.473417][ T8156] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.485628][ T8156] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.525123][ T6996] gretap0: left allmulticast mode [ 97.530221][ T6996] gretap0: left promiscuous mode [ 97.535301][ T6996] bridge0: port 3(gretap0) entered disabled state [ 97.542959][ T6996] bridge_slave_1: left allmulticast mode [ 97.548616][ T6996] bridge_slave_1: left promiscuous mode [ 97.554613][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.563576][ T6996] bridge_slave_0: left allmulticast mode [ 97.569299][ T6996] bridge_slave_0: left promiscuous mode [ 97.575483][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.685109][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.696134][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.706603][ T6996] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 97.716195][ T6996] bond0 (unregistering): Released all slaves [ 97.771577][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.785219][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.799122][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.806242][ T6977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.821314][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.828573][ T6977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.838244][ T6996] tipc: Left network mode [ 97.868105][ T6996] hsr_slave_0: left promiscuous mode [ 97.875051][ T6996] hsr_slave_1: left promiscuous mode [ 97.881034][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.888881][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.897037][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.904576][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.915379][ T6996] veth0_macvtap: left promiscuous mode [ 97.921065][ T6996] veth1_vlan: left promiscuous mode [ 97.926479][ T6996] veth0_vlan: left promiscuous mode [ 97.988158][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 98.008021][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 98.096453][ T8190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.120438][ T8190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.136566][ T8190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.157445][ T8190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.192958][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.257567][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.275257][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.286131][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.293292][ T6957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.301397][ T8228] chnl_net:caif_netlink_parms(): no params data found [ 98.330461][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.337614][ T6948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.389018][ T8190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.399498][ T8190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.445482][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.452852][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.463987][ T8228] bridge_slave_0: entered allmulticast mode [ 98.470633][ T8228] bridge_slave_0: entered promiscuous mode [ 98.478444][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.485730][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.493257][ T8228] bridge_slave_1: entered allmulticast mode [ 98.499875][ T8228] bridge_slave_1: entered promiscuous mode [ 98.524297][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.535592][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.563358][ T8228] team0: Port device team_slave_0 added [ 98.570984][ T8228] team0: Port device team_slave_1 added [ 98.603420][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.610478][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.636434][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.648387][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.655548][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.681608][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.695853][ T8156] veth0_vlan: entered promiscuous mode [ 98.707652][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.720740][ T8156] veth1_vlan: entered promiscuous mode [ 98.744583][ T8228] hsr_slave_0: entered promiscuous mode [ 98.750906][ T8228] hsr_slave_1: entered promiscuous mode [ 98.758391][ T8228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.766683][ T8228] Cannot create hsr debugfs directory [ 98.778612][ T6996] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.841224][ T8156] veth0_macvtap: entered promiscuous mode [ 98.873932][ T8156] veth1_macvtap: entered promiscuous mode [ 98.903873][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.918158][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.928665][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.944185][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.972200][ T8156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981024][ T8156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.989829][ T8156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.998923][ T8156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.010387][ T8190] veth0_vlan: entered promiscuous mode [ 99.018526][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 99.037962][ T8190] veth1_vlan: entered promiscuous mode [ 99.081001][ T8282] loop1: detected capacity change from 0 to 128 [ 99.095448][ T8190] veth0_macvtap: entered promiscuous mode [ 99.127619][ T8190] veth1_macvtap: entered promiscuous mode [ 99.154980][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.165491][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.180561][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1017'. [ 99.189660][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.201780][ T6996] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.223657][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.227895][ T8291] loop1: detected capacity change from 0 to 128 [ 99.234145][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.234165][ T8190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.260874][ T8190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.276016][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.285307][ T8291] msdos: Unknown parameter '' [ 99.295139][ T6996] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.309779][ T8190] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.318850][ T8190] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.327758][ T8190] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.336539][ T8190] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.367670][ T6996] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.395095][ T8296] loop1: detected capacity change from 0 to 512 [ 99.404786][ T8228] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 99.415156][ T8228] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 99.427610][ T8296] EXT4-fs (loop1): too many log groups per flexible block group [ 99.435471][ T8296] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 99.444363][ T8296] EXT4-fs (loop1): mount failed [ 99.460545][ T8228] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 99.478716][ T8228] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 99.535531][ T6996] bridge_slave_1: left allmulticast mode [ 99.541267][ T6996] bridge_slave_1: left promiscuous mode [ 99.547026][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.555609][ T6996] bridge_slave_0: left allmulticast mode [ 99.561354][ T6996] bridge_slave_0: left promiscuous mode [ 99.567369][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.586019][ T8304] loop1: detected capacity change from 0 to 512 [ 99.593572][ T8305] netlink: 'syz.7.1026': attribute type 10 has an invalid length. [ 99.603445][ T8304] journal_path: Non-blockdev passed as './bus' [ 99.609737][ T8304] EXT4-fs: error: could not find journal device path [ 99.684981][ T6996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.695666][ T6996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.705366][ T6996] bond0 (unregistering): Released all slaves [ 99.738550][ T8305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.748238][ T8305] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 99.770842][ T8305] syz.7.1026 (8305) used greatest stack depth: 9992 bytes left [ 99.777682][ T8308] loop1: detected capacity change from 0 to 128 [ 99.788768][ T6996] hsr_slave_0: left promiscuous mode [ 99.801827][ T6996] hsr_slave_1: left promiscuous mode [ 99.810624][ T8308] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 99.823992][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.831696][ T6996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.833159][ T8308] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.839127][ T6996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.864355][ T6996] veth1_macvtap: left promiscuous mode [ 99.869949][ T6996] veth0_macvtap: left promiscuous mode [ 99.875841][ T6996] veth1_vlan: left promiscuous mode [ 99.881148][ T6996] veth0_vlan: left promiscuous mode [ 99.925739][ T8312] loop7: detected capacity change from 0 to 512 [ 100.021187][ T6996] team0 (unregistering): Port device team_slave_1 removed [ 100.046444][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1050'. [ 100.059498][ T6996] team0 (unregistering): Port device team_slave_0 removed [ 100.097525][ T8326] x_tables: duplicate underflow at hook 2 [ 100.149452][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.173371][ T8329] loop7: detected capacity change from 0 to 128 [ 100.185625][ T3380] ================================================================== [ 100.193854][ T3380] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 100.200823][ T3380] [ 100.203152][ T3380] write to 0xffff8881041f89ac of 4 bytes by task 3472 on cpu 1: [ 100.210791][ T3380] shmem_mknod+0x137/0x180 [ 100.215227][ T3380] shmem_create+0x34/0x50 [ 100.219574][ T3380] path_openat+0x1102/0x2170 [ 100.224188][ T3380] do_filp_open+0x109/0x230 [ 100.228697][ T3380] do_sys_openat2+0xa6/0x110 [ 100.233290][ T3380] __x64_sys_openat+0xf2/0x120 [ 100.238055][ T3380] x64_sys_call+0x1af/0x2fb0 [ 100.242659][ T3380] do_syscall_64+0xd0/0x1a0 [ 100.247165][ T3380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.253061][ T3380] [ 100.255411][ T3380] read to 0xffff8881041f89ac of 4 bytes by task 3380 on cpu 0: [ 100.262949][ T3380] fill_mg_cmtime+0x5b/0x260 [ 100.267552][ T3380] generic_fillattr+0x24a/0x340 [ 100.272418][ T3380] shmem_getattr+0x181/0x200 [ 100.277020][ T3380] vfs_getattr_nosec+0x143/0x1e0 [ 100.281973][ T3380] vfs_statx+0x11a/0x380 [ 100.286234][ T3380] vfs_fstatat+0xe1/0x160 [ 100.290571][ T3380] __se_sys_newfstatat+0x55/0x260 [ 100.295605][ T3380] __x64_sys_newfstatat+0x55/0x70 [ 100.300639][ T3380] x64_sys_call+0x2c22/0x2fb0 [ 100.305321][ T3380] do_syscall_64+0xd0/0x1a0 [ 100.309825][ T3380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.315725][ T3380] [ 100.318047][ T3380] value changed: 0x21cf8c0a -> 0x222108ce [ 100.323779][ T3380] [ 100.326098][ T3380] Reported by Kernel Concurrency Sanitizer on: [ 100.332250][ T3380] CPU: 0 UID: 0 PID: 3380 Comm: udevd Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(voluntary) [ 100.344232][ T3380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.354288][ T3380] ================================================================== [ 100.395574][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.418949][ T8331] loop5: detected capacity change from 0 to 2048 [ 100.422733][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.432433][ T6977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.444974][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.452129][ T6977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.472958][ T8228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.482477][ T3380] loop5: p1 < > p3 [ 100.483429][ T8228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.487743][ T3380] loop5: p3 size 134217728 extends beyond EOD, truncated [ 100.544870][ T4119] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.556407][ T8325] loop6: detected capacity change from 0 to 8192 [ 100.594505][ T8331] loop5: p1 < > p3 [ 100.599033][ T8331] loop5: p3 size 134217728 extends beyond EOD, truncated [ 100.605249][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.620669][ T8325] x_tables: duplicate underflow at hook 2 [ 100.711386][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.713838][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 100.741010][ T3472] udevd[3472]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 100.752281][ T3380] udevd[3380]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 100.781223][ T8228] veth0_vlan: entered promiscuous mode [ 100.788680][ T8228] veth1_vlan: entered promiscuous mode [ 100.803683][ T8228] veth0_macvtap: entered promiscuous mode [ 100.811019][ T8228] veth1_macvtap: entered promiscuous mode [ 100.823453][ T8228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.834076][ T8228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.843921][ T8228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.854400][ T8228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.865074][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.876703][ T8228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.887240][ T8228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.897094][ T8228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.907576][ T8228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.918558][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.929392][ T8228] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.938255][ T8228] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.947163][ T8228] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.955916][ T8228] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0