last executing test programs: 36.105624133s ago: executing program 4 (id=12): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500"/19], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r6 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_read_part_table(0x104f, &(0x7f0000001200)="$eJzsz8EJwkAQBdC/GyPuyZZswiZswtiGdy+24EWr8qgEE0gDIsJ7h93PDHyY8FO3epzjZTu+LbmXlHRJDknW8/p5Ki01w5jPSX116bNZVLUhKTWtrJL0n9kjU+fim+yS7K9fPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sQ7AAD//4vpCY8=") syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9, {0x1}}, './file1\x00'}) io_uring_enter(r6, 0x22d6, 0x4b34, 0x4, 0x0, 0x0) close_range(r1, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 35.62026442s ago: executing program 4 (id=16): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x5}}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x3, [{0x7, 0x8, 0xfff}, {0x10, 0x45709d8c, 0xf}]}, @var={0x10, 0x0, 0x0, 0xe, 0x1, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x8}}]}, {0x0, [0x0, 0x246ddd10672f0d72, 0x61, 0x0, 0x7f, 0x61, 0x2e, 0x0, 0x5f]}}, &(0x7f0000000100)=""/30, 0x87, 0x1e, 0x0, 0x38, 0x0, @void, @value}, 0x28) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x101, 0x7, 0x4, 0x10000, 0xffffffffffffffff, 0xf04, '\x00', 0x0, r0, 0x5, 0x0, 0x3, 0xd, @void, @value, @value=r1}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=@getpolicy={0x68, 0x15, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in=@broadcast, @in6=@private2, 0x4e24, 0xa87, 0x4e21, 0x9, 0x2, 0x20, 0x80, 0x2f}, 0x0, 0x2}, [@mark={0xc, 0x15, {0x5c4, 0x70}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xff}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0xc8d01) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000180)={0x80, 0x5800000, 0x5, 0x0, 0xff, 0x105}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x10000000}, 0x48, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000006600), 0x200, 0x0) getgid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000000), 0xd, 0x61c, &(0x7f0000000d80)="$eJzs3U1rXFUfAPD/nbwnz/MkDQ9qXWhAtAVt0qStFBG0CK5KqS8LwY1jk5ba6QtNRFMrTaFuBHHjQnDlwrrwO2hBcOUXcOHGlVSKSDdK0ZE7uTNOk7nJTMzMtJnfD8Y5556bOeea/HvOnDnnTgA9ayr9TyFid0RcSCIm68r6IyucWj3v9m+XT6SPJMrlV35N4vKVZKX+tZLseSwi0oI/xyP5LiIm+9bXu7h86UyxVFq4mOVnls5emFlcvrTv9NniqYVTC+fmnp47fOjgocOz++t+6uSLrV7frrr00WtvvTP+4bHXv/jsTjL75Y/Hkni+VpZeV6uvvZmpmIpypv54+v/18HZX1iV9tb+TfyRrD6z1QhsbREuqv7+BiHgwxqOv7rc5Hh+81NXGAW1VTqLWRwG9JhH/0KOq44Dqe/vm3gcPtnlUAnTCrSMRT9TifyAiqvHfvzo3GMOVuYHR28ld8zxJROzfhvrTOr7/9ti19BFtmocDGlu5OpTN26/t/5NKbE7EcCU3ertwV/wXsmnciWz+8OWNqxnPK5hak8/qH9rq9QDNW7kaEQ81Gv9vHv9vZM/p8Te3WH9O/AMAAAAAAABbcONIRDzV6PO/Qm39z2CD9T9jEXW757Zu88//Cje3oRqggVtHIp5tuP63UD1loi/L/beyHmAgOXm6tLA/Iv4XEXtjYCjNz9a/6Fd1Px0R+z6a/DSv/vr1f+kjrb+6FjBrx83+NauB5otLxW24dOh5t65GPNyfv/4n7f+TBv1/Gt8Xmqxj8vHrx/PKNo9/oF3Kn0fsadj/J7Vzko3vzzFTGQ/MVEcF6z3y3sdf59Uv/qF70v5/dOP4H0rq79ez2NrrD0bEgeX+cl75Vsf/g8mrfVG3E/Hd4tLSxdmIweTo+uNzrbUZ7ifDzZ/6fkRU4qEaL2n8731s4/m/2vi/Lg5Hsnt8NeOBv8Z+yivT/0P3pPE/v3H/P3F3/996Yu76xDd59R9vqv8/WOnT92ZHzP/BxpoN0G63EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuR4WI+E8khelaulCYno4Yi4j/x2ihdH5x6cmT598+N5+WVb7/v1D9pt/x1XxS/f7/ibr83Jr8gYjYFRGf9I1U8tMnzpfmu33xAAAAAAAAAAAAAAAAAAAAcI8YW31at/8/9XNfV5sGdEJ/9izeoff0d7sBQNeIf+hd4h96V378/36nXNHR5gAd1Gz/X77S5oYAHbfF8b+PC2AH8P4fetVAc6cNt7sdQDfo/wEAAAAAYEfZ9eiNH5KIWHlmpPJIDWZltQ8GR7rVOqCdCnkFQ51tB9B51vBC77L0B3pXk4t/gR0sqaX+aLjZP3/1f9KeBgEAAAAAAAAAAAAA6+zZ3cT+f2BHyt3/D+x4G+z/b7Sxx+0CYAex/x96l9t8AdXBft43/dv/DwAAAAAAAAAAAAD3gOFLZ4ql0sLFxeWmE1daOfnfJ36JvKLnOtmM7UqsFO+JZtwPiYGIWFNUHl/9sz1TLL0WnW1PNWI6UddgB+vKSXTp3yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCdvwMAAP//emUoLA==") 34.671869335s ago: executing program 4 (id=19): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 34.592750636s ago: executing program 4 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000000280)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x696, &(0x7f0000000140)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) timer_getoverrun(r6) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4212, r8, 0x202, &(0x7f0000000240)={0x0}) prlimit64(r8, 0x8, &(0x7f0000001480)={0x3, 0x4}, &(0x7f00000014c0)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 34.36214005s ago: executing program 4 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f0000000740)=[{&(0x7f0000000180)=""/115, 0x73}], 0x1, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00004045ae7fef4ab924000007020000f8ffffffb703000008000000b704000002010000850000004300000095a9c7efeb3cbec2ad0ca1122ad3d4c34736977a78e75ab58c4c3cb3cef5c80670ed9fc4dc6c00254f78d6ad5d3d622df3fa70e44bfd932bec88acabf47b1e0a1b8096bb07940a051d61a291c1c51d750d3df4b72f34002901b965ca5de6dca63e69126af4b4efe6736c38ade5d7c338a6f0be313a7b4c7894b022fad379e256b1ea36bd92ee1492182b20879caeb18dd353679493e4501144fe86e6ca44dbc6bad56ac81572ebe095be7f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000000, 0x4}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 33.888762197s ago: executing program 4 (id=27): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1, 0x9, 0x1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000bb62f8d53156aee53a7d2b50dca82c6dfa0bf964c90c8f4b81dff8b3832d9750f60cb941828ea5104d6fc541bd96f64389ef19b9e41b4f754c2a6edc905fcd17b3d3bea89796a0107b4c90c2bb40451f"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r4, &(0x7f0000000040)='\x00', 0x1, 0x1300) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00'}) 33.888258357s ago: executing program 32 (id=27): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x50) pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1, 0x9, 0x1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000bb62f8d53156aee53a7d2b50dca82c6dfa0bf964c90c8f4b81dff8b3832d9750f60cb941828ea5104d6fc541bd96f64389ef19b9e41b4f754c2a6edc905fcd17b3d3bea89796a0107b4c90c2bb40451f"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x24000080, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7, @void, @value}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') faccessat2(r4, &(0x7f0000000040)='\x00', 0x1, 0x1300) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00'}) 4.157993177s ago: executing program 2 (id=235): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.258006971s ago: executing program 2 (id=244): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x18c6) 3.068868214s ago: executing program 2 (id=246): accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 2.700715149s ago: executing program 0 (id=251): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000100039042cbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="03000000c31006002800128008000100736974001c000280060012004e23000008000300ac1414"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2.66793185s ago: executing program 1 (id=252): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x500000, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sched_setattr(0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) 2.400765664s ago: executing program 0 (id=255): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0x20000000000003c3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 2.400302274s ago: executing program 5 (id=256): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, 0x0) 2.386857334s ago: executing program 0 (id=257): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, &(0x7f00000000c0)) 2.277808236s ago: executing program 1 (id=258): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)=@gettaction={0x124, 0x32, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x592}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x44894) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r4 = getuid() r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c) recvmmsg(r5, &(0x7f0000001b80)=[{{&(0x7f0000000940)=@un=@abs, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/240, 0xf0}, 0x8}], 0x1, 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) getgroups(0x6, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xa7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r12 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640), {0x20}, 0x0, 0x0, &(0x7f00000006c0)=""/93, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000880)={{0x0, r8, r9, r10, r11, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r12, 0x0, 0x6}) r13 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r14, r14, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100800, &(0x7f0000000380)={[{@mode}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r11}}, {@uid={'uid', 0x3d, r14}}, {@uid={'uid', 0x3d, r15}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r16}}, {@mode}], [{@hash}, {@appraise_type}, {@dont_measure}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1.488144278s ago: executing program 5 (id=260): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f0000000000), 0xd, 0x61c, &(0x7f0000000d80)="$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") 1.35999086s ago: executing program 1 (id=261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x100, {0x0, 0xa}, {0x3}, @const={0x0, {0x1, 0x8, 0x4, 0xa}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.29272388s ago: executing program 0 (id=263): syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000000c0)) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)=@gettaction={0x114, 0x32, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x592}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x44894) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) getuid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) recvmmsg(r3, &(0x7f0000001b80)=[{{&(0x7f0000000940)=@un=@abs, 0x80, &(0x7f0000001a40)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000480)}, {&(0x7f00000019c0)=""/68, 0x44}], 0x3, &(0x7f0000001a80)=""/240, 0xf0}, 0x8}], 0x1, 0x10000, 0x0) getgroups(0x6, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xa7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r9 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640), {0x20}, 0x0, 0x0, &(0x7f00000006c0)=""/93, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r4}}, 0x58) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000880)={{0x0, 0x0, r6, r7, r8, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r9, 0x0, 0x6}) r10 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r11, r11, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1000) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1.290032701s ago: executing program 5 (id=264): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r6 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_read_part_table(0x104f, &(0x7f0000001200)="$eJzsz8EJwkAQBdC/GyPuyZZswiZswtiGdy+24EWr8qgEE0gDIsJ7h93PDHyY8FO3epzjZTu+LbmXlHRJDknW8/p5Ki01w5jPSX116bNZVLUhKTWtrJL0n9kjU+fim+yS7K9fPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sQ7AAD//4vpCY8=") syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9, {0x1}}, './file1\x00'}) io_uring_enter(r6, 0x22d6, 0x4b34, 0x4, 0x0, 0x0) close_range(r1, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.200600262s ago: executing program 2 (id=265): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60a00}], 0x1f) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.108076803s ago: executing program 3 (id=266): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000050010000000000000ffffffff00000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0xe, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) r4 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000100039042abd7000eafefffff7ff02e4", @ANYRES32=r8, @ANYBLOB="03000000c31006006000128008000100736974005400028008000100", @ANYRES32=r7], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff14000280080006000200000008000900080000000800040002000000600001"], 0xc4}}, 0x4008800) 894.353987ms ago: executing program 2 (id=270): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount(0x0, &(0x7f0000003c40)='.\x00', 0x0, 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = accept4$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10, 0x400) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x1be, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000680], 0x0, &(0x7f00000003c0), &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]}, 0x248) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0x194, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xc, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x6, 0x4, 0x1, 0x81, 0x1, 0x2}}, {0x8, 0x2, [0x9, 0xb]}}, {{0x1c, 0x1, {0x40, 0x30, 0x57, 0x2, 0x1, 0x8000000, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0xa7, 0xb, 0x2, 0x0, 0x8, 0x9, 0x2}}, {0x8, 0x2, [0x8000, 0xff]}}, {{0x1c, 0x1, {0x2, 0x5, 0x7, 0x2, 0x2, 0xf7, 0xf105, 0x4}}, {0xc, 0x2, [0x6, 0x2, 0x3, 0x4]}}, {{0x1c, 0x1, {0x80, 0x97, 0x7, 0x7fffffff, 0x1, 0x3, 0x810000, 0x4}}, {0xc, 0x2, [0xb000, 0x5, 0x6bd, 0x8]}}, {{0x1c, 0x1, {0x8, 0x0, 0x2, 0xf28e, 0x2, 0x80000001, 0x1, 0x6}}, {0x10, 0x2, [0x1, 0x2, 0xfffe, 0x6, 0x4, 0xf]}}, {{0x1c, 0x1, {0x7f, 0x7, 0x2, 0xee, 0x2, 0xff, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x5, 0xff, 0x8, 0x7, 0x2, 0x40, 0xe53, 0x8}}, {0x14, 0x2, [0x5, 0x7, 0x1, 0x3ff, 0x1e, 0x3, 0x9, 0x81]}}, {{0x1c, 0x1, {0x5, 0x7, 0x9, 0xf, 0x0, 0xffffffff, 0xa, 0x3}}, {0xa, 0x2, [0x0, 0x3, 0x8]}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x48801}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ff8}]}) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x20000023896) ioctl$TCXONC(r9, 0x540a, 0x2) ioctl$TIOCSERGETLSR(r9, 0x5459, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) bind$inet(r11, &(0x7f0000000400)={0x2, 0x4e21, @multicast1}, 0xffffffffffffff76) connect$inet(r11, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) 844.048388ms ago: executing program 3 (id=271): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000010c0)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}, {@grpquota}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf}}, {@block_validity}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x4e) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x23, 0x42f, &(0x7f0000000940)="$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") r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000c00)='sys_enter\x00', r2, 0x0, 0x1}, 0x18) fchown(r3, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21083e, &(0x7f0000000340)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xda) writev(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) 819.680988ms ago: executing program 5 (id=272): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)=@gettaction={0x124, 0x32, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x592}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x44894) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r4 = getuid() r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c) recvmmsg(r5, &(0x7f0000001b80)=[{{&(0x7f0000000940)=@un=@abs, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/240, 0xf0}, 0x8}], 0x1, 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) getgroups(0x6, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xa7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r12 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000640), {0x20}, 0x0, 0x0, &(0x7f00000006c0)=""/93, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000880)={{0x0, r8, r9, r10, r11, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r12, 0x0, 0x6}) r13 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r14, r14, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100800, &(0x7f0000000380)={[{@mode}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r11}}, {@uid={'uid', 0x3d, r14}}, {@uid={'uid', 0x3d, r15}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, r16}}, {@mode}], [{@hash}, {@appraise_type}, {@dont_measure}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 649.700001ms ago: executing program 2 (id=273): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x2, &(0x7f0000000180)={0x0, 0x21}, &(0x7f00000000c0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)=@gettaction={0x124, 0x32, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x592}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x44894) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r4 = getuid() r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c) recvmmsg(r5, &(0x7f0000001b80)=[{{&(0x7f0000000940)=@un=@abs, 0x80, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/240, 0xf0}, 0x8}], 0x1, 0x10000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) getgroups(0x6, &(0x7f0000000340)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xffffffffffffffff]) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xa7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r12 = syz_clone3(&(0x7f0000000780)={0x4000200, &(0x7f0000000500), 0x0, &(0x7f0000000640), {0x20}, &(0x7f0000000680)=""/35, 0x23, &(0x7f00000006c0)=""/93, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5, {r6}}, 0x58) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000880)={{0x0, r8, r9, r10, r11, 0x1c3, 0x384d}, 0x9, 0x8000, 0x4, 0xfff, r12, 0x0, 0x6}) setresuid(0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x100800, &(0x7f0000000380)={[{@mode}, {@uid={'uid', 0x3d, r2}}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r11}}, {}, {}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid}, {@mode}], [{@hash}, {@appraise_type}, {@dont_measure}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 453.345753ms ago: executing program 0 (id=274): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = gettid() sendmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)="5b94f7038921bf2548faf77ee628cfa56a33984e04799232284487bd754b498d5eacc42f6cdf0e8f02ff1089673577212228e0788644451a22158eaff8b4557a39387415af5e15c459a3ad6e079691439b5c8020d1acc251d569f00582d6cf2cd9bcdc4c20511a5e9060e057abea74ed7ea07675db8ddbe7d4b272f34c1b80b4bd0911677524f3f3e381e2dc65ecc96f1d3eac7c7b6091cf93f0400dbc371bb5f2a1a60b01e4db54467c6021534081ae5874f982a024f4e11e87e2898f7b5fd7543da1c6fe0b9a191b6955e6c0542b251746f1c4231e7426dd380aa5d9c4a6a4cba2786515", 0xe5}, {&(0x7f00000003c0)="39330161fe77a5590ae8c85d9b4447952084166f0167f7070194e7aaea18ba508941f9598debd5eef93a3bd3885a71c4147b6536024a9c510003f027c2a9acf80184f391f704e3ddcbaebb6d634c80d6f0f3743a2f5daa5a14648283e4fb44751d2f877133695cfd", 0x68}, {&(0x7f00000004c0)="3803674cd4915026dc4669901dc265194b46848257cd01f26c7a18c9981b4cd7349f335298b87d2f3d73c58d2290fc238a3a25", 0x33}, {&(0x7f0000001300)="1b0a0b011ef318f339eb5e3964ccc9f0d3b970861a6f2a66e85701a3d76cda7c43c0cd0a3c469d9cf1f03d9a101199671c729b39ecbbf3243f0f4ffebf94acde9eec29be604b239a3b1e4b82c926479d5796ab0176e6b5cbe15d1a1c0c9ac118204a867f85393b1ee75dd5225688b8090dc0c41d3ce88f4da76a4113d40aa602860dd81b79e81fa2e868b1335427f3105fdf7fee978b9d7a7406a30f4dc1a950fc751806feb09fe5ffdb48dc9a5bc88e3eae4963eef1657148181ae001479e66ee6923a54ac0a302eb904dd1ae6beb4d14c7de81f74fb892f9d0bc59c28d94cf89ce0c05150ffa505bb31dc4d8b7ab9b54bf67b8c4a62845e07b4414aec35498c9079772ebe7af4a7074aace8040fe64b6cb02bf56992c51684f9abd4f28266d9d42c006185d0b86e60829ae652841446d4942a4d968205a793d118eb56fa2f947731d86aeda39949bb4eadcdaa6685e519139453e14092daba3946f75bd0ac97f34fc97cae504f3775ed97aaddb2db1592e07bd9a3b2bddc4f25eb9fdaacf35692e13049feb4003462a0a6607b6282ee4109d547a513d5c43ae67bdcd6e435d65469fd31abca3e46c3929c283739fe25aa14edcaca37b415e64f131470294fc909facc10948fb4e3aa5b45e279668237c5e6a8a9d52c138ea967b658cfff52c476d55ca57e548f2cdcd5816cb86a11034bfd156a16710fe408276c771d1b8308fe5b66c9ba271d7004edf919484b3480c0336f41c45fc14cdf359a512f55e2deb28ff6c1c549cf984a052020923ba76937a892a96352070a0324ead30bcf54336d9c45b6d72846c32addd45e14d281f2984e7e313d06a35b825ee10b829cf84685c925839570842180addf83c3fadde82f0ba1607f44bec4b7901b0e7885871712738430438d81dce028d6fcb9611eba7056800bf92107f129529cafab395c61b0ecffea09eeb797b8e3131e3150b9af4104716bacf8784418655355c458cbf2de020d316e7c1639f338747baff0ba2bc54bde9a99896a3b97bb88969ce98ee315579e473bdf4a9a09bcacf8d7f0f540cc65bec56f45fbdf970dca6d874d69e854cc5d006404c0fda885f11223960f6ded949a55d0114baf01a2ee0d833eaa2b12fa980b4bf48e8a51ac50810fd4372f5c9a9f6bbd4e696c940fa158f9ef34345a07f9f3a91857c24bef62764dc5849029e91880295b864e876c18b0836e5f127c0f7d2cbc31bdaaa62f36f51b78d864f6b1ce8f166a87091b3c82c2162ad4b2043f6d374127a32f4742767d828ccc6bbb4cb12ac2592515bdf9142de6e90595ec58c16dbf927ab33fd7103716212e65854530d13a9cb971c0ffea7eeedde8bcff0a811fbbec3ffe21b0103118af6e6ee349ebb0e42c58656fded85f1893475d1d0595dd5e99cdccec3e2c03f91fd7dffcfaaf436b01a37580858973dd0dd749bab9976a8f9d8ccf6233260197757313fd32971738282ab74cbbaa614b735f1968a9a52ee594f4e5fa4795677405767011cba46d276f8327f20805107062a8adf4a9400db03c7b3632257c69c31ae270216f721064a8fc6fe9a8568f91c0ce82fb90a2d2b746db8b3c7085610bc7ef2f45db51317c8d7e8ce03070665afe578ae4fd7383c8d5f2c11e3b5d150dbd940c6aa6d8d0895831b6443215824ce6b03a07f1039843091c5ff38257390068ebade46a99fe7452fdfd1220d2a2c40e67b42eaad8c641bebe4a2f9073ae79ccb617b8a06b00547aa0e79e4cce88b6afb680d2678a3f4e65f9389e36db91c0275db7b39d019efe568ae72f78edc73d458188bcecd4a92222a95c68a393cad496bd185e2c15445307d1a524b598fa5a637841260a73f5935e521defb1274a52059f146547443ea84fd08ca172ee2250f2f88bc7b002e04c62098cd49ef0dd1165b36513b37eaf53bc0c02440c82f3a73cf3474c7e6fe625359694f5eaba8a15913eac1785f682e3f2e5dd3e2a8e089fa5f30229ddd6ad35fb07d02930b1804a821db425746930d2223286d0cf94570431f1ee14649a71e8e11a7d95b6b86347c176ea1320812cf3d957a3bc0c42da976f7b57bd51874630220d942c4915fe2b9c636e75fd39ff20d8c7d986a26299d94e8eca4725d7bc3807a9f83a14ba5105830b61cd93824c88737ba721a264b27ac5cd4a1084fab1217919cace4faff3f86bbb16ddedce0f35eb946a4c53228298bd53ac12ef3bd1209306036534f6a199c8c25b9b11cb6811fbb3b1fcc8104feda962ac19fb1492d8661cbccacd76e74228d2f58676f37df1efe79a126e02dddae8bf6e2eab2e0e3cd07b7e357a0e2a792a40f089d395a80e5fece350904c060d74baa755bca4dc27d8d8d014c381f20e062604cdce4b0e0cb912f9d83e4121f2e330126d6572296d4d6874ac5d295761e6b2135d86750f2ad5410425fc364a241644728ac5f33863cf549424317d5ea2868ec1230e92f3c3beaeedd4acbf60ec8327586bf97102c513a9e604e3c760576d5ae9612ff6510469bdee3a5f96f737c5bd0362c12bd555a4c36f3988eb752b6673a1a4aa837f142f762beba0f273f2501fe9b1a6b40fcdf425c40ac0019c4f5ec50c4c8def905bd18a944023cdad514049a4c3154109ce1b2441f8d869d0673b6116492b9a12e9535d4c25a884b43cd3b19fd25b1025909b3c503da628e77487f10d8a33ef71061e85a033ce64688de17b66fafdd938f6607ddca477eaae0b9c891ffea9fb5d2c08658a5302e5d2f50691fdb4d0be87601645f788d90b5297a64843d5dc14d5e5795fac812f50d084552dfe91cd7caa44c17a36eee0865beb62c26bf87148d73b499c92bea24a1cf49588a89f09abc8fedb8ed81e963cf9f30a374cdcc52a432507aa7ab5993acba2494b6f5e0ba1df421ee753a4e2b2eec8bebfc023e3fe1faebd488f7b7c5372d496be21032be0b39111b39265019f2e1065ce95d6eb95e4e895cdac666d59dadace291c22143a2797f5d9b4a90a84d3306cb207384561d98d49b255f46d8ae4a6347571ab33eccb9bf32e1b8bd59c8d2fe7ea8f8d906a4601350588a35028c194c82413fcc61510141c21fae52a7ffe21504d0678c655fb24ba226aa4b4b7d8576e48a30b133cc3c338b52047d9ea380bc7fc1864b84ea07757a058559bb6e64b470466fef3da51a650e795269f59ca0ac545b7c237658afa21a4cad73ae683c0961a1818ad5d70b01429b16630a458231a9a5676ea07b87211d557066fb82fdd232c94a25eee97909d8c46c7eee09cb2546c98f5d31accb493130d4fdb2ce6f50d213a96271c51df03417cc0f8cb06095357e12f962fb462400f983f24628ba137ce2a8f47ee6b08828bd2803ddda13835b79a3c28753e8155e404044ff1bc98ed6014d8542ab77e40b8ebdedfd2b64b19d61a1c2eb300eb021f09bc8e599edd3fc19c3631a0383a36f90058a4ec782069d47091dc5660e19ea0721ea2c7d14e7af5001bc9d02406490c2b330e852f03b88481dea53626272084ead8dc9e170bbd67ce7374dddf4ba3b7ddfe8e732b7e3c549eaaee74e0703c012b538af7d7bb763c40a5ab606beb680e4942c1e8e21059a608b213fa7979159e8cb45c13995eb5085f27357177ceb8096e3011b25fc625770270c724d400e04a0d7618bf74f1e042fe56627d5f8e2ec9f1edc6270849b76929bbdefe57ab6ba6002f0b05cf9b820bf6eadb5f1e9ff1181e2e6c1e6595d8749affa99b1372a2fd317bcaf98ffa73a515a5ddf7b75d78a988e6b72eba7b58bd9408c663d974c6c034683252a74d093ad9460cd24422ae94840b5bac7a04abd59887dc1688de07e36f7da27fc7364975f684dc03fe56cb43597ca375f83e00822d557d935d7dc8aef088cdf32b63893a2fc5bb60c219453c00c07559bdfee63ce56eedcadf04413c6b3e174017e3a2504164cffe88fc9226e645d3892937f87cb5170ba685161dd2a30e0a9a304068fcb12bfee7cdb23e45e6569e841f614add7d0765e5e8df6f106ef9e7080d96da9c65f64b18db24f875609ccfe2ca3a37981535cbfd677132f9a13cc449f79e63cf81c7094fbe6bc52d0c40c35328ea35e872d0e283d13065582e7de69bfb88b27d26e9ee313ba10ef9c5106c57abd4571caae8b09aac5a6075f964139e13c79c8343bb252842ecc633813d33385c0aa4ea6a7f75c144842236d3b87dd74da1c2c654e076471f0b59da739d5b53b80cfde3a22f0a1a85443acf57997e501ee5ae155a818035119e36a47dd05b743e4539a3564e78cc4bc4385ef89f1a0436fdc07273171f1605160d5185001a8f7081b812e22dcb20e027ad1445891db4d7942d08987ee72facde123905b18339adf8c4eadb5652151eee37191eb2e4a58fdcc91940e1d545219c874d0efd7d027649fb7947447b3b89073613d8eb94a79e3066883dc09627d8cf8f7c4c6315a66a41446c81a5c182c8c3fa41d158546cb1edf2850fa8426a429939c3884030366220ffb4edee0eb2421beb0c6feddfd1498c2755631d560028db146263bf9b2be7cb30c63f22b97cc3be92c6529c32f2c3ee06abc535ce846135ac30553fc6d36d26265db5fe8b89b9c2088b463e96db4e2ba203897016c1680dfdc3b60eb838db67a3422e20e559b9d86e7b0cb03302c1478012f96320cceeea68cc5a443b9418d2c3590a4f3da7f40cf96cdf378fe1c5c9f7bea7ce21b987ab6af690e8ff15e2d8164a5e061234ad657d12b1d3a4be9d2722f4b096b7143e642a47d9841ca2a46619ae883eacb45972c8e27b264d94f6289a3cde0742f4282b3e1c69bc74bddf96ad2b9f39672b4df692227a56fd55f6c34df598808d8f44f709d0a86fec73ddfcbb6f9c759e3b39b1a9a8cd6f583ddd3ccd65bb38f6d9e73a915ba93fc09a0b81143c8b2f0abd815bd4c5af380982ca4b9ac28d487277d898db9f0725ef6bed09d6898cb7b9afc4c68ddabe4bdbc26c2f935d37a42fb73ab8bbddaba28642bfa5484cfc3a1ac31bd873e727d9acdbf077eaf6fd43493846701bffa83fe89f0d7621ea826f24655101213c74d82b8935dba9184970865cb34dd76d0a2a9b37eec3ada9dda1d8b6fdc27ac2900f490dfb80fd70cbee4b23d2d419faf31d57e303d6da8933295302e876b312e6f398539064e88cc5a754a1ca56d45df295b5be16ae3b8c6a9938232bd53f839577614c520caf359a766903f9602fa7d40d909b4ecbbe195bea95ac6d8c0028939d156c5097160c5161cabfc7b0feb8964a71de77d8b604aa26648fe11d5e6a373de76eda7209520d1156e38d00c81128b4ee73c40eb82c684edb3b3bc2eaacf76b829149df9ed631cf220c390e9a062aee823de36bd4813b465661d325c52bcb7b73dfded6faab5a424a339e304ae7a6b2f59497313e2a19b6b01ce6d9367e8beb32bc8d1411f71050f385ab0d31867c4bab88bf6c396f06d4fa401ecbc91d9b9105e96390d72729f47340b4fb8630c158481465aed31ba1b147f50c414f26ab2620192a83f9c3ec53f631ed41331d671287a13653cde2dbf34f48bec3c3a38572778b780e6ce34a8c52cfde96dbc07c848d441478570d4bbcbb06797682e18b88cc3dc271b06ea002fec40087d3e9acb03fc9d26a45ae3afe261432909369eee3df67f71215941bed2a9cab1f29c816bbebc705779da89b644c94da1f234278260ad547120440acf5ce103245a3831ce3ef609e054f2b5bc00a5bcdd2a76775732c5f7aa0c18fba32103dac64716e5b8c158f60f31375da550fcb8f72f5ea1fb045bfe031f3bb7", 0x1000}, {&(0x7f0000000700)="8a5c2784d947b471fb6539d9ebed9f0b85c28d7ffc2480e17b842b97103368c3508ca9974c021e3b58eabddc36134b78f1938d2be0a7e24488c5095c05efaf98e651840f75693c53d9f5c6e8c2310c947330e7db7e582abcd8cdf7c1753525ff2868620cdde10ba665f15a84a851343508249596bdfc59288d501e922eb96d09dda8361760ed36bc004acfaf3980315d74ac3aabaed3503c02ebae71b458faff07b06ee85ff9491e616229e702d54104661da92bf3f87f84dc3a4bd382ef47835f4f9c7075008b159a1053b503b32923bac426e372032403ff7b411909d167fc20cbc9b4da1e741a43", 0xe9}, {&(0x7f0000000540)="bb62eb1f14b0aceb89c42faeff17a45109731388ccc57941eaefe2419ce985e6c0a4dc76a6b906f7fa9271c90ff5539cf6dd0e639b6f63ef2ee4475f1738cd3f4b769a85f5acde654e03401b29c79573805ab7855cf6", 0x56}, {&(0x7f0000000800)="002cb79ba8abf871f07e067ab86ccd", 0xf}], 0x7, &(0x7f00000008c0)=[{0x58, 0x110, 0x5, "484ea03911b5b39b63e72ec5da26ebe5fa3bc6ee3fa2df7264cd23f0853f84c187a2ac417da0827a82d9ad4238bdcef29aa1cac2efc86540e60d7578e34f3287dd111dd64d63a2"}, {0x100, 0x0, 0x6, "43eaa6408772019f47305d90c8013eedd3dab1f43bcdc1cb61ab208e4d9fae1ac77eb42802c3683cb5163eb633a06a2c3702c1af75ffc229a4d524c9eb33ab252a0267a21715f38b64db4c168d0bb6d0074c2e564881a00678f12e074d3c612abffaa0c44b9d36b2bc2e90b51d86e09b00f138c539887aaa63e70859f782ca41c6e5db4660aa3f092451c8e36c79754b3dc2c41e105b362a5afff318d156707c8b54e3029b6bfe2fd7d75fd4bb5a7bda2dfe92b3829b90695ef400268dddf029d1c64573201a8c3ade33741b96882ab2957c473ee429978d9d4e9ae06f6877d211ed67498e8506658bd787"}, {0x40, 0x108, 0xfffff4b5, "28a93f820d568019635c6a4793263199ff401156e875ee4d4fc7874c2ed7f2faccd9aec4fd0a63826a97ad"}, {0xf0, 0x0, 0x4, "fc577d5751dfdea15fbfc4b20c6550bee790141667e2b194ffb201add816897dc3ea3a5b93136160ec367656b44bde21579172d37a334026d6cc5ddb524c731d4ed19cb1c63070a15060374605713244df4040a4c2e4643bea3d88f5eb7df0dac1f3a3960a7bbffabb7bedc1147b0d2bcf8c8e26f8294c894ebe5b4dcfac08662c5a2335f5cd3fd3e5dc08e8b4bd9704b0310134e125f925244caa85bcfbebde34f0785f8dc1f429ba8031c5071e7eeab61c7ed691facb4a7e00535f2310cff498f5c56d141984774aba3da20e36d0f9b9dbe199c8bed03a9e"}, {0xe0, 0x84, 0xa, "6803957bfc46c195812e05ec7cd35ae88916b6c7ef0e4956c7efc9340381cceb2416d92aede6d594c3a11b12b92570f2f2a9a190282404991adbc8a136c29cf478ff88e263554078b44772ca49d57d453a53e9d3edd5be8712dba723967f46ae2b277cf39897bf8673dac1bdfdec632f7b597265b89ded5d432765e4496d78a78393d93bac672dcb1046dc0d6c19ce98711dd70fae06519d61929a36855c9673277f940aeec4d43ffdb356a38d84e23096918a701b8fc4174473b48b91cd012619ea33ad9ff60e6dc5"}, {0x68, 0x0, 0x1, "d4f9895617d001eb642b68bc995619dba6b52bad5e1629a14a087150c2f81b1fe349ea147a6e0a8b5434b50f985a7252d52f7498d8d38aa459991223640edb24b0083725f5099dc48e162f69d62fc7fbdf5f7cab98"}], 0x3d0}}], 0x1, 0x40080) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) close(r0) 452.888913ms ago: executing program 1 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setresgid(0xffffffffffffffff, 0x0, 0x0) 413.052784ms ago: executing program 1 (id=276): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0x20, &(0x7f00000011c0)={0x0, 0x0, 0x0, &(0x7f00000010c0)=""/224, 0xe0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000012c0)={'ip6gre0\x00', &(0x7f0000001240)={'ip6gre0\x00', 0x0, 0x29, 0x8b, 0xa, 0xb, 0x6, @empty, @empty, 0x8000, 0x10, 0x40, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', r1, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xffffffc6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x80, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000073e238103ddc16e76db1d521c02e4071505a3c7f00000000000000788da60b22e1fedd697e03e0eca997"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r7 = dup(r6) r8 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r8, 0xee72) mq_open(&(0x7f0000000200)='ext4\x00', 0x80, 0x374ac826d3c775d7, &(0x7f0000000340)={0x8, 0x6e, 0x80, 0x6}) sendfile(r7, r8, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000180)=0x19) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) 317.552256ms ago: executing program 3 (id=277): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x3800813, &(0x7f0000000500)=ANY=[@ANYBLOB="646d6f64653d3078303030303030303030303030303062312c6e6f876f636b2c6e6f636f6d70726573732c636865636b3d72656c61780100008000000000636f726e2c6e6f6a6f6c6965742c73686f756173736f632c7569643dbdd6e6fc71b0fea0319447678fa9ad824873920b8a912a3067877b7901061679ed5916b13de14a57d0c34160a5b712f5", @ANYRESHEX=0x0, @ANYBLOB=',unhide,norock,unhide,gid=', @ANYRESHEX=0x0, @ANYBLOB=',overriderockperm,cruft,cruft,map=acorn,\x00'], 0x1, 0xa4a, &(0x7f00000007c0)="$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") (async) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000100)=0xc) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = openat(0xffffffffffffffff, 0x0, 0x42, 0x1ff) close(r1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) (async) rseq(&(0x7f00000004c0), 0x20, 0xfffffffffffffffd, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, 0x0, 0x80) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) (async) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$cont(0x20, r4, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r5, 0x0, 0x100000010000}, 0x18) (async) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000100a00000a140000001100010000090000000300000200000a"], 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e9780000000000e108f1aec9dd1c4ffdefe3e0127a92dd48eb716af1067947780550f98e0e9ec7a83df9772e0ca1b1a5cb94c1032ef4d1b9fea24c394189b156940a9b6838f122b9711a6eb5cdde02d010b45e4295bb58fb99e0c53e1b12e93d8c24059d77b4cfeb262da999c86a9e4b1e849123274b457c847311902ff77a83744d67f903fd821ddb0eb10c2495249dcd2ce72cdc2e748d10cdfc1409b52105a07657deccfd599677ba56e69ca1acc9e76620f1cf123ae98537f350efbabe6a60c20c8e88bf0252b3a32c"], 0x20}}, 0x0) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 158.546048ms ago: executing program 0 (id=278): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) r6 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x8, 0x3, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_read_part_table(0x104f, &(0x7f0000001200)="$eJzsz8EJwkAQBdC/GyPuyZZswiZswtiGdy+24EWr8qgEE0gDIsJ7h93PDHyY8FO3epzjZTu+LbmXlHRJDknW8/p5Ki01w5jPSX116bNZVLUhKTWtrJL0n9kjU+fim+yS7K9fPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sQ7AAD//4vpCY8=") syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9, {0x1}}, './file1\x00'}) io_uring_enter(r6, 0x22d6, 0x4b34, 0x4, 0x0, 0x0) close_range(r1, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 157.897438ms ago: executing program 3 (id=279): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) 25.04038ms ago: executing program 3 (id=280): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60a00}], 0x1f) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=281): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r2 = socket(0x18, 0x3, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) kernel console output (not intermixed with test programs): llmulticast mode [ 34.896884][ T3310] bridge_slave_0: entered promiscuous mode [ 34.914212][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.921346][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.928655][ T3308] bridge_slave_0: entered allmulticast mode [ 34.935128][ T3308] bridge_slave_0: entered promiscuous mode [ 34.953845][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.960994][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.968177][ T3310] bridge_slave_1: entered allmulticast mode [ 34.974911][ T3310] bridge_slave_1: entered promiscuous mode [ 34.989413][ T3306] hsr_slave_0: entered promiscuous mode [ 34.996345][ T3306] hsr_slave_1: entered promiscuous mode [ 35.003214][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.010451][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.017681][ T3308] bridge_slave_1: entered allmulticast mode [ 35.024487][ T3308] bridge_slave_1: entered promiscuous mode [ 35.041808][ T3313] team0: Port device team_slave_0 added [ 35.055498][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.069225][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.076733][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.083936][ T3318] bridge_slave_0: entered allmulticast mode [ 35.090417][ T3318] bridge_slave_0: entered promiscuous mode [ 35.097587][ T3313] team0: Port device team_slave_1 added [ 35.104425][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.124731][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.134710][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.141936][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.150315][ T3318] bridge_slave_1: entered allmulticast mode [ 35.156959][ T3318] bridge_slave_1: entered promiscuous mode [ 35.174238][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.215648][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.222707][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.251781][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.263588][ T3310] team0: Port device team_slave_0 added [ 35.269544][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.276760][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.302751][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.322016][ T3308] team0: Port device team_slave_0 added [ 35.329356][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.339260][ T3310] team0: Port device team_slave_1 added [ 35.359367][ T3308] team0: Port device team_slave_1 added [ 35.368529][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.387533][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.394636][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.421641][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.433454][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.440629][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.467183][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.491597][ T3318] team0: Port device team_slave_0 added [ 35.518422][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.525531][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.551971][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.563612][ T3318] team0: Port device team_slave_1 added [ 35.571893][ T3313] hsr_slave_0: entered promiscuous mode [ 35.577831][ T3313] hsr_slave_1: entered promiscuous mode [ 35.584838][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.592597][ T3313] Cannot create hsr debugfs directory [ 35.602439][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.609684][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.635835][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.677673][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.684714][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.710856][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.722382][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.729375][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.755401][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.767999][ T3310] hsr_slave_0: entered promiscuous mode [ 35.774190][ T3310] hsr_slave_1: entered promiscuous mode [ 35.780151][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.787904][ T3310] Cannot create hsr debugfs directory [ 35.830221][ T3308] hsr_slave_0: entered promiscuous mode [ 35.836609][ T3308] hsr_slave_1: entered promiscuous mode [ 35.842892][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.850695][ T3308] Cannot create hsr debugfs directory [ 35.900014][ T3318] hsr_slave_0: entered promiscuous mode [ 35.906177][ T3318] hsr_slave_1: entered promiscuous mode [ 35.912239][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.919896][ T3318] Cannot create hsr debugfs directory [ 36.010717][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.037973][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.056886][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.075367][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.111318][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.127837][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.138979][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.151178][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.180798][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.190957][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.200514][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.210507][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.247067][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.256210][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.265093][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.280386][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.298574][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.333392][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.359271][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.371276][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.380306][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.393759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.401071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.409803][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.416970][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.430823][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.443255][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.466641][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.478904][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.489476][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.522193][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.533602][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.551919][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.561065][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.568268][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.584993][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.592214][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.603869][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.611009][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.619925][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.627175][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.652085][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.668585][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.698541][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.705690][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.728735][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.735927][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.752531][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.775422][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.814998][ T1894] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.822220][ T1894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.835465][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.842617][ T1894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.907069][ T3306] veth0_vlan: entered promiscuous mode [ 36.932271][ T3306] veth1_vlan: entered promiscuous mode [ 36.946655][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.969102][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.989052][ T3306] veth0_macvtap: entered promiscuous mode [ 36.997426][ T3306] veth1_macvtap: entered promiscuous mode [ 37.007296][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.030994][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.042848][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.056530][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.071034][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.079926][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.088729][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.097650][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.199164][ T3308] veth0_vlan: entered promiscuous mode [ 37.230565][ T3308] veth1_vlan: entered promiscuous mode [ 37.260300][ T3313] veth0_vlan: entered promiscuous mode [ 37.267335][ T3308] veth0_macvtap: entered promiscuous mode [ 37.277062][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.278936][ T3313] veth1_vlan: entered promiscuous mode [ 37.301520][ T3308] veth1_macvtap: entered promiscuous mode [ 37.319567][ T3313] veth0_macvtap: entered promiscuous mode [ 37.341716][ T3310] veth0_vlan: entered promiscuous mode [ 37.355150][ T3474] loop1: detected capacity change from 0 to 128 [ 37.370661][ T3313] veth1_macvtap: entered promiscuous mode [ 37.384960][ T3310] veth1_vlan: entered promiscuous mode [ 37.396947][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.407422][ T3318] veth0_vlan: entered promiscuous mode [ 37.415888][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.431064][ T3475] syz.1.2: attempt to access beyond end of device [ 37.431064][ T3475] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 37.443277][ T3318] veth1_vlan: entered promiscuous mode [ 37.451574][ T3310] veth0_macvtap: entered promiscuous mode [ 37.458816][ T3475] syz.1.2: attempt to access beyond end of device [ 37.458816][ T3475] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 37.466391][ T3310] veth1_macvtap: entered promiscuous mode [ 37.478556][ T3475] syz.1.2: attempt to access beyond end of device [ 37.478556][ T3475] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 37.482423][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.492920][ T3475] syz.1.2: attempt to access beyond end of device [ 37.492920][ T3475] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 37.507792][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.528514][ T3318] veth0_macvtap: entered promiscuous mode [ 37.534584][ T3475] syz.1.2: attempt to access beyond end of device [ 37.534584][ T3475] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 37.541235][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.560425][ T3318] veth1_macvtap: entered promiscuous mode [ 37.568333][ T3313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.577169][ T3313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.577649][ T3475] syz.1.2: attempt to access beyond end of device [ 37.577649][ T3475] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 37.586167][ T3313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.586224][ T3313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.623277][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.632308][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.641072][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.649818][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.660836][ T3475] syz.1.2: attempt to access beyond end of device [ 37.660836][ T3475] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 37.678353][ T3475] syz.1.2: attempt to access beyond end of device [ 37.678353][ T3475] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 37.690964][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 37.690986][ T29] audit: type=1400 audit(1750596805.674:97): avc: denied { mounton } for pid=3473 comm="syz.1.2" path="/0/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 37.696367][ T3475] syz.1.2: attempt to access beyond end of device [ 37.696367][ T3475] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 37.733465][ T3475] syz.1.2: attempt to access beyond end of device [ 37.733465][ T3475] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 37.749035][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.760826][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.772296][ T29] audit: type=1400 audit(1750596805.764:98): avc: denied { map_create } for pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.795358][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.808534][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.810942][ T29] audit: type=1400 audit(1750596805.804:99): avc: denied { map_read map_write } for pid=3473 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.818504][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.847418][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.856251][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.869215][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.878250][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.887059][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.895950][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.956118][ T29] audit: type=1400 audit(1750596805.934:100): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.996595][ T3482] loop0: detected capacity change from 0 to 256 [ 38.023879][ T29] audit: type=1400 audit(1750596806.004:101): avc: denied { prog_run } for pid=3483 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.080562][ T29] audit: type=1400 audit(1750596806.054:102): avc: denied { create } for pid=3485 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.100701][ T29] audit: type=1400 audit(1750596806.064:103): avc: denied { open } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.120017][ T29] audit: type=1400 audit(1750596806.064:104): avc: denied { kernel } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.133799][ T3489] Zero length message leads to an empty skb [ 38.139302][ T29] audit: type=1400 audit(1750596806.064:105): avc: denied { tracepoint } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.164840][ T29] audit: type=1400 audit(1750596806.064:106): avc: denied { create } for pid=3480 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.258110][ T3497] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.260852][ T3494] 9pnet_fd: Insufficient options for proto=fd [ 38.272751][ T3497] ipvlan2: entered promiscuous mode [ 38.278423][ T3497] ipvlan2: entered allmulticast mode [ 38.283780][ T3497] macvlan0: entered allmulticast mode [ 38.289313][ T3497] veth1_vlan: entered allmulticast mode [ 38.296057][ T3496] loop3: detected capacity change from 0 to 128 [ 38.317646][ T3489] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 38.325678][ T3489] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7'. [ 38.340903][ T3496] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.371899][ T3489] team0: entered promiscuous mode [ 38.376747][ T3505] loop2: detected capacity change from 0 to 1024 [ 38.376996][ T3489] team_slave_0: entered promiscuous mode [ 38.386584][ T3505] ======================================================= [ 38.386584][ T3505] WARNING: The mand mount option has been deprecated and [ 38.386584][ T3505] and is ignored by this kernel. Remove the mand [ 38.386584][ T3505] option from the mount to silence this warning. [ 38.386584][ T3505] ======================================================= [ 38.389432][ T3489] team_slave_1: entered promiscuous mode [ 38.425663][ T3505] EXT4-fs: Ignoring removed nobh option [ 38.436042][ T3505] EXT4-fs: Ignoring removed bh option [ 38.438339][ T3489] bridge0: port 3(team0) entered blocking state [ 38.445898][ T3496] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.447918][ T3489] bridge0: port 3(team0) entered disabled state [ 38.490912][ T3489] team0: entered allmulticast mode [ 38.496110][ T3489] team_slave_0: entered allmulticast mode [ 38.502052][ T3489] team_slave_1: entered allmulticast mode [ 38.509497][ T3506] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7'. [ 38.519268][ T3489] bridge0: port 3(team0) entered blocking state [ 38.525770][ T3489] bridge0: port 3(team0) entered forwarding state [ 38.534577][ T3496] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 38.561974][ T3505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.603716][ T3510] loop0: detected capacity change from 0 to 2048 [ 38.616285][ T3512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12'. [ 38.653103][ T3514] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.10: Allocating blocks 497-513 which overlap fs metadata [ 38.681350][ T3300] loop0: p2 p3 p7 [ 38.681995][ T3514] EXT4-fs (loop2): pa ffff8881069a2070: logic 256, phys. 369, len 9 [ 38.693320][ T3514] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 38.731253][ T3510] loop0: p2 p3 p7 [ 38.736372][ T3518] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.741264][ T3514] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 38.769352][ T3512] loop4: detected capacity change from 0 to 8192 [ 38.778888][ T3510] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13'. [ 38.810856][ T3492] loop4: p1 p3 p4 [ 38.814935][ T3492] loop4: p1 size 8390912 extends beyond EOD, truncated [ 38.827311][ T3492] loop4: p3 size 589824 extends beyond EOD, truncated [ 38.838554][ T3512] loop4: p1 p3 p4 [ 38.848021][ T3519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.848962][ T3512] loop4: p1 size 8390912 extends beyond EOD, truncated [ 38.908471][ T3519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.909608][ T3512] loop4: p3 size 589824 extends beyond EOD, truncated [ 38.931343][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.196402][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 39.207948][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 39.219381][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 39.236772][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 39.238852][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 39.265271][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 39.348611][ T3531] loop4: detected capacity change from 0 to 1024 [ 39.417629][ T3531] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.429863][ T3531] JBD2: no valid journal superblock found [ 39.435620][ T3531] EXT4-fs (loop4): Could not load journal inode [ 39.684297][ T3535] loop0: detected capacity change from 0 to 2048 [ 39.737001][ T3536] loop2: detected capacity change from 0 to 512 [ 39.789563][ T3536] EXT4-fs: dax option not supported [ 39.812211][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 39.841434][ T3535] loop0: p2 p3 p7 [ 39.859928][ T3535] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17'. [ 40.096270][ T3544] loop4: detected capacity change from 0 to 164 [ 40.117714][ T3536] syz.2.18 (3536) used greatest stack depth: 10192 bytes left [ 40.158979][ T3318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.166861][ T3544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.20'. [ 40.212239][ T3547] loop2: detected capacity change from 0 to 512 [ 40.221150][ T3547] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.22: iget: bad extended attribute block 1 [ 40.248156][ T3547] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.22: couldn't read orphan inode 15 (err -117) [ 40.288054][ T3310] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 40.303104][ T3310] ISOFS: unable to read i-node block [ 40.309193][ T3547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.337674][ T3310] ISOFS: unable to read i-node block [ 40.375252][ T3547] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.22: lblock 0 mapped to illegal pblock 13 (length 1) [ 40.408293][ T3518] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.427090][ T3547] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.22: lblock 0 mapped to illegal pblock 13 (length 1) [ 40.445049][ T3547] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.22: lblock 0 mapped to illegal pblock 13 (length 1) [ 40.461988][ T3547] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.22: lblock 0 mapped to illegal pblock 13 (length 1) [ 40.518902][ T3556] loop0: detected capacity change from 0 to 1024 [ 40.526444][ T3556] ext4: Bad value for 'min_batch_time' [ 40.579020][ T3547] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #2: block 13: comm syz.2.22: lblock 0 mapped to illegal pblock 13 (length 1) [ 40.764014][ T3563] loop0: detected capacity change from 0 to 512 [ 40.774913][ T3563] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.788136][ T3563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.807755][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.826940][ T3518] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.863493][ T3563] EXT4-fs (loop0): 1 truncate cleaned up [ 40.863710][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.878762][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.931476][ T3518] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.943791][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.965156][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.004017][ T3575] loop2: detected capacity change from 0 to 2048 [ 41.034586][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.047352][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.051798][ T3575] loop2: p2 p3 p7 [ 41.116583][ T3575] netlink: 64 bytes leftover after parsing attributes in process `syz.2.29'. [ 41.123127][ T3578] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 41.130502][ T3518] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.157778][ T3518] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.182365][ T3518] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.194820][ T3518] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.238133][ T3565] chnl_net:caif_netlink_parms(): no params data found [ 41.424713][ T51] bridge_slave_1: left allmulticast mode [ 41.430800][ T51] bridge_slave_1: left promiscuous mode [ 41.436561][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.474643][ T51] bridge_slave_0: left allmulticast mode [ 41.480469][ T51] bridge_slave_0: left promiscuous mode [ 41.486235][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.582746][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.593026][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.603804][ T51] bond0 (unregistering): Released all slaves [ 41.643738][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.650941][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.658218][ T3565] bridge_slave_0: entered allmulticast mode [ 41.665402][ T3565] bridge_slave_0: entered promiscuous mode [ 41.677093][ T51] hsr_slave_0: left promiscuous mode [ 41.683046][ T51] hsr_slave_1: left promiscuous mode [ 41.689700][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.697572][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.706190][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.713815][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.734093][ T51] veth1_macvtap: left promiscuous mode [ 41.739728][ T51] veth0_macvtap: left promiscuous mode [ 41.745774][ T51] veth1_vlan: left promiscuous mode [ 41.751601][ T51] veth0_vlan: left promiscuous mode [ 41.824672][ T51] team0 (unregistering): Port device team_slave_1 removed [ 41.835666][ T51] team0 (unregistering): Port device team_slave_0 removed [ 41.891124][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.898296][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.908672][ T3565] bridge_slave_1: entered allmulticast mode [ 41.925383][ T3565] bridge_slave_1: entered promiscuous mode [ 41.932922][ T3615] loop2: detected capacity change from 0 to 512 [ 41.947331][ T3613] pim6reg: entered allmulticast mode [ 41.953359][ T3612] pim6reg: left allmulticast mode [ 41.987751][ T3565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.991620][ T3618] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 42.003796][ T3618] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.011758][ T3618] vhci_hcd vhci_hcd.0: Device attached [ 42.085491][ T3565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.127087][ T3625] mmap: syz.3.38 (3625) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.151472][ T3565] team0: Port device team_slave_0 added [ 42.164837][ T3565] team0: Port device team_slave_1 added [ 42.165184][ T3627] loop2: detected capacity change from 0 to 1024 [ 42.180461][ T3627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.218357][ T3633] loop3: detected capacity change from 0 to 1024 [ 42.225147][ T3387] vhci_hcd: vhci_device speed not set [ 42.244307][ T3633] EXT4-fs: Ignoring removed nobh option [ 42.250032][ T3633] EXT4-fs: Ignoring removed bh option [ 42.260913][ T3565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.268478][ T3565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.294632][ T3565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.294904][ T3387] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 42.326016][ T3565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.329507][ T3627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.333060][ T3565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.333133][ T3565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.408373][ T3565] hsr_slave_0: entered promiscuous mode [ 42.414288][ T3623] SELinux: failed to load policy [ 42.418670][ T3565] hsr_slave_1: entered promiscuous mode [ 42.425811][ T3565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.426276][ T3633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.433753][ T3565] Cannot create hsr debugfs directory [ 42.480677][ T3618] loop1: detected capacity change from 0 to 512 [ 42.491822][ T3618] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.517552][ T3618] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 42.597098][ T3618] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.626273][ T3618] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.667415][ T3618] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 42.695914][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.718476][ T3618] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.37: bg 0: block 40: padding at end of block bitmap is not set [ 42.735752][ T3663] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.40: Allocating blocks 497-513 which overlap fs metadata [ 42.752468][ T3618] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 42.763422][ T3618] EXT4-fs (loop1): 1 truncate cleaned up [ 42.770290][ T3663] EXT4-fs (loop3): pa ffff888106ab2070: logic 256, phys. 369, len 9 [ 42.778464][ T3663] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 42.789260][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.804607][ T3565] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.810236][ T3663] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 42.828025][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 42.828043][ T29] audit: type=1400 audit(1750596810.804:407): avc: denied { mount } for pid=3667 comm="syz.2.42" name="/" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 42.829560][ T3668] capability: warning: `syz.2.42' uses 32-bit capabilities (legacy support in use) [ 42.834406][ T29] audit: type=1400 audit(1750596810.804:408): avc: denied { search } for pid=3667 comm="syz.2.42" name="/" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.889388][ T29] audit: type=1400 audit(1750596810.804:409): avc: denied { search } for pid=3667 comm="syz.2.42" name="/" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.893048][ T3618] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.37: corrupted xattr block 31: invalid header [ 42.911864][ T29] audit: type=1400 audit(1750596810.804:410): avc: denied { search } for pid=3667 comm="syz.2.42" name="/" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 42.911904][ T29] audit: type=1400 audit(1750596810.804:411): avc: denied { create } for pid=3667 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.970416][ T29] audit: type=1400 audit(1750596810.804:412): avc: denied { bind } for pid=3667 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.992231][ T29] audit: type=1400 audit(1750596810.824:413): avc: denied { write } for pid=3667 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.003693][ T3565] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.011523][ T29] audit: type=1400 audit(1750596810.864:414): avc: denied { search } for pid=3667 comm="syz.2.42" name="/" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.024042][ T3618] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 43.040718][ T29] audit: type=1400 audit(1750596810.864:415): avc: denied { setattr } for pid=3667 comm="syz.2.42" name="/" dev="configfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.068557][ T3619] vhci_hcd: connection reset by peer [ 43.076580][ T3618] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.37: corrupted xattr block 31: invalid header [ 43.090794][ T145] vhci_hcd: stop threads [ 43.095542][ T145] vhci_hcd: release socket [ 43.097238][ T3618] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 43.100338][ T145] vhci_hcd: disconnect device [ 43.135566][ T3565] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.147145][ T3565] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.159877][ T3618] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.37: bad symlink. [ 43.187972][ T3672] loop2: detected capacity change from 0 to 512 [ 43.190346][ T29] audit: type=1400 audit(1750596811.154:416): avc: denied { read } for pid=3617 comm="syz.1.37" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 43.197972][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.235137][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.280493][ T3681] loop3: detected capacity change from 0 to 2048 [ 43.308549][ T3672] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.343576][ T3492] loop3: p2 p3 p7 [ 43.369202][ T3681] loop3: p2 p3 p7 [ 43.382080][ T3672] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.43: corrupted inode contents [ 43.404451][ T3565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.430062][ T3672] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.43: mark_inode_dirty error [ 43.441462][ T3692] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 43.459372][ T3565] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.483997][ T3672] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.43: corrupted inode contents [ 43.506490][ T3692] ipvlan0: entered allmulticast mode [ 43.512046][ T3692] veth0_vlan: entered allmulticast mode [ 43.549586][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 43.558417][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 43.567389][ T3692] team0: Device ipvlan0 failed to register rx_handler [ 43.577124][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 43.587665][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.594887][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.614610][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 43.625918][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.626949][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.642357][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.826995][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.867048][ T3565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.886793][ T3717] loop2: detected capacity change from 0 to 256 [ 43.969121][ T3731] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.48'. [ 43.979289][ T3731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.48'. [ 44.007124][ T37] IPVS: starting estimator thread 0... [ 44.110331][ T3738] IPVS: using max 2112 ests per chain, 105600 per kthread [ 44.160693][ T3744] syz.2.52 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.174069][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 44.226091][ T3754] loop2: detected capacity change from 0 to 736 [ 44.237264][ T3736] loop0: detected capacity change from 0 to 8192 [ 44.269101][ T3754] rock: directory entry would overflow storage [ 44.275460][ T3754] rock: sig=0x3b10, size=4, remaining=3 [ 44.308467][ T3565] veth0_vlan: entered promiscuous mode [ 44.331619][ T3565] veth1_vlan: entered promiscuous mode [ 44.341307][ T3736] program syz.0.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.367044][ T3565] veth0_macvtap: entered promiscuous mode [ 44.389413][ T3744] netlink: 24 bytes leftover after parsing attributes in process `syz.2.52'. [ 44.421099][ T3565] veth1_macvtap: entered promiscuous mode [ 44.446269][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.469302][ T3565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.487748][ T3754] netlink: 'syz.2.52': attribute type 27 has an invalid length. [ 44.498721][ T3565] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.507754][ T3565] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.516753][ T3565] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.525655][ T3565] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.635188][ T3754] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.642549][ T3754] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.711276][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.722945][ T3754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.732228][ T3771] process 'syz.1.54' launched '/dev/fd/4' with NULL argv: empty string added [ 44.753087][ T3754] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.762750][ T3754] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.771830][ T3754] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.780960][ T3754] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.894238][ T3778] smc: net device lo applied user defined pnetid SYZ1 [ 44.930202][ T3778] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 45.086814][ T3789] can: request_module (can-proto-0) failed. [ 45.107557][ T3792] can: request_module (can-proto-0) failed. [ 45.142893][ T3801] netlink: 'syz.1.57': attribute type 29 has an invalid length. [ 45.152790][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 45.164668][ T3792] netlink: 'syz.2.58': attribute type 29 has an invalid length. [ 45.172603][ T3792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 45.185371][ T3800] ip6tnl1: entered allmulticast mode [ 45.198198][ T3799] netlink: 'syz.5.59': attribute type 10 has an invalid length. [ 45.289534][ T3792] loop2: detected capacity change from 0 to 8192 [ 45.325124][ T3789] loop1: detected capacity change from 0 to 8192 [ 45.506461][ T3825] loop1: detected capacity change from 0 to 512 [ 45.524189][ T3826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.542035][ T3826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.553464][ T3825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.578876][ T3825] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.604809][ T3825] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.61: corrupted inode contents [ 45.619464][ T3825] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.61: mark_inode_dirty error [ 45.635636][ T3825] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.61: corrupted inode contents [ 45.677706][ T3841] netlink: 'syz.3.63': attribute type 10 has an invalid length. [ 45.685880][ T3841] ipvlan0: entered allmulticast mode [ 45.691414][ T3841] veth0_vlan: entered allmulticast mode [ 45.699062][ T3841] team0: Device ipvlan0 failed to register rx_handler [ 45.710140][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 45.880257][ T3861] loop5: detected capacity change from 0 to 512 [ 45.881099][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.891323][ T3861] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 45.916104][ T3861] EXT4-fs (loop5): 1 truncate cleaned up [ 45.934918][ T3861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.004977][ T3870] loop1: detected capacity change from 0 to 164 [ 46.068168][ T3306] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 46.082857][ T3306] ISOFS: unable to read i-node block [ 46.091640][ T3306] ISOFS: unable to read i-node block [ 46.155684][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.183988][ T3876] loop5: detected capacity change from 0 to 2048 [ 46.233462][ T3876] loop5: p2 p3 p7 [ 46.336726][ T3879] can: request_module (can-proto-0) failed. [ 46.344967][ T3879] netlink: 'syz.0.70': attribute type 29 has an invalid length. [ 46.372040][ T145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.390686][ T3879] loop0: detected capacity change from 0 to 8192 [ 46.432117][ T145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.491307][ T145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.513584][ T3885] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 46.524750][ T3885] team0: entered promiscuous mode [ 46.531389][ T3885] team_slave_0: entered promiscuous mode [ 46.537187][ T3885] team_slave_1: entered promiscuous mode [ 46.544824][ T3885] bridge0: port 3(team0) entered blocking state [ 46.551284][ T3885] bridge0: port 3(team0) entered disabled state [ 46.558244][ T3885] team0: entered allmulticast mode [ 46.564943][ T3885] team_slave_0: entered allmulticast mode [ 46.571272][ T3885] team_slave_1: entered allmulticast mode [ 46.582892][ T3885] bridge0: port 3(team0) entered blocking state [ 46.589952][ T3885] bridge0: port 3(team0) entered forwarding state [ 46.598117][ T145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.707780][ T145] team0: left allmulticast mode [ 46.713753][ T145] team_slave_0: left allmulticast mode [ 46.719386][ T145] team_slave_1: left allmulticast mode [ 46.725236][ T145] bridge0: port 3(team0) entered disabled state [ 46.745231][ T145] bridge_slave_1: left allmulticast mode [ 46.746130][ T3899] loop3: detected capacity change from 0 to 512 [ 46.751088][ T145] bridge_slave_1: left promiscuous mode [ 46.751296][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.775660][ T145] bridge_slave_0: left allmulticast mode [ 46.781633][ T145] bridge_slave_0: left promiscuous mode [ 46.787648][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.903135][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.914162][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.925212][ T145] bond0 (unregistering): Released all slaves [ 46.973795][ T145] hsr_slave_0: left promiscuous mode [ 46.979572][ T145] hsr_slave_1: left promiscuous mode [ 46.986716][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.994317][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.003309][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.010920][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.030474][ T145] veth1_macvtap: left promiscuous mode [ 47.036417][ T145] veth0_macvtap: left promiscuous mode [ 47.105239][ T145] team_slave_1 (unregistering): left promiscuous mode [ 47.112731][ T145] team0 (unregistering): Port device team_slave_1 removed [ 47.122885][ T145] team_slave_0 (unregistering): left promiscuous mode [ 47.131479][ T145] team0 (unregistering): Port device team_slave_0 removed [ 47.163375][ T145] smc: removing net device lo with user defined pnetid SYZ1 [ 47.205831][ T3886] chnl_net:caif_netlink_parms(): no params data found [ 47.247388][ T3886] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.254819][ T3886] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.263647][ T3886] bridge_slave_0: entered allmulticast mode [ 47.270789][ T3886] bridge_slave_0: entered promiscuous mode [ 47.278445][ T3886] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.285603][ T3886] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.294567][ T3886] bridge_slave_1: entered allmulticast mode [ 47.301798][ T3886] bridge_slave_1: entered promiscuous mode [ 47.323188][ T3886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.336554][ T3886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.357737][ T3886] team0: Port device team_slave_0 added [ 47.364797][ T3886] team0: Port device team_slave_1 added [ 47.381633][ T3886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.388628][ T3886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.414690][ T3886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.426480][ T3886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.431213][ T3387] usb 3-1: enqueue for inactive port 0 [ 47.433540][ T3886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.439248][ T3387] usb 3-1: enqueue for inactive port 0 [ 47.465025][ T3886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.505054][ T3886] hsr_slave_0: entered promiscuous mode [ 47.511441][ T3886] hsr_slave_1: entered promiscuous mode [ 47.539929][ T3387] vhci_hcd: vhci_device speed not set [ 47.761670][ T3886] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.772320][ T3886] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.781599][ T3886] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.792033][ T3886] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.808778][ T3886] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.815982][ T3886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.823325][ T3886] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.830558][ T3886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.865546][ T3886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.879342][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.888198][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.902961][ T3886] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.914572][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.921704][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.934243][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.941479][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.022153][ T3886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.104345][ T3886] veth0_vlan: entered promiscuous mode [ 48.112769][ T3886] veth1_vlan: entered promiscuous mode [ 48.131179][ T3886] veth0_macvtap: entered promiscuous mode [ 48.138944][ T3886] veth1_macvtap: entered promiscuous mode [ 48.151639][ T3886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.165886][ T3886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.176642][ T3886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.185487][ T3886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.194388][ T3886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.203302][ T3886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.272516][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 48.272532][ T29] audit: type=1326 audit(1750596816.264:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.317733][ T29] audit: type=1326 audit(1750596816.284:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.341074][ T29] audit: type=1326 audit(1750596816.294:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.364272][ T29] audit: type=1326 audit(1750596816.294:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.387657][ T29] audit: type=1326 audit(1750596816.294:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.410903][ T29] audit: type=1326 audit(1750596816.294:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.434689][ T29] audit: type=1326 audit(1750596816.294:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.457903][ T29] audit: type=1326 audit(1750596816.294:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.630916][ T29] audit: type=1326 audit(1750596816.624:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 48.665625][ T29] audit: type=1326 audit(1750596816.624:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 53.074282][ T4108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 53.080936][ T4108] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.088674][ T4108] vhci_hcd vhci_hcd.0: Device attached [ 53.102446][ T4101] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 53.114997][ T4105] smc: net device lo applied user defined pnetid SYZ1 [ 53.123415][ T4105] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 53.208332][ T4112] ip6tnl1: entered allmulticast mode [ 53.230882][ T4117] loop2: detected capacity change from 0 to 2048 [ 53.274161][ T4126] can: request_module (can-proto-0) failed. [ 53.287746][ T4118] loop2: p2 p3 p7 [ 53.293308][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 53.293325][ T29] audit: type=1326 audit(1750596821.284:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.320551][ T4126] netlink: 'syz.0.81': attribute type 29 has an invalid length. [ 53.325611][ T3558] vhci_hcd: vhci_device speed not set [ 53.333245][ T4126] __nla_validate_parse: 10 callbacks suppressed [ 53.333342][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 53.375962][ T29] audit: type=1326 audit(1750596821.314:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.399264][ T29] audit: type=1326 audit(1750596821.314:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.422593][ T29] audit: type=1326 audit(1750596821.314:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.442543][ T4117] loop2: p2 p3 p7 [ 53.446177][ T29] audit: type=1326 audit(1750596821.314:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.473346][ T29] audit: type=1326 audit(1750596821.314:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.496727][ T3558] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 53.506403][ T4126] loop0: detected capacity change from 0 to 8192 [ 53.513180][ T29] audit: type=1326 audit(1750596821.364:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.513221][ T29] audit: type=1326 audit(1750596821.364:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.513251][ T29] audit: type=1326 audit(1750596821.374:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 53.513318][ T29] audit: type=1326 audit(1750596821.374:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4125 comm="syz.0.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d5f0ee963 code=0x7ffc0000 [ 53.547356][ T4130] SELinux: failed to load policy [ 53.625634][ T2997] loop2: p2 p3 p7 [ 53.707640][ T4108] loop3: detected capacity change from 0 to 512 [ 53.725030][ T4108] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.741805][ T4108] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.750527][ T4108] EXT4-fs (loop3): orphan cleanup on readonly fs [ 53.757227][ T4108] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.773800][ T4108] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 53.783276][ T4108] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.77: bg 0: block 40: padding at end of block bitmap is not set [ 53.798769][ T4108] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 53.807916][ T4108] EXT4-fs (loop3): 1 truncate cleaned up [ 53.814004][ T4108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.830555][ T4108] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.77: corrupted xattr block 31: invalid header [ 53.844103][ T4108] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 53.853492][ T4108] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.77: corrupted xattr block 31: invalid header [ 53.867120][ T4108] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 53.876313][ T4108] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.77: bad symlink. [ 53.888728][ T4109] vhci_hcd: connection reset by peer [ 53.894764][ T1894] vhci_hcd: stop threads [ 53.899073][ T1894] vhci_hcd: release socket [ 53.903595][ T1894] vhci_hcd: disconnect device [ 53.955266][ T4141] can: request_module (can-proto-0) failed. [ 53.964152][ T4141] netlink: 'syz.0.93': attribute type 29 has an invalid length. [ 53.972374][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 54.010438][ T4141] loop0: detected capacity change from 0 to 8192 [ 54.124013][ T4148] can: request_module (can-proto-0) failed. [ 54.136581][ T4148] netlink: 'syz.0.96': attribute type 29 has an invalid length. [ 54.144438][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 54.182651][ T4151] loop2: detected capacity change from 0 to 512 [ 54.204281][ T4148] loop0: detected capacity change from 0 to 8192 [ 54.224325][ T4151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.254157][ T4151] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.265475][ T4151] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.304715][ T4155] loop5: detected capacity change from 0 to 512 [ 54.344767][ T4163] loop0: detected capacity change from 0 to 1024 [ 54.365915][ T4163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.382664][ T4163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.426196][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.517258][ T4161] FAULT_INJECTION: forcing a failure. [ 54.517258][ T4161] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.531345][ T4161] CPU: 0 UID: 0 PID: 4161 Comm: syz.2.88 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 54.531423][ T4161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.531441][ T4161] Call Trace: [ 54.531448][ T4161] [ 54.531463][ T4161] __dump_stack+0x1d/0x30 [ 54.531488][ T4161] dump_stack_lvl+0xe8/0x140 [ 54.531510][ T4161] dump_stack+0x15/0x1b [ 54.531528][ T4161] should_fail_ex+0x265/0x280 [ 54.531579][ T4161] should_fail+0xb/0x20 [ 54.531611][ T4161] should_fail_usercopy+0x1a/0x20 [ 54.531751][ T4161] _copy_to_user+0x20/0xa0 [ 54.531775][ T4161] simple_read_from_buffer+0xb5/0x130 [ 54.531894][ T4161] proc_fail_nth_read+0x100/0x140 [ 54.531986][ T4161] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 54.532024][ T4161] vfs_read+0x1a0/0x6f0 [ 54.532063][ T4161] ? __rcu_read_unlock+0x4f/0x70 [ 54.532090][ T4161] ? __fget_files+0x184/0x1c0 [ 54.532115][ T4161] ksys_read+0xda/0x1a0 [ 54.532159][ T4161] __x64_sys_read+0x40/0x50 [ 54.532217][ T4161] x64_sys_call+0x2d77/0x2fb0 [ 54.532321][ T4161] do_syscall_64+0xd2/0x200 [ 54.532371][ T4161] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.532481][ T4161] ? clear_bhb_loop+0x40/0x90 [ 54.532508][ T4161] ? clear_bhb_loop+0x40/0x90 [ 54.532536][ T4161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.532637][ T4161] RIP: 0033:0x7f4e9fbbd33c [ 54.532664][ T4161] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 54.532709][ T4161] RSP: 002b:00007f4e9e227030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 54.532733][ T4161] RAX: ffffffffffffffda RBX: 00007f4e9fde5fa0 RCX: 00007f4e9fbbd33c [ 54.532747][ T4161] RDX: 000000000000000f RSI: 00007f4e9e2270a0 RDI: 000000000000000c [ 54.532799][ T4161] RBP: 00007f4e9e227090 R08: 0000000000000000 R09: 0000000000000000 [ 54.532810][ T4161] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000001 [ 54.532900][ T4161] R13: 0000000000000000 R14: 00007f4e9fde5fa0 R15: 00007ffd47b912f8 [ 54.532922][ T4161] [ 54.781103][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.815408][ T4175] FAULT_INJECTION: forcing a failure. [ 54.815408][ T4175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.828815][ T4175] CPU: 0 UID: 0 PID: 4175 Comm: syz.5.92 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 54.828868][ T4175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.828884][ T4175] Call Trace: [ 54.828892][ T4175] [ 54.828902][ T4175] __dump_stack+0x1d/0x30 [ 54.828938][ T4175] dump_stack_lvl+0xe8/0x140 [ 54.828958][ T4175] dump_stack+0x15/0x1b [ 54.828982][ T4175] should_fail_ex+0x265/0x280 [ 54.829017][ T4175] should_fail+0xb/0x20 [ 54.829094][ T4175] should_fail_usercopy+0x1a/0x20 [ 54.829129][ T4175] _copy_from_user+0x1c/0xb0 [ 54.829151][ T4175] __sys_bpf+0x178/0x790 [ 54.829214][ T4175] __x64_sys_bpf+0x41/0x50 [ 54.829243][ T4175] x64_sys_call+0x2478/0x2fb0 [ 54.829293][ T4175] do_syscall_64+0xd2/0x200 [ 54.829313][ T4175] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.829341][ T4175] ? clear_bhb_loop+0x40/0x90 [ 54.829363][ T4175] ? clear_bhb_loop+0x40/0x90 [ 54.829451][ T4175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.829545][ T4175] RIP: 0033:0x7fb15008e929 [ 54.829560][ T4175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.829642][ T4175] RSP: 002b:00007fb14e6f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.829663][ T4175] RAX: ffffffffffffffda RBX: 00007fb1502b5fa0 RCX: 00007fb15008e929 [ 54.829695][ T4175] RDX: 0000000000000050 RSI: 0000200000000b00 RDI: 0000000000000000 [ 54.829708][ T4175] RBP: 00007fb14e6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.829721][ T4175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.829734][ T4175] R13: 0000000000000000 R14: 00007fb1502b5fa0 R15: 00007fffab0d99f8 [ 54.829754][ T4175] [ 55.084174][ T4188] FAULT_INJECTION: forcing a failure. [ 55.084174][ T4188] name fail_futex, interval 1, probability 0, space 0, times 1 [ 55.097731][ T4188] CPU: 0 UID: 0 PID: 4188 Comm: syz.2.99 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 55.097805][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.097820][ T4188] Call Trace: [ 55.097827][ T4188] [ 55.097836][ T4188] __dump_stack+0x1d/0x30 [ 55.097880][ T4188] dump_stack_lvl+0xe8/0x140 [ 55.098002][ T4188] dump_stack+0x15/0x1b [ 55.098023][ T4188] should_fail_ex+0x265/0x280 [ 55.098063][ T4188] should_fail+0xb/0x20 [ 55.098096][ T4188] get_futex_key+0x897/0xc30 [ 55.098188][ T4188] futex_wait_setup+0x4a/0x3e0 [ 55.098233][ T4188] futex_wait_requeue_pi+0x1ac/0x640 [ 55.098378][ T4188] ? __pfx_futex_wake_mark+0x10/0x10 [ 55.098450][ T4188] do_futex+0x136/0x380 [ 55.098554][ T4188] __se_sys_futex+0x2ed/0x360 [ 55.098599][ T4188] __x64_sys_futex+0x78/0x90 [ 55.098625][ T4188] x64_sys_call+0x1331/0x2fb0 [ 55.098669][ T4188] do_syscall_64+0xd2/0x200 [ 55.098687][ T4188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.098719][ T4188] ? clear_bhb_loop+0x40/0x90 [ 55.098747][ T4188] ? clear_bhb_loop+0x40/0x90 [ 55.098774][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.098827][ T4188] RIP: 0033:0x7f4e9fbbe929 [ 55.099025][ T4188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.099047][ T4188] RSP: 002b:00007f4e9e227038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.099069][ T4188] RAX: ffffffffffffffda RBX: 00007f4e9fde5fa0 RCX: 00007f4e9fbbe929 [ 55.099085][ T4188] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 55.099100][ T4188] RBP: 00007f4e9e227090 R08: 0000200000048000 R09: 0000000000000300 [ 55.099114][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.099128][ T4188] R13: 0000000000000000 R14: 00007f4e9fde5fa0 R15: 00007ffd47b912f8 [ 55.099149][ T4188] [ 55.104223][ T4177] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 55.120927][ T4188] loop2: detected capacity change from 0 to 512 [ 55.134432][ T4186] loop5: detected capacity change from 0 to 2048 [ 55.331171][ T4191] can: request_module (can-proto-0) failed. [ 55.340054][ T4188] EXT4-fs (loop2): 1 orphan inode deleted [ 55.346464][ T4188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.349900][ T4191] netlink: 'syz.1.100': attribute type 29 has an invalid length. [ 55.361746][ T4188] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.367254][ T4191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 55.387604][ T35] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 55.440339][ T4194] loop3: detected capacity change from 0 to 512 [ 55.502725][ T4191] loop1: detected capacity change from 0 to 8192 [ 55.519210][ T4194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.532461][ T4186] loop5: p2 p3 p7 [ 55.544723][ T4194] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.574963][ T4194] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.602000][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.653076][ T4208] loop0: detected capacity change from 0 to 256 [ 55.663990][ T4211] IPVS: stopping master sync thread 4213 ... [ 55.671765][ T4213] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 55.683813][ T4208] msdos: Bad value for 'gid' [ 55.688532][ T4208] msdos: Bad value for 'gid' [ 55.715915][ T4214] loop3: detected capacity change from 0 to 512 [ 55.728286][ T4214] EXT4-fs (loop3): 1 orphan inode deleted [ 55.728896][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.729187][ T4214] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.751450][ T35] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 55.892672][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.930538][ T4227] FAULT_INJECTION: forcing a failure. [ 55.930538][ T4227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.943839][ T4227] CPU: 0 UID: 0 PID: 4227 Comm: syz.0.108 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 55.943875][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.943892][ T4227] Call Trace: [ 55.943901][ T4227] [ 55.943911][ T4227] __dump_stack+0x1d/0x30 [ 55.943945][ T4227] dump_stack_lvl+0xe8/0x140 [ 55.943965][ T4227] dump_stack+0x15/0x1b [ 55.943986][ T4227] should_fail_ex+0x265/0x280 [ 55.944029][ T4227] should_fail+0xb/0x20 [ 55.944123][ T4227] should_fail_usercopy+0x1a/0x20 [ 55.944168][ T4227] _copy_to_user+0x20/0xa0 [ 55.944243][ T4227] simple_read_from_buffer+0xb5/0x130 [ 55.944280][ T4227] proc_fail_nth_read+0x100/0x140 [ 55.944355][ T4227] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.944423][ T4227] vfs_read+0x1a0/0x6f0 [ 55.944479][ T4227] ? __rcu_read_unlock+0x4f/0x70 [ 55.944508][ T4227] ? __fget_files+0x184/0x1c0 [ 55.944582][ T4227] ksys_read+0xda/0x1a0 [ 55.944685][ T4227] __x64_sys_read+0x40/0x50 [ 55.944723][ T4227] x64_sys_call+0x2d77/0x2fb0 [ 55.944777][ T4227] do_syscall_64+0xd2/0x200 [ 55.944800][ T4227] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.944857][ T4227] ? clear_bhb_loop+0x40/0x90 [ 55.944975][ T4227] ? clear_bhb_loop+0x40/0x90 [ 55.945001][ T4227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.945041][ T4227] RIP: 0033:0x7f8d5f0ed33c [ 55.945060][ T4227] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.945083][ T4227] RSP: 002b:00007f8d5d757030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.945151][ T4227] RAX: ffffffffffffffda RBX: 00007f8d5f315fa0 RCX: 00007f8d5f0ed33c [ 55.945207][ T4227] RDX: 000000000000000f RSI: 00007f8d5d7570a0 RDI: 0000000000000006 [ 55.945246][ T4227] RBP: 00007f8d5d757090 R08: 0000000000000000 R09: 0000000000000000 [ 55.945258][ T4227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.945329][ T4227] R13: 0000000000000000 R14: 00007f8d5f315fa0 R15: 00007ffec6893328 [ 55.945391][ T4227] [ 56.239746][ T4238] netlink: 'syz.5.113': attribute type 10 has an invalid length. [ 56.272114][ T4239] loop0: detected capacity change from 0 to 4096 [ 56.293964][ T4239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.621794][ T4250] loop2: detected capacity change from 0 to 512 [ 56.642644][ T4250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.662908][ T4250] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.681931][ T4257] can: request_module (can-proto-0) failed. [ 56.688558][ T4250] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.690875][ T4257] netlink: 'syz.5.117': attribute type 29 has an invalid length. [ 56.705461][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.5.117'. [ 56.760378][ T4257] loop5: detected capacity change from 0 to 8192 [ 56.827113][ T4264] loop2: detected capacity change from 0 to 512 [ 56.874654][ T4264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.975507][ T4264] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.118: bg 0: block 425: padding at end of block bitmap is not set [ 57.053776][ T4264] EXT4-fs (loop2): Remounting filesystem read-only [ 57.127380][ T4293] SELinux: policydb magic number 0xffaffe04 does not match expected magic number 0xf97cff8c [ 57.141344][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.123'. [ 57.177231][ T4293] SELinux: failed to load policy [ 57.195283][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.260197][ T4303] FAULT_INJECTION: forcing a failure. [ 57.260197][ T4303] name failslab, interval 1, probability 0, space 0, times 1 [ 57.273045][ T4303] CPU: 0 UID: 0 PID: 4303 Comm: +}[@ Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 57.273150][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 57.273235][ T4303] Call Trace: [ 57.273242][ T4303] [ 57.273250][ T4303] __dump_stack+0x1d/0x30 [ 57.273274][ T4303] dump_stack_lvl+0xe8/0x140 [ 57.273293][ T4303] dump_stack+0x15/0x1b [ 57.273309][ T4303] should_fail_ex+0x265/0x280 [ 57.273370][ T4303] should_failslab+0x8c/0xb0 [ 57.273397][ T4303] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.273499][ T4303] ? __alloc_skb+0x101/0x320 [ 57.273540][ T4303] __alloc_skb+0x101/0x320 [ 57.273580][ T4303] netlink_alloc_large_skb+0xba/0xf0 [ 57.273687][ T4303] netlink_sendmsg+0x3cf/0x6b0 [ 57.273714][ T4303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.273736][ T4303] __sock_sendmsg+0x142/0x180 [ 57.273761][ T4303] ____sys_sendmsg+0x31e/0x4e0 [ 57.273912][ T4303] ___sys_sendmsg+0x17b/0x1d0 [ 57.273960][ T4303] __x64_sys_sendmsg+0xd4/0x160 [ 57.274084][ T4303] x64_sys_call+0x2999/0x2fb0 [ 57.274169][ T4303] do_syscall_64+0xd2/0x200 [ 57.274192][ T4303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.274225][ T4303] ? clear_bhb_loop+0x40/0x90 [ 57.274323][ T4303] ? clear_bhb_loop+0x40/0x90 [ 57.274357][ T4303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.274384][ T4303] RIP: 0033:0x7fb15008e929 [ 57.274403][ T4303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.274426][ T4303] RSP: 002b:00007fb14e6f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.274449][ T4303] RAX: ffffffffffffffda RBX: 00007fb1502b5fa0 RCX: 00007fb15008e929 [ 57.274462][ T4303] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 57.274474][ T4303] RBP: 00007fb14e6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.274523][ T4303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.274536][ T4303] R13: 0000000000000000 R14: 00007fb1502b5fa0 R15: 00007fffab0d99f8 [ 57.274559][ T4303] [ 57.490472][ T4305] netlink: 'syz.0.124': attribute type 10 has an invalid length. [ 57.670834][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.688699][ T4312] loop5: detected capacity change from 0 to 512 [ 57.729530][ T4325] can: request_module (can-proto-0) failed. [ 57.754029][ T4312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.778888][ T4328] pim6reg: entered allmulticast mode [ 57.866432][ T4312] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.887076][ T4325] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 57.894939][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 57.960850][ T4328] pim6reg: left allmulticast mode [ 57.972878][ T4312] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.154441][ T4338] loop5: detected capacity change from 0 to 512 [ 58.172589][ T4338] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.196688][ T4325] loop1: detected capacity change from 0 to 8192 [ 58.209277][ T4338] EXT4-fs (loop5): 1 truncate cleaned up [ 58.245131][ T4338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.300574][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 58.300595][ T29] audit: type=1326 audit(1750596826.284:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 58.330303][ T29] audit: type=1326 audit(1750596826.284:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 58.354291][ T29] audit: type=1326 audit(1750596826.284:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 58.378024][ T29] audit: type=1326 audit(1750596826.284:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 58.402093][ T29] audit: type=1326 audit(1750596826.284:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 58.426347][ T29] audit: type=1326 audit(1750596826.284:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 58.449939][ T29] audit: type=1326 audit(1750596826.284:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 58.555808][ T29] audit: type=1326 audit(1750596826.474:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.5.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb15008d290 code=0x7ffc0000 [ 58.559839][ T3558] usb 7-1: enqueue for inactive port 0 [ 58.579594][ T29] audit: type=1326 audit(1750596826.474:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.5.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb15008d677 code=0x7ffc0000 [ 58.608434][ T29] audit: type=1326 audit(1750596826.474:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4337 comm="syz.5.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb15008d290 code=0x7ffc0000 [ 58.673582][ T4355] FAULT_INJECTION: forcing a failure. [ 58.673582][ T4355] name failslab, interval 1, probability 0, space 0, times 0 [ 58.686363][ T4355] CPU: 0 UID: 0 PID: 4355 Comm: syz.1.135 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 58.686398][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.686415][ T4355] Call Trace: [ 58.686423][ T4355] [ 58.686433][ T4355] __dump_stack+0x1d/0x30 [ 58.686483][ T4355] dump_stack_lvl+0xe8/0x140 [ 58.686506][ T4355] dump_stack+0x15/0x1b [ 58.686522][ T4355] should_fail_ex+0x265/0x280 [ 58.686560][ T4355] should_failslab+0x8c/0xb0 [ 58.686646][ T4355] kmem_cache_alloc_noprof+0x50/0x310 [ 58.686758][ T4355] ? audit_log_start+0x365/0x6c0 [ 58.686837][ T4355] audit_log_start+0x365/0x6c0 [ 58.686876][ T4355] audit_seccomp+0x48/0x100 [ 58.686903][ T4355] ? __seccomp_filter+0x68c/0x10d0 [ 58.686928][ T4355] __seccomp_filter+0x69d/0x10d0 [ 58.686971][ T4355] ? avc_has_perm+0xd3/0x150 [ 58.687014][ T4355] __secure_computing+0x82/0x150 [ 58.687044][ T4355] syscall_trace_enter+0xcf/0x1e0 [ 58.687076][ T4355] do_syscall_64+0xac/0x200 [ 58.687162][ T4355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.687193][ T4355] ? clear_bhb_loop+0x40/0x90 [ 58.687220][ T4355] ? clear_bhb_loop+0x40/0x90 [ 58.687303][ T4355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.687324][ T4355] RIP: 0033:0x7f2ec64bd33c [ 58.687383][ T4355] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.687400][ T4355] RSP: 002b:00007f2ec4b27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.687418][ T4355] RAX: ffffffffffffffda RBX: 00007f2ec66e5fa0 RCX: 00007f2ec64bd33c [ 58.687434][ T4355] RDX: 000000000000000f RSI: 00007f2ec4b270a0 RDI: 0000000000000004 [ 58.687450][ T4355] RBP: 00007f2ec4b27090 R08: 0000000000000000 R09: 0000000000000000 [ 58.687465][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.687487][ T4355] R13: 0000000000000000 R14: 00007f2ec66e5fa0 R15: 00007ffd09524848 [ 58.687512][ T4355] [ 58.888754][ T3558] usb 7-1: enqueue for inactive port 0 [ 58.943135][ T4354] FAULT_INJECTION: forcing a failure. [ 58.943135][ T4354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.956361][ T4354] CPU: 1 UID: 0 PID: 4354 Comm: syz.3.136 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 58.956458][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 58.956471][ T4354] Call Trace: [ 58.956477][ T4354] [ 58.956487][ T4354] __dump_stack+0x1d/0x30 [ 58.956514][ T4354] dump_stack_lvl+0xe8/0x140 [ 58.956535][ T4354] dump_stack+0x15/0x1b [ 58.956551][ T4354] should_fail_ex+0x265/0x280 [ 58.956653][ T4354] should_fail+0xb/0x20 [ 58.956690][ T4354] should_fail_usercopy+0x1a/0x20 [ 58.956808][ T4354] _copy_to_user+0x20/0xa0 [ 58.956877][ T4354] simple_read_from_buffer+0xb5/0x130 [ 58.956938][ T4354] proc_fail_nth_read+0x100/0x140 [ 58.956958][ T4354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 58.957002][ T4354] vfs_read+0x1a0/0x6f0 [ 58.957036][ T4354] ? __rcu_read_unlock+0x4f/0x70 [ 58.957059][ T4354] ? __rcu_read_unlock+0x4f/0x70 [ 58.957080][ T4354] ? __fget_files+0x184/0x1c0 [ 58.957125][ T4354] ksys_read+0xda/0x1a0 [ 58.957163][ T4354] __x64_sys_read+0x40/0x50 [ 58.957324][ T4354] x64_sys_call+0x2d77/0x2fb0 [ 58.957348][ T4354] do_syscall_64+0xd2/0x200 [ 58.957371][ T4354] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.957411][ T4354] ? clear_bhb_loop+0x40/0x90 [ 58.957448][ T4354] ? clear_bhb_loop+0x40/0x90 [ 58.957477][ T4354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.957502][ T4354] RIP: 0033:0x7f43fd35d33c [ 58.957558][ T4354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 58.957587][ T4354] RSP: 002b:00007f43fb9c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 58.957609][ T4354] RAX: ffffffffffffffda RBX: 00007f43fd585fa0 RCX: 00007f43fd35d33c [ 58.957625][ T4354] RDX: 000000000000000f RSI: 00007f43fb9c70a0 RDI: 0000000000000008 [ 58.957639][ T4354] RBP: 00007f43fb9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.957657][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.957672][ T4354] R13: 0000000000000000 R14: 00007f43fd585fa0 R15: 00007ffd4e7319a8 [ 58.957698][ T4354] [ 59.170442][ T3558] vhci_hcd: vhci_device speed not set [ 59.221689][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.267306][ T4363] netlink: 'syz.3.138': attribute type 10 has an invalid length. [ 59.392301][ T4370] FAULT_INJECTION: forcing a failure. [ 59.392301][ T4370] name failslab, interval 1, probability 0, space 0, times 0 [ 59.405104][ T4370] CPU: 1 UID: 0 PID: 4370 Comm: syz.5.139 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 59.405140][ T4370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.405163][ T4370] Call Trace: [ 59.405170][ T4370] [ 59.405177][ T4370] __dump_stack+0x1d/0x30 [ 59.405207][ T4370] dump_stack_lvl+0xe8/0x140 [ 59.405231][ T4370] dump_stack+0x15/0x1b [ 59.405313][ T4370] should_fail_ex+0x265/0x280 [ 59.405392][ T4370] should_failslab+0x8c/0xb0 [ 59.405424][ T4370] kmem_cache_alloc_node_noprof+0x57/0x320 [ 59.405455][ T4370] ? __alloc_skb+0x101/0x320 [ 59.405495][ T4370] __alloc_skb+0x101/0x320 [ 59.405529][ T4370] ? audit_log_start+0x365/0x6c0 [ 59.405599][ T4370] audit_log_start+0x380/0x6c0 [ 59.405679][ T4370] audit_seccomp+0x48/0x100 [ 59.405707][ T4370] ? __seccomp_filter+0x68c/0x10d0 [ 59.405739][ T4370] __seccomp_filter+0x69d/0x10d0 [ 59.405771][ T4370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.405807][ T4370] ? vfs_write+0x75e/0x8e0 [ 59.405869][ T4370] __secure_computing+0x82/0x150 [ 59.405937][ T4370] syscall_trace_enter+0xcf/0x1e0 [ 59.405962][ T4370] do_syscall_64+0xac/0x200 [ 59.405981][ T4370] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.406007][ T4370] ? clear_bhb_loop+0x40/0x90 [ 59.406028][ T4370] ? clear_bhb_loop+0x40/0x90 [ 59.406134][ T4370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.406161][ T4370] RIP: 0033:0x7fb15008e929 [ 59.406177][ T4370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.406199][ T4370] RSP: 002b:00007fb14e6f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000011f [ 59.406223][ T4370] RAX: ffffffffffffffda RBX: 00007fb1502b5fa0 RCX: 00007fb15008e929 [ 59.406307][ T4370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 59.406318][ T4370] RBP: 00007fb14e6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.406330][ T4370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.406354][ T4370] R13: 0000000000000000 R14: 00007fb1502b5fa0 R15: 00007fffab0d99f8 [ 59.406373][ T4370] [ 59.842806][ T4395] can: request_module (can-proto-0) failed. [ 59.853060][ T4387] loop0: detected capacity change from 0 to 512 [ 59.869793][ T4403] netlink: 'syz.5.145': attribute type 29 has an invalid length. [ 59.877715][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.5.145'. [ 59.888331][ T4407] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.146'. [ 59.897584][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.146'. [ 59.915154][ T4402] loop3: detected capacity change from 0 to 512 [ 59.941787][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.955716][ T4402] EXT4-fs (loop3): too many log groups per flexible block group [ 59.963622][ T4402] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 59.973500][ T4387] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.979893][ T4402] EXT4-fs (loop3): mount failed [ 59.993533][ T4387] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.015210][ T4395] loop5: detected capacity change from 0 to 8192 [ 60.158244][ T4425] loop3: detected capacity change from 0 to 512 [ 60.177343][ T4428] Invalid ELF header magic: != ELF [ 60.209024][ T4425] EXT4-fs (loop3): too many log groups per flexible block group [ 60.217150][ T4425] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 60.231337][ T4425] EXT4-fs (loop3): mount failed [ 60.254472][ T4439] netlink: 'syz.5.152': attribute type 10 has an invalid length. [ 60.349348][ T4448] loop3: detected capacity change from 0 to 512 [ 60.398202][ T4448] EXT4-fs (loop3): too many log groups per flexible block group [ 60.406170][ T4448] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 60.444812][ T4460] FAULT_INJECTION: forcing a failure. [ 60.444812][ T4460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.458758][ T4460] CPU: 1 UID: 0 PID: 4460 Comm: syz.1.156 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 60.458793][ T4460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.458808][ T4460] Call Trace: [ 60.458815][ T4460] [ 60.458824][ T4460] __dump_stack+0x1d/0x30 [ 60.458851][ T4460] dump_stack_lvl+0xe8/0x140 [ 60.458958][ T4460] dump_stack+0x15/0x1b [ 60.458979][ T4460] should_fail_ex+0x265/0x280 [ 60.459019][ T4460] should_fail+0xb/0x20 [ 60.459104][ T4460] should_fail_usercopy+0x1a/0x20 [ 60.459141][ T4460] _copy_from_user+0x1c/0xb0 [ 60.459168][ T4460] __sys_bpf+0x178/0x790 [ 60.459289][ T4460] __x64_sys_bpf+0x41/0x50 [ 60.459327][ T4460] x64_sys_call+0x2478/0x2fb0 [ 60.459350][ T4460] do_syscall_64+0xd2/0x200 [ 60.459427][ T4460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.459454][ T4460] ? clear_bhb_loop+0x40/0x90 [ 60.459532][ T4460] ? clear_bhb_loop+0x40/0x90 [ 60.459553][ T4460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.459575][ T4460] RIP: 0033:0x7f2ec64be929 [ 60.459593][ T4460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.459610][ T4460] RSP: 002b:00007f2ec4b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.459712][ T4460] RAX: ffffffffffffffda RBX: 00007f2ec66e5fa0 RCX: 00007f2ec64be929 [ 60.459727][ T4460] RDX: 0000000000000048 RSI: 00002000000008c0 RDI: 0000000000000000 [ 60.459741][ T4460] RBP: 00007f2ec4b27090 R08: 0000000000000000 R09: 0000000000000000 [ 60.459756][ T4460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.459772][ T4460] R13: 0000000000000000 R14: 00007f2ec66e5fa0 R15: 00007ffd09524848 [ 60.459796][ T4460] [ 60.490250][ T4448] EXT4-fs (loop3): mount failed [ 60.504318][ T4456] loop0: detected capacity change from 0 to 512 [ 60.678963][ T4448] FAULT_INJECTION: forcing a failure. [ 60.678963][ T4448] name failslab, interval 1, probability 0, space 0, times 0 [ 60.691839][ T4448] CPU: 0 UID: 0 PID: 4448 Comm: syz.3.153 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 60.691899][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.691986][ T4448] Call Trace: [ 60.691993][ T4448] [ 60.692001][ T4448] __dump_stack+0x1d/0x30 [ 60.692028][ T4448] dump_stack_lvl+0xe8/0x140 [ 60.692052][ T4448] dump_stack+0x15/0x1b [ 60.692074][ T4448] should_fail_ex+0x265/0x280 [ 60.692116][ T4448] should_failslab+0x8c/0xb0 [ 60.692217][ T4448] kmem_cache_alloc_node_noprof+0x57/0x320 [ 60.692274][ T4448] ? __alloc_skb+0x101/0x320 [ 60.692396][ T4448] __alloc_skb+0x101/0x320 [ 60.692431][ T4448] ? audit_log_start+0x365/0x6c0 [ 60.692535][ T4448] audit_log_start+0x380/0x6c0 [ 60.692617][ T4448] audit_seccomp+0x48/0x100 [ 60.692647][ T4448] ? __seccomp_filter+0x68c/0x10d0 [ 60.692673][ T4448] __seccomp_filter+0x69d/0x10d0 [ 60.692765][ T4448] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 60.692786][ T4448] ? vfs_write+0x75e/0x8e0 [ 60.692828][ T4448] __secure_computing+0x82/0x150 [ 60.692852][ T4448] syscall_trace_enter+0xcf/0x1e0 [ 60.692901][ T4448] do_syscall_64+0xac/0x200 [ 60.692920][ T4448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.692947][ T4448] ? clear_bhb_loop+0x40/0x90 [ 60.692969][ T4448] ? clear_bhb_loop+0x40/0x90 [ 60.692996][ T4448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.693069][ T4448] RIP: 0033:0x7f43fd35e929 [ 60.693085][ T4448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.693103][ T4448] RSP: 002b:00007f43fb9c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 60.693123][ T4448] RAX: ffffffffffffffda RBX: 00007f43fd585fa0 RCX: 00007f43fd35e929 [ 60.693136][ T4448] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000200000000580 [ 60.693148][ T4448] RBP: 00007f43fb9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.693161][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.693253][ T4448] R13: 0000000000000000 R14: 00007f43fd585fa0 R15: 00007ffd4e7319a8 [ 60.693273][ T4448] [ 60.957942][ T4456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.977995][ T4456] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.061463][ T4487] loop2: detected capacity change from 0 to 512 [ 61.093542][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 61.118593][ T4499] can: request_module (can-proto-0) failed. [ 61.135585][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.156413][ T4487] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.171863][ T4499] netlink: 'syz.3.162': attribute type 29 has an invalid length. [ 61.179720][ T4499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 61.191602][ T4487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.219739][ T4504] loop1: detected capacity change from 0 to 512 [ 61.239857][ T4507] FAULT_INJECTION: forcing a failure. [ 61.239857][ T4507] name failslab, interval 1, probability 0, space 0, times 0 [ 61.252717][ T4507] CPU: 1 UID: 0 PID: 4507 Comm: syz.5.163 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 61.252753][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.252766][ T4507] Call Trace: [ 61.252772][ T4507] [ 61.252780][ T4507] __dump_stack+0x1d/0x30 [ 61.252874][ T4507] dump_stack_lvl+0xe8/0x140 [ 61.252897][ T4507] dump_stack+0x15/0x1b [ 61.252913][ T4507] should_fail_ex+0x265/0x280 [ 61.252947][ T4507] should_failslab+0x8c/0xb0 [ 61.253002][ T4507] __kmalloc_cache_node_noprof+0x54/0x320 [ 61.253066][ T4507] ? __get_vm_area_node+0x106/0x1d0 [ 61.253139][ T4507] __get_vm_area_node+0x106/0x1d0 [ 61.253187][ T4507] __vmalloc_node_range_noprof+0x273/0xe00 [ 61.253227][ T4507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 61.253268][ T4507] ? mntput_no_expire+0x6f/0x3c0 [ 61.253380][ T4507] ? __rcu_read_unlock+0x4f/0x70 [ 61.253412][ T4507] ? selinux_capable+0x1f9/0x270 [ 61.253473][ T4507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 61.253514][ T4507] __vmalloc_noprof+0x83/0xc0 [ 61.253550][ T4507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 61.253660][ T4507] bpf_prog_alloc_no_stats+0x47/0x390 [ 61.253694][ T4507] ? bpf_prog_alloc+0x2a/0x150 [ 61.253724][ T4507] bpf_prog_alloc+0x3c/0x150 [ 61.253758][ T4507] bpf_prog_load+0x514/0x1070 [ 61.253824][ T4507] ? security_bpf+0x2b/0x90 [ 61.253844][ T4507] __sys_bpf+0x51d/0x790 [ 61.253888][ T4507] __x64_sys_bpf+0x41/0x50 [ 61.253925][ T4507] x64_sys_call+0x2478/0x2fb0 [ 61.254031][ T4507] do_syscall_64+0xd2/0x200 [ 61.254054][ T4507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.254081][ T4507] ? clear_bhb_loop+0x40/0x90 [ 61.254137][ T4507] ? clear_bhb_loop+0x40/0x90 [ 61.254221][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.254243][ T4507] RIP: 0033:0x7fb15008e929 [ 61.254258][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.254276][ T4507] RSP: 002b:00007fb14e6f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.254295][ T4507] RAX: ffffffffffffffda RBX: 00007fb1502b5fa0 RCX: 00007fb15008e929 [ 61.254343][ T4507] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 61.254358][ T4507] RBP: 00007fb14e6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.254370][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.254451][ T4507] R13: 0000000000000000 R14: 00007fb1502b5fa0 R15: 00007fffab0d99f8 [ 61.254472][ T4507] [ 61.254481][ T4507] syz.5.163: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 61.295220][ T4504] EXT4-fs: Ignoring removed orlov option [ 61.296915][ T4507] ,cpuset=/,mems_allowed=0 [ 61.528135][ T4507] CPU: 1 UID: 0 PID: 4507 Comm: syz.5.163 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 61.528193][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.528212][ T4507] Call Trace: [ 61.528220][ T4507] [ 61.528229][ T4507] __dump_stack+0x1d/0x30 [ 61.528317][ T4507] dump_stack_lvl+0xe8/0x140 [ 61.528374][ T4507] dump_stack+0x15/0x1b [ 61.528390][ T4507] warn_alloc+0x12b/0x1a0 [ 61.528436][ T4507] __vmalloc_node_range_noprof+0x297/0xe00 [ 61.528504][ T4507] ? mntput_no_expire+0x6f/0x3c0 [ 61.528610][ T4507] ? __rcu_read_unlock+0x4f/0x70 [ 61.528636][ T4507] ? selinux_capable+0x1f9/0x270 [ 61.528674][ T4507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 61.528717][ T4507] __vmalloc_noprof+0x83/0xc0 [ 61.528785][ T4507] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 61.528886][ T4507] bpf_prog_alloc_no_stats+0x47/0x390 [ 61.528916][ T4507] ? bpf_prog_alloc+0x2a/0x150 [ 61.529026][ T4507] bpf_prog_alloc+0x3c/0x150 [ 61.529141][ T4507] bpf_prog_load+0x514/0x1070 [ 61.529192][ T4507] ? security_bpf+0x2b/0x90 [ 61.529226][ T4507] __sys_bpf+0x51d/0x790 [ 61.529321][ T4507] __x64_sys_bpf+0x41/0x50 [ 61.529354][ T4507] x64_sys_call+0x2478/0x2fb0 [ 61.529376][ T4507] do_syscall_64+0xd2/0x200 [ 61.529403][ T4507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.529437][ T4507] ? clear_bhb_loop+0x40/0x90 [ 61.529463][ T4507] ? clear_bhb_loop+0x40/0x90 [ 61.529490][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.529642][ T4507] RIP: 0033:0x7fb15008e929 [ 61.529659][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.529681][ T4507] RSP: 002b:00007fb14e6f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 61.529768][ T4507] RAX: ffffffffffffffda RBX: 00007fb1502b5fa0 RCX: 00007fb15008e929 [ 61.529781][ T4507] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 61.529793][ T4507] RBP: 00007fb14e6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.529805][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.529816][ T4507] R13: 0000000000000000 R14: 00007fb1502b5fa0 R15: 00007fffab0d99f8 [ 61.529838][ T4507] [ 61.752313][ T4507] Mem-Info: [ 61.755467][ T4507] active_anon:28093 inactive_anon:0 isolated_anon:0 [ 61.755467][ T4507] active_file:10195 inactive_file:15519 isolated_file:0 [ 61.755467][ T4507] unevictable:0 dirty:519 writeback:29 [ 61.755467][ T4507] slab_reclaimable:3142 slab_unreclaimable:14037 [ 61.755467][ T4507] mapped:32874 shmem:21062 pagetables:1383 [ 61.755467][ T4507] sec_pagetables:0 bounce:0 [ 61.755467][ T4507] kernel_misc_reclaimable:0 [ 61.755467][ T4507] free:1853017 free_pcp:15809 free_cma:0 [ 61.768258][ T4504] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 61.800950][ T4507] Node 0 active_anon:112488kB inactive_anon:0kB active_file:40780kB inactive_file:62076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131496kB dirty:2076kB writeback:116kB shmem:84248kB writeback_tmp:0kB kernel_stack:3584kB pagetables:5532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 61.838995][ T4507] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 61.868248][ T4507] lowmem_reserve[]: 0 2882 7860 7860 [ 61.873665][ T4507] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 61.904286][ T4507] lowmem_reserve[]: 0 0 4978 4978 [ 61.909409][ T4507] Node 0 Normal free:4448872kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112396kB inactive_anon:0kB active_file:40780kB inactive_file:62084kB unevictable:0kB writepending:2100kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:59300kB local_pcp:21124kB free_cma:0kB [ 61.941679][ T4507] lowmem_reserve[]: 0 0 0 0 [ 61.946343][ T4507] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.959158][ T4507] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) [ 61.959237][ T4504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 61.959502][ T4504] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.160: corrupted in-inode xattr: e_value size too large [ 61.965555][ T4507] 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 62.001674][ T4504] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.160: couldn't read orphan inode 15 (err -117) [ 62.003416][ T4504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.015362][ T4507] Node 0 Normal: 184*4kB (UM) 29*8kB (ME) 31*16kB (UME) 33*32kB (UME) 65*64kB (UM) 69*128kB (UM) 46*256kB (UME) 28*512kB (UME) 10*1024kB (UM) 7*2048kB (ME) 1070*4096kB (UM) = 4448920kB [ 62.015664][ T4507] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 62.015752][ T4507] 46777 total pagecache pages [ 62.015771][ T4507] 0 pages in swap cache [ 62.015778][ T4507] Free swap = 124996kB [ 62.015786][ T4507] Total swap = 124996kB [ 62.015826][ T4507] 2097051 pages RAM [ 62.015834][ T4507] 0 pages HighMem/MovableOnly [ 62.076601][ T4499] loop3: detected capacity change from 0 to 8192 [ 62.078312][ T4507] 80810 pages reserved [ 62.121329][ T4523] ip6gre1: entered allmulticast mode [ 62.176290][ T3886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.183975][ T4527] loop2: detected capacity change from 0 to 512 [ 62.225560][ T4527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.238270][ T4527] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.296275][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.336641][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.486715][ T4543] loop0: detected capacity change from 0 to 128 [ 62.837631][ T4550] bio_check_eod: 59 callbacks suppressed [ 62.837650][ T4550] syz.0.168: attempt to access beyond end of device [ 62.837650][ T4550] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 63.062198][ T4549] loop5: detected capacity change from 0 to 1024 [ 63.082943][ T4549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.099490][ T4549] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 63.162201][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.319487][ T4561] netlink: 72 bytes leftover after parsing attributes in process `syz.1.174'. [ 63.330112][ T4561] netlink: 92 bytes leftover after parsing attributes in process `syz.1.174'. [ 63.855907][ T4569] loop2: detected capacity change from 0 to 128 [ 63.976002][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 63.976021][ T29] audit: type=1326 audit(1750596831.964:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.020860][ T4573] netlink: 'syz.0.178': attribute type 39 has an invalid length. [ 64.214899][ T29] audit: type=1326 audit(1750596832.004:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.238485][ T29] audit: type=1326 audit(1750596832.004:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.261994][ T29] audit: type=1326 audit(1750596832.004:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.285516][ T29] audit: type=1326 audit(1750596832.004:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.309359][ T29] audit: type=1326 audit(1750596832.004:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.333241][ T29] audit: type=1326 audit(1750596832.004:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.356876][ T29] audit: type=1326 audit(1750596832.004:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.380401][ T29] audit: type=1326 audit(1750596832.004:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.403787][ T29] audit: type=1326 audit(1750596832.004:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4572 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d5f0ee929 code=0x7ffc0000 [ 64.802951][ T4592] loop0: detected capacity change from 0 to 1024 [ 64.824158][ T4592] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.908628][ T4592] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 64.941549][ T4592] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 14 with max blocks 1 with error 28 [ 64.954028][ T4592] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.954028][ T4592] [ 64.963732][ T4592] EXT4-fs (loop0): Total free blocks count 0 [ 64.969860][ T4592] EXT4-fs (loop0): Free/Dirty block details [ 64.975920][ T4592] EXT4-fs (loop0): free_blocks=20480 [ 64.981291][ T4592] EXT4-fs (loop0): dirty_blocks=16 [ 64.986566][ T4592] EXT4-fs (loop0): Block reservation details [ 64.993008][ T4592] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 65.003183][ T4591] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.064247][ T4599] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 65.094373][ T4599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.129357][ T4599] bond1: (slave gretap1): making interface the new active one [ 65.139771][ T4599] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 65.144392][ T4604] 9pnet_virtio: no channels available for device syz [ 65.161643][ T4599] bond1 (unregistering): (slave gretap1): Releasing active interface [ 65.173316][ T4599] bond1 (unregistering): Released all slaves [ 65.333143][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 65.389518][ T4608] syz.5.188 uses obsolete (PF_INET,SOCK_PACKET) [ 65.594129][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 65.621945][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.678321][ T4627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.680169][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.691441][ T4627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.119102][ T4638] loop3: detected capacity change from 0 to 512 [ 66.134253][ T4638] EXT4-fs (loop3): first meta block group too large: 768 (group descriptor block count 1) [ 66.430629][ T4646] loop5: detected capacity change from 0 to 128 [ 67.012244][ T4654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.021013][ T4654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.662485][ T4675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.214'. [ 67.671531][ T4675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.214'. [ 67.680468][ T4675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.214'. [ 67.800849][ T4675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.214'. [ 68.911202][ T4694] loop5: detected capacity change from 0 to 2048 [ 68.920266][ T4696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.986862][ T4694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.999271][ T4698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.008803][ T4696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.026643][ T4698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.034931][ T4694] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.103374][ T3565] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.255731][ T4713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.265512][ T4713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.275597][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 69.275613][ T29] audit: type=1400 audit(1750597350.272:1697): avc: denied { create } for pid=4704 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.303285][ T29] audit: type=1400 audit(1750597350.292:1698): avc: denied { bind } for pid=4704 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.322862][ T29] audit: type=1400 audit(1750597350.292:1699): avc: denied { listen } for pid=4704 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.548424][ T4718] loop1: detected capacity change from 0 to 512 [ 69.558040][ T4718] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.228: corrupted in-inode xattr: e_name out of bounds [ 69.572284][ T4718] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.228: couldn't read orphan inode 15 (err -117) [ 69.585539][ T4718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.156851][ T4728] loop2: detected capacity change from 0 to 256 [ 70.381925][ T4728] FAT-fs (loop2): codepage cp1250 not found [ 70.392445][ T3886] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.434633][ T4735] loop0: detected capacity change from 0 to 128 [ 70.616629][ T4749] netlink: 48 bytes leftover after parsing attributes in process `syz.5.239'. [ 70.784351][ T29] audit: type=1326 audit(1750597351.742:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 70.807997][ T29] audit: type=1326 audit(1750597351.742:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4750 comm="syz.1.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec64be929 code=0x7ffc0000 [ 71.880698][ T4783] program syz.1.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.961309][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 71.970590][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 72.385142][ T4803] loop1: detected capacity change from 0 to 2048 [ 72.934455][ T4209] loop1: p2 p3 p7 [ 72.985728][ T4803] loop1: p2 p3 p7 [ 73.014530][ T29] audit: type=1400 audit(1750597354.002:1702): avc: denied { getopt } for pid=4810 comm="syz.3.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.040906][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 73.170174][ T4811] hsr_slave_0: left promiscuous mode [ 73.179954][ T4811] hsr_slave_1: left promiscuous mode [ 73.197651][ T4814] loop5: detected capacity change from 0 to 1024 [ 73.207867][ T4814] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 73.288552][ T4814] JBD2: no valid journal superblock found [ 73.294841][ T4814] EXT4-fs (loop5): Could not load journal inode [ 73.326742][ T4818] loop0: detected capacity change from 0 to 2048 [ 73.364354][ T29] audit: type=1400 audit(1750597354.352:1703): avc: denied { mount } for pid=4821 comm="syz.5.264" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 73.364973][ T2997] loop0: p2 p3 p7 [ 73.394640][ T29] audit: type=1400 audit(1750597354.382:1704): avc: denied { watch } for pid=4821 comm="syz.5.264" path="/51/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 73.424297][ T4822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.264'. [ 73.458854][ T4820] loop3: detected capacity change from 0 to 512 [ 73.468444][ T4826] loop2: detected capacity change from 0 to 512 [ 73.477376][ T4820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.490043][ T4822] loop5: detected capacity change from 0 to 8192 [ 73.493208][ T2997] loop0: p2 p3 p7 [ 73.500356][ T4820] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.502326][ T4820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.528369][ T4818] loop0: p2 p3 p7 [ 73.541454][ T4822] loop5: p1 p3 p4 [ 73.543806][ T4818] netlink: 64 bytes leftover after parsing attributes in process `syz.0.263'. [ 73.545420][ T4822] loop5: p1 size 8390912 extends beyond EOD, truncated [ 73.563106][ T4826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.573763][ T29] audit: type=1400 audit(1750597354.552:1705): avc: denied { write } for pid=4832 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.577772][ T4826] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.597539][ T4822] loop5: p3 size 589824 extends beyond EOD, truncated [ 73.612218][ T29] audit: type=1400 audit(1750597354.602:1706): avc: denied { create } for pid=4825 comm="syz.2.265" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 73.634883][ T4826] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.265: corrupted inode contents [ 73.648911][ T4826] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #2: comm syz.2.265: mark_inode_dirty error [ 73.677559][ T4826] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #2: comm syz.2.265: corrupted inode contents [ 73.679327][ T2997] loop5: p1 p3 p4 [ 73.691333][ T4826] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.265: mark_inode_dirty error [ 73.693564][ T2997] loop5: p1 size 8390912 extends beyond EOD, truncated [ 73.712220][ T2997] loop5: p3 size 589824 extends beyond EOD, truncated [ 73.754540][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.772232][ T4841] netlink: 72 bytes leftover after parsing attributes in process `syz.5.269'. [ 73.781974][ T4841] netlink: 92 bytes leftover after parsing attributes in process `syz.5.269'. [ 73.819017][ T4846] loop3: detected capacity change from 0 to 512 [ 73.819247][ T4845] netlink: 'syz.2.270': attribute type 10 has an invalid length. [ 73.836139][ T2997] loop0: p2 p3 p7 [ 73.840243][ T4846] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.271: iget: bad extended attribute block 1 [ 73.855851][ T4849] loop5: detected capacity change from 0 to 2048 [ 73.864758][ T4846] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.271: couldn't read orphan inode 15 (err -117) [ 73.878862][ T4846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.894724][ T4846] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 13: comm syz.3.271: lblock 0 mapped to illegal pblock 13 (length 1) [ 73.906201][ T2997] loop5: p2 p3 p7 [ 73.919313][ T4846] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 13: comm syz.3.271: lblock 0 mapped to illegal pblock 13 (length 1) [ 73.936273][ T4849] loop5: p2 p3 p7 [ 73.938088][ T4846] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 13: comm syz.3.271: lblock 0 mapped to illegal pblock 13 (length 1) [ 73.956532][ T4846] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 13: comm syz.3.271: lblock 0 mapped to illegal pblock 13 (length 1) [ 73.972788][ T2997] loop5: p2 p3 p7 [ 74.006367][ T2997] loop5: p2 p3 p7 [ 74.049048][ T4853] loop2: detected capacity change from 0 to 2048 [ 74.058439][ T4854] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 13: comm syz.3.271: lblock 0 mapped to illegal pblock 13 (length 1) [ 74.084338][ T2997] loop5: p2 p3 p7 [ 74.104834][ T4853] loop2: p2 p3 p7 [ 74.106269][ T4128] udevd[4128]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.110712][ T4209] udevd[4209]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.123048][ T4135] udevd[4135]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 74.144070][ T2997] loop5: p2 p3 p7 [ 74.171118][ T4853] netlink: 64 bytes leftover after parsing attributes in process `syz.2.273'. [ 74.173984][ T2997] loop2: p2 p3 p7 [ 74.225785][ T2997] loop2: p2 p3 p7 [ 74.256000][ T4128] udevd[4128]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 74.258854][ T4209] udevd[4209]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 74.267698][ T4135] udevd[4135]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 74.328868][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.397693][ T4863] udevd[4863]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 74.400652][ T4135] udevd[4135]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 74.408891][ T4862] udevd[4862]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 74.431211][ T4865] loop1: detected capacity change from 0 to 512 [ 74.459160][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 74.459248][ T29] audit: type=1400 audit(1750597355.442:1730): avc: denied { mounton } for pid=4864 comm="syz.1.276" path="/40/bus" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.497673][ T4874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 74.528725][ T4865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.539174][ T29] audit: type=1400 audit(1750597355.482:1731): avc: denied { read } for pid=4873 comm="syz.0.278" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.549822][ T4863] udevd[4863]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 74.564541][ T29] audit: type=1400 audit(1750597355.482:1732): avc: denied { open } for pid=4873 comm="syz.0.278" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.597712][ T4865] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.611597][ T4865] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.675952][ T4881] loop3: detected capacity change from 0 to 512 [ 74.682477][ T4881] ================================================================== [ 74.690644][ T4881] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 74.698501][ T4881] [ 74.700865][ T4881] write to 0xffffffff86a21038 of 8 bytes by task 4848 on cpu 0: [ 74.708544][ T4881] console_flush_all+0x35a/0x730 [ 74.713519][ T4881] console_unlock+0xa1/0x330 [ 74.718132][ T4881] vprintk_emit+0x388/0x650 [ 74.722655][ T4881] vprintk_default+0x26/0x30 [ 74.727350][ T4881] vprintk+0x1d/0x30 [ 74.731281][ T4881] _printk+0x79/0xa0 [ 74.735234][ T4881] base_sock_release+0x3a/0x210 [ 74.740209][ T4881] sock_close+0x6b/0x150 [ 74.744480][ T4881] __fput+0x298/0x650 [ 74.748494][ T4881] ____fput+0x1c/0x30 [ 74.752653][ T4881] task_work_run+0x12e/0x1a0 [ 74.757350][ T4881] exit_to_user_mode_loop+0xe4/0x100 [ 74.762770][ T4881] do_syscall_64+0x1d6/0x200 [ 74.767380][ T4881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.773295][ T4881] [ 74.775725][ T4881] read to 0xffffffff86a21038 of 8 bytes by task 4881 on cpu 1: [ 74.783294][ T4881] console_flush_all+0x563/0x730 [ 74.788264][ T4881] console_unlock+0xa1/0x330 [ 74.792886][ T4881] vprintk_emit+0x388/0x650 [ 74.797418][ T4881] vprintk_default+0x26/0x30 [ 74.802207][ T4881] vprintk+0x1d/0x30 [ 74.806132][ T4881] _printk+0x79/0xa0 [ 74.810235][ T4881] set_capacity_and_notify+0x14c/0x1f0 [ 74.815799][ T4881] loop_set_size+0x2e/0x70 [ 74.820264][ T4881] loop_configure+0x8d3/0xa50 [ 74.825072][ T4881] lo_ioctl+0x559/0x15d0 [ 74.829348][ T4881] blkdev_ioctl+0x352/0x440 [ 74.833892][ T4881] __se_sys_ioctl+0xce/0x140 [ 74.838513][ T4881] __x64_sys_ioctl+0x43/0x50 [ 74.843139][ T4881] x64_sys_call+0x19a8/0x2fb0 [ 74.847841][ T4881] do_syscall_64+0xd2/0x200 [ 74.852507][ T4881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.858428][ T4881] [ 74.860771][ T4881] value changed: 0x0000000000000b5f -> 0x0000000000000b60 [ 74.867891][ T4881] [ 74.870227][ T4881] Reported by Kernel Concurrency Sanitizer on: [ 74.876935][ T4881] CPU: 1 UID: 0 PID: 4881 Comm: syz.3.280 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 74.889298][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.899393][ T4881] ================================================================== [ 74.944924][ T4874] loop0: detected capacity change from 0 to 8192 [ 74.950133][ T29] audit: type=1400 audit(1750597355.922:1733): avc: denied { write } for pid=4882 comm="syz.1.281" name="rt_acct" dev="proc" ino=4026532699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.974741][ T29] audit: type=1400 audit(1750597355.932:1734): avc: denied { create } for pid=4882 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 74.994829][ T29] audit: type=1400 audit(1750597355.932:1735): avc: denied { connect } for pid=4882 comm="syz.1.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.014658][ T29] audit: type=1400 audit(1750597355.932:1736): avc: denied { write } for pid=4882 comm="syz.1.281" path="socket:[8829]" dev="sockfs" ino=8829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.082584][ T4128] loop0: p1 p3 p4 [ 75.098243][ T4128] loop0: p1 size 8390912 extends beyond EOD, truncated [ 75.118267][ T4128] loop0: p3 size 589824 extends beyond EOD, truncated [ 75.119148][ T4881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.141850][ T4874] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 75.182962][ T4881] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.226225][ T4881] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.280: corrupted inode contents [ 75.300649][ T4881] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.280: mark_inode_dirty error [ 75.312930][ T4881] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.280: corrupted inode contents [ 75.327388][ T4881] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.280: mark_inode_dirty error [ 75.377151][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.