last executing test programs: 1.672552507s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000740)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20008040) connect$vsock_stream(r2, &(0x7f0000000240), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ffffff7f000000000800000085000000610000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) io_setup(0x5, &(0x7f0000000140)) eventfd2(0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.608560573s ago: executing program 2 (id=3): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x6, 0x7}, 0x0, 0x7fff, 0xa, {0x0, 0xfa}, 0x5, 0xd0aa}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000c80)={{0x32, 0x8}, 'port1\x00', 0x10, 0x20434, 0x4, 0x6, 0x400, 0x8, 0x7, 0x0, 0x1, 0x6}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000080000000000000000061104f000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) io_setup(0x8, &(0x7f0000000340)=0x0) io_pgetevents(r6, 0x9, 0x8, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000c00)={&(0x7f0000000380)={[0xc]}, 0x8}) r7 = syz_io_uring_setup(0x10c, &(0x7f00000003c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x3f}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x7f, &(0x7f00000000c0)={[0x8]}, 0x8) finit_module(r1, 0x0, 0x3) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast1, 0x8}, 0x1c) 1.127449297s ago: executing program 0 (id=1): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.113980468s ago: executing program 2 (id=6): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = epoll_create(0x8) epoll_wait(r1, &(0x7f0000000200)=[{}, {}, {}, {}], 0x4, 0x1) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRESDEC=r0, @ANYBLOB="00000000000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdff4}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) r5 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) capget(&(0x7f0000000140)={0x19980330, r5}, &(0x7f00000001c0)={0x0, 0x2, 0x2, 0x9, 0x5, 0x9}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) 1.070200182s ago: executing program 3 (id=7): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='selinux_audited\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket(0xa, 0x2, 0x0) bind$rds(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01020000000000000000070000060900010073797a3000000000d8000000020a0102000000000000000000000000090001"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x8810) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 985.09821ms ago: executing program 1 (id=2): mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) ptrace(0x4206, r3) tkill(r3, 0x12) ptrace(0x4208, r3) tkill(r3, 0x12) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065fffffc7f00000800395032303030"], 0x41) 949.702553ms ago: executing program 0 (id=8): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") unshare(0x20000680) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, &(0x7f0000000040), 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, 0x0, &(0x7f0000000080)=0x2c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000380)={r9, @in={{0x2, 0x4e21, @empty}}, 0xe, 0x3, 0xfffffff7, 0x6, 0x52, 0x185, 0x4f}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000400)={r9, 0x95, "d265697b17fa8596e3853750439b8d55694f02ba90c27012551d10fc43303ee2fc6f1c65dfa1fb16df7e24b2adec917e1cfd70b4e2072cc2a53236d85f5e5b1e78bc3b8b393da5f952b41440d8e71302fc30b374c12570bfa45b553b9510574ce1b5f9285c07cd4ccecb19caf855e59edd5050ad44f35a1a0502e026c9130481c694fc696dfcc9c4eadc464172a808a927773360ee"}, &(0x7f00000004c0)=0x9d) r10 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) flistxattr(r10, &(0x7f00000003c0)=""/13, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) eventfd2(0x1, 0x80000) r11 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r11) 946.029673ms ago: executing program 2 (id=9): r0 = getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1d0100008e9e0000000000f474eafa91252c9e72c5789a2798d8e9a69c89a37237", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) 865.993441ms ago: executing program 4 (id=5): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000001640)={r2, @in6={{0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x1000001}}, 0x4, 0x5}, &(0x7f0000001440)=0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001e6, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000007f0000000000e9ffffffffffff94000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x1}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='rpc_xdr_alignment\x00'}, 0x18) read(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/131, 0x83}], 0x1, 0xa6, 0x200) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x3, 0x80000000, 0x468de3f4a61ab2a4, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x10, 0xa, 0x400}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x59405396}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', r10, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 709.745175ms ago: executing program 4 (id=10): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) write$tun(r1, &(0x7f0000002000)={@val={0x0, 0x884c}, @val={0x2, 0x80, 0x7, 0x20, 0x26, 0x8}, @mpls={[{0x3}, {0xffffe}, {0x6}, {0x80, 0x0, 0x1}], @ipv4=@generic={{0x2d, 0x4, 0x0, 0x9, 0x10b4, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x98, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x28}, @broadcast, @empty]}, @generic={0x94, 0x10, "844d555e95ec519f15de0c8510d9"}, @timestamp_prespec={0x44, 0x14, 0x86, 0x3, 0x6, [{@multicast1, 0x1}, {@multicast1, 0xcbf4}]}, @timestamp={0x44, 0x24, 0x26, 0x0, 0x6, [0xf, 0x8001, 0x101, 0x9, 0x5, 0x32, 0x0, 0x2]}, @lsrr={0x83, 0x17, 0x2b, [@remote, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ssrr={0x89, 0x2b, 0x35, [@dev={0xac, 0x14, 0x14, 0x26}, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @empty, @empty, @private=0xa010102, @broadcast, @multicast2, @multicast1, @multicast2]}]}}, "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"}}}, 0x10d2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x62, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48881}, 0xc0) 570.891178ms ago: executing program 4 (id=11): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) socket$nl_route(0x10, 0x3, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x2, 0xa, 0x0, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x4008081) ioctl$VT_DISALLOCATE(r2, 0x5608) 350.635259ms ago: executing program 4 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x201) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 315.646371ms ago: executing program 0 (id=13): openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0x40, 0x81) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001fe, 0x802) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000540)={0x2, 0x80}, 0x20) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x10, r4, 0xc771b000) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x9d}, 0x18) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) write$UHID_INPUT(r4, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) 254.107687ms ago: executing program 2 (id=14): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @loopback, 0x49}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\t\x00', @ANYBLOB="b01ae069bddc06630d31eb1e32ea3ce453736453730061c9f2333650f91290e1e2bb4567ad884ae136b1d75e9dca28ce030e0ee5842ad10351c35c9030f72197b949bf8c065d164937070a6e52f07ea202b0c24160d4421563faa3601d0729d794223f2dc1eb971e40f8ed3d69b7a773c3f1f91306584301909c0df94dc195b75b96f2c4c259971da5717d0315eae844a1f72b44c0ab772f4cd7ce947ed02fc0546d423643446daad3a410923078f1da839c2b631a42430f8f506a266defd5d85346fde2", @ANYRES32, @ANYRES16, @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0], 0x28}, 0x40820) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) write$tcp_congestion(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="f9ffffff00e41ca58a59bb90bd4aff8fe01de4ab2649d1f9e25421f754d090ec5135a81a1f6da22b4048af2942ebc27f127698043de7be5228e257588adf61b9a938494d81d5dae53f8517b5da012153e811ce8d01c22ac207687dbe75941fe250c9afbd35462df1043e4e10eef0c7d909f435bb38a191172588164523568f400d1ccab780d99b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c580"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r8, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001500)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="5435f423282000000000000084fb70747cf5c769fc989154e933b436fed7ee20b4a905ad066054fba07ac734ca6214ddb6f6391209f8ffffffffffffff12ad6cb6e86969f8a13db710da31104e2018b532333a6a8e3b19903884de6155d19bb100252b92894a2c", @ANYRES32, @ANYBLOB, @ANYRES64=r9], 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="1c00000022000000", @ANYRES32=r5, @ANYBLOB="38a62583a46ee0d0089fd7f80b1eb1cb5a934b81f5671cd9fafb9d926948acc8b4e977a58694974bd9119f55e1c6f23f074a2b7135f7a47f0b9634fa152a869c156dd90688fff4962f32eb584438676e87b4f545cfe857ae767a4398504a5948e43b2bc4f7fa567a633cefbc620b1e9836122a78c177715a4b48cb7f314926648bf5531c10dd5f85d52015202ea1dd75b0191577245f9251", @ANYRES32=r10, @ANYRES64=r9], 0x20) r12 = socket$inet(0xa, 0x1, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r11, @ANYRES32=r13, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kfree\x00', r14}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) 134.908488ms ago: executing program 4 (id=15): unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000fffff7ff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005012b2000000950000000000000001d0a948d61f8a3791f55a62434617eda836228841d22bbe90d574fb5e2e5615493121468ddef0301c7ec1302026f984920bbdf1e2ad1ea1fee43c5e0f4d17cc13b059e56417d6867be7dcb51f794bf3c71473c44cc2005ff4aa9a17b88113dc6435f38ce9cb4b6687f5f8c903d5bdbf854bd750b2e4279d45865f9083a2255358558f9109cc7f8b3ab25a555a6fd54b9859a313a5"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='btrfs_cow_block\x00', r1, 0x0, 0xb}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendfile(r4, r3, 0x0, 0x7ffff088) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0xe4ffffff, 0x25dfdbfb, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0xfff, 0x8420, 0x4, {0xa, 0x0, 0x1ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x2, 0x400000, 0x80000000, 0x3, 0xc, 0x3, 0x2, 0x0, 0x73f9e022, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x5, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0xffffffff, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0xcf, 0x0, 0xf, 0x3, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xfffff801, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x200004, 0x3, 0xfff, 0x5, 0xf63e, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e4a, 0x5, 0xc9b3, 0x1, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0xa0000001, 0xd, 0x2000003, 0x1, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0x113e, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xa64d, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x4, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x9, 0xfffffffe, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x8, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x200008, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x62, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0xfffffffe, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x1, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x15f7, 0x2, 0xfffffbfd, 0x5, 0x40000000, 0x7a, 0x8f0b, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0xcc869fc, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x2, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xd, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0xb, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x1004, 0x6, 0xbdc4, 0x7, 0x9, 0x9, 0x100, 0x80004, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 88.712912ms ago: executing program 4 (id=16): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x541b, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x70, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x10000000, 0x40000008, 0xfffffbff}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpid() ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000240)={0x60, 0x3, &(0x7f00006ae000/0xb000)=nil, &(0x7f0000b24000/0x4000)=nil, 0xfffffffffffffffd, &(0x7f0000000140)=[{0xffffffffffff7249, 0x0, 0x1000}, {0x2, 0x6, 0x2}, {0xc6, 0x80000001, 0x3}], 0x3, 0x2, 0x1, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x16, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 73.906424ms ago: executing program 1 (id=17): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='selinux_audited\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket(0xa, 0x2, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01020000000000000000070000060900010073797a3000000000d8000000020a0102000000000000000000000000090001"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x8810) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 57.213575ms ago: executing program 2 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000190000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r1, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r2 = inotify_init() close(0xffffffffffffffff) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400008bf) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x29, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=19): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600000070ead247ce6f024ffc4f412c25e0386ae15f13ff63d44b02b152afa05e7c2f5474c24d593338360aaf9a67d612497b0b603a440f62d236e1678edeaa250eb3b540e5ee6e8d26473fff46068ef0af25288c77b4567dc8adb8204058781a692992741e22ad1981ff7e2f86eee9509cba3e17fac07e95bd594df4b5a5f7399d0d040c28ef9b33f0f7cc1119c04dfee6510d96b0cf78378138ee0e36ee0423ead27799d818680d69bce89f7d3779daea4c0edefaa53785296627477005b994dde8e522f7ceeb3ee6"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000004bc7bfd68ef8059ed0787ebd5a00"/41], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r6}, 0xc) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 25.493220][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 25.493237][ T29] audit: type=1400 audit(1767295525.835:57): avc: denied { transition } for pid=3300 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.497996][ T29] audit: type=1400 audit(1767295525.835:58): avc: denied { noatsecure } for pid=3300 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.501379][ T29] audit: type=1400 audit(1767295525.845:59): avc: denied { write } for pid=3300 comm="sh" path="pipe:[2553]" dev="pipefs" ino=2553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 25.504978][ T29] audit: type=1400 audit(1767295525.845:60): avc: denied { rlimitinh } for pid=3300 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.507982][ T29] audit: type=1400 audit(1767295525.845:61): avc: denied { siginh } for pid=3300 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 33.989538][ T29] audit: type=1400 audit(1767295534.335:62): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.012696][ T29] audit: type=1400 audit(1767295534.355:63): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.015010][ T3310] cgroup: Unknown subsys name 'net' [ 34.040491][ T29] audit: type=1400 audit(1767295534.385:64): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.175868][ T3310] cgroup: Unknown subsys name 'cpuset' [ 34.182201][ T3310] cgroup: Unknown subsys name 'rlimit' [ 34.333461][ T29] audit: type=1400 audit(1767295534.675:65): avc: denied { setattr } for pid=3310 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.358194][ T29] audit: type=1400 audit(1767295534.685:66): avc: denied { create } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.378710][ T29] audit: type=1400 audit(1767295534.685:67): avc: denied { write } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.399121][ T29] audit: type=1400 audit(1767295534.685:68): avc: denied { read } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.419436][ T29] audit: type=1400 audit(1767295534.695:69): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.427289][ T3313] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.444417][ T29] audit: type=1400 audit(1767295534.695:70): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.476126][ T29] audit: type=1400 audit(1767295534.725:71): avc: denied { read } for pid=3048 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.533680][ T3310] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.764504][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.809727][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 35.848543][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.876431][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.883584][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.890832][ T3322] bridge_slave_0: entered allmulticast mode [ 35.897373][ T3322] bridge_slave_0: entered promiscuous mode [ 35.917802][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.924945][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.932114][ T3322] bridge_slave_1: entered allmulticast mode [ 35.938558][ T3322] bridge_slave_1: entered promiscuous mode [ 35.991209][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 36.007096][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.016255][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.023327][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.030719][ T3331] bridge_slave_0: entered allmulticast mode [ 36.037193][ T3331] bridge_slave_0: entered promiscuous mode [ 36.052516][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.061749][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.068946][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.076401][ T3331] bridge_slave_1: entered allmulticast mode [ 36.082833][ T3331] bridge_slave_1: entered promiscuous mode [ 36.110277][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.123486][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.130716][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.138019][ T3321] bridge_slave_0: entered allmulticast mode [ 36.144404][ T3321] bridge_slave_0: entered promiscuous mode [ 36.167155][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.174304][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.181499][ T3321] bridge_slave_1: entered allmulticast mode [ 36.188149][ T3321] bridge_slave_1: entered promiscuous mode [ 36.195395][ T3322] team0: Port device team_slave_0 added [ 36.202490][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.223742][ T3322] team0: Port device team_slave_1 added [ 36.230496][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.272118][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.293701][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.300834][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.308009][ T3329] bridge_slave_0: entered allmulticast mode [ 36.314512][ T3329] bridge_slave_0: entered promiscuous mode [ 36.322143][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.331567][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.338574][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.364591][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.376433][ T3331] team0: Port device team_slave_0 added [ 36.384365][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.391511][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.398721][ T3329] bridge_slave_1: entered allmulticast mode [ 36.405348][ T3329] bridge_slave_1: entered promiscuous mode [ 36.417410][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.424363][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.450372][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.462063][ T3331] team0: Port device team_slave_1 added [ 36.500084][ T3321] team0: Port device team_slave_0 added [ 36.510950][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.518109][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.525524][ T3320] bridge_slave_0: entered allmulticast mode [ 36.531917][ T3320] bridge_slave_0: entered promiscuous mode [ 36.539936][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.549712][ T3321] team0: Port device team_slave_1 added [ 36.556608][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.563553][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.589576][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.600465][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.607690][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.614862][ T3320] bridge_slave_1: entered allmulticast mode [ 36.621497][ T3320] bridge_slave_1: entered promiscuous mode [ 36.629611][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.649118][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.656157][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.682159][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.726599][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.733601][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.759553][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.772343][ T3322] hsr_slave_0: entered promiscuous mode [ 36.778639][ T3322] hsr_slave_1: entered promiscuous mode [ 36.786402][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.796284][ T3329] team0: Port device team_slave_0 added [ 36.807842][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.814790][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.840795][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.856120][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.865864][ T3329] team0: Port device team_slave_1 added [ 36.905791][ T3331] hsr_slave_0: entered promiscuous mode [ 36.911920][ T3331] hsr_slave_1: entered promiscuous mode [ 36.918120][ T3331] debugfs: 'hsr0' already exists in 'hsr' [ 36.923880][ T3331] Cannot create hsr debugfs directory [ 36.935740][ T3320] team0: Port device team_slave_0 added [ 36.941656][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.948652][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.974590][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.991403][ T3320] team0: Port device team_slave_1 added [ 37.002917][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.010004][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.036004][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.069353][ T3321] hsr_slave_0: entered promiscuous mode [ 37.075900][ T3321] hsr_slave_1: entered promiscuous mode [ 37.081783][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 37.087581][ T3321] Cannot create hsr debugfs directory [ 37.105493][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.112453][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.138455][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.162081][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.169116][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.195063][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.232613][ T3329] hsr_slave_0: entered promiscuous mode [ 37.238761][ T3329] hsr_slave_1: entered promiscuous mode [ 37.244578][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 37.250392][ T3329] Cannot create hsr debugfs directory [ 37.313437][ T3320] hsr_slave_0: entered promiscuous mode [ 37.319547][ T3320] hsr_slave_1: entered promiscuous mode [ 37.325613][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.331335][ T3320] Cannot create hsr debugfs directory [ 37.433102][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.451853][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.468060][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.481722][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.504118][ T3331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.516314][ T3331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.526903][ T3331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.538775][ T3331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.570844][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.584788][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.598527][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.607866][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.629243][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.641984][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.651621][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.661894][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.700174][ T3329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.709046][ T3329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.719066][ T3329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.728190][ T3329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.746833][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.781841][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.793605][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.810963][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.818105][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.840526][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.848932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.856010][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.875997][ T2815] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.883116][ T2815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.895746][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.904642][ T2815] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.911734][ T2815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.945885][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.958608][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.972068][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.991716][ T2815] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.998826][ T2815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.008172][ T2815] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.015293][ T2815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.032046][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.053917][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.076749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.083899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.105265][ T2826] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.112372][ T2826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.128386][ T2826] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.135679][ T2826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.152954][ T2826] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.160063][ T2826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.201434][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.223334][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.336220][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.376713][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.392499][ T3331] veth0_vlan: entered promiscuous mode [ 38.411449][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.427476][ T3331] veth1_vlan: entered promiscuous mode [ 38.470167][ T3322] veth0_vlan: entered promiscuous mode [ 38.493518][ T3322] veth1_vlan: entered promiscuous mode [ 38.507011][ T3321] veth0_vlan: entered promiscuous mode [ 38.513077][ T3331] veth0_macvtap: entered promiscuous mode [ 38.522268][ T3321] veth1_vlan: entered promiscuous mode [ 38.532957][ T3331] veth1_macvtap: entered promiscuous mode [ 38.558263][ T3322] veth0_macvtap: entered promiscuous mode [ 38.576625][ T3322] veth1_macvtap: entered promiscuous mode [ 38.586740][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.598941][ T3321] veth0_macvtap: entered promiscuous mode [ 38.613153][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.626934][ T3321] veth1_macvtap: entered promiscuous mode [ 38.634278][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.644123][ T3320] veth0_vlan: entered promiscuous mode [ 38.652162][ T2815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.670386][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.680087][ T2815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.690981][ T3320] veth1_vlan: entered promiscuous mode [ 38.709113][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.718988][ T2815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.736966][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.748862][ T3331] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.770418][ T2815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.787516][ T2815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.820169][ T2815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.836638][ T2815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.850800][ T3329] veth0_vlan: entered promiscuous mode [ 38.855609][ T3493] loop3: detected capacity change from 0 to 1024 [ 38.866597][ T3493] EXT4-fs: Ignoring removed orlov option [ 38.876682][ T2815] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.888407][ T3320] veth0_macvtap: entered promiscuous mode [ 38.903178][ T2815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.910310][ T3498] binfmt_misc: register: failed to install interpreter file ./file2 [ 38.920182][ T3329] veth1_vlan: entered promiscuous mode [ 38.925871][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.942772][ T3320] veth1_macvtap: entered promiscuous mode [ 38.951251][ T2815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.960825][ T3498] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 38.975378][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.982660][ T2815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.983729][ T3498] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 38.998979][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.011995][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 39.012010][ T29] audit: type=1400 audit(1767295539.355:107): avc: denied { allowed } for pid=3494 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.041240][ T2815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.054675][ T29] audit: type=1400 audit(1767295539.355:108): avc: denied { create } for pid=3494 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.062696][ T3329] veth0_macvtap: entered promiscuous mode [ 39.075780][ T29] audit: type=1400 audit(1767295539.355:109): avc: denied { map } for pid=3494 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.084900][ T3329] veth1_macvtap: entered promiscuous mode [ 39.105496][ T29] audit: type=1400 audit(1767295539.355:110): avc: denied { read write } for pid=3494 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4034 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.115446][ T3493] loop3: detected capacity change from 1024 to 0 [ 39.135398][ T29] audit: type=1400 audit(1767295539.385:111): avc: denied { module_load } for pid=3494 comm="syz.2.3" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 39.165847][ T29] audit: type=1400 audit(1767295539.385:112): avc: denied { create } for pid=3494 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.172643][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.185028][ T29] audit: type=1400 audit(1767295539.385:113): avc: denied { bind } for pid=3494 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.185059][ T29] audit: type=1400 audit(1767295539.385:114): avc: denied { name_bind } for pid=3494 comm="syz.2.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.232853][ T29] audit: type=1400 audit(1767295539.385:115): avc: denied { node_bind } for pid=3494 comm="syz.2.3" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 39.238825][ T2815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.268014][ T29] audit: type=1400 audit(1767295539.395:116): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.298998][ T3493] EXT4-fs error (device loop3): ext4_read_inode_bitmap:203: comm syz.3.4: Cannot read inode bitmap - block_group = 0, inode_bitmap = 4 [ 39.313315][ T3493] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.319380][ T2815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.324731][ T3493] EXT4-fs (loop3): I/O error while writing superblock [ 39.337141][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.366469][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.391440][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.401425][ T3331] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /0/file1: bad entry in directory: inode out of bounds - offset=0, inode=771883264, rec_len=1024, size=1024 fake=0 [ 39.429807][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.430420][ T3506] capability: warning: `syz.2.6' uses 32-bit capabilities (legacy support in use) [ 39.448486][ T3331] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.457091][ T3331] EXT4-fs (loop3): I/O error while writing superblock [ 39.470531][ T2826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.495215][ T2826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.504185][ T3331] EXT4-fs error (device loop3): ext4_get_inode_loc:4968: inode #2: block 5: comm syz-executor: unable to read itable block [ 39.527882][ T2826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.546796][ T3331] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.555361][ T3331] EXT4-fs (loop3): I/O error while writing superblock [ 39.562161][ T3331] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: IO failure [ 39.576748][ T3331] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.585317][ T3331] EXT4-fs (loop3): I/O error while writing superblock [ 39.592144][ T3331] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz-executor: mark_inode_dirty error [ 39.604303][ T3331] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.628108][ T3331] EXT4-fs (loop3): I/O error while writing superblock [ 39.649887][ T3516] loop0: detected capacity change from 0 to 512 [ 39.657204][ T3519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.667100][ T3519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 39.676579][ T31] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4953: inode #18: block 9: comm kworker/u8:1: unable to read itable block [ 39.682762][ T3516] ======================================================= [ 39.682762][ T3516] WARNING: The mand mount option has been deprecated and [ 39.682762][ T3516] and is ignored by this kernel. Remove the mand [ 39.682762][ T3516] option from the mount to silence this warning. [ 39.682762][ T3516] ======================================================= [ 39.696026][ T31] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.774265][ T31] EXT4-fs (loop3): I/O error while writing superblock [ 39.782261][ T3516] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.8: EA inode hash validation failed [ 39.795246][ T31] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4953: inode #2: block 5: comm kworker/u8:1: unable to read itable block [ 39.816252][ T3516] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.830141][ T31] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.849940][ T31] EXT4-fs (loop3): I/O error while writing superblock [ 39.858544][ T3516] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.8: corrupted inode contents [ 39.859287][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.871635][ T3516] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.8: mark_inode_dirty error [ 39.910523][ T3331] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 39.910764][ T3516] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.8: corrupted inode contents [ 39.927078][ T3331] EXT4-fs (loop3): I/O error while writing superblock [ 39.943293][ T3527] loop4: detected capacity change from 0 to 2048 [ 39.951651][ T3495] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 39.960267][ T3516] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.8: mark_inode_dirty error [ 39.982687][ T3516] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.8: mark inode dirty (error -117) [ 39.995681][ T3516] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 40.004975][ T3516] EXT4-fs (loop0): 1 orphan inode deleted [ 40.015731][ T3516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.031868][ T3312] Alternate GPT is invalid, using primary GPT. [ 40.038369][ T3312] loop4: p2 p3 p7 [ 40.050663][ T3527] Alternate GPT is invalid, using primary GPT. [ 40.057068][ T3527] loop4: p2 p3 p7 [ 40.157277][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 40.168421][ T3530] udevd[3530]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 40.179838][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 40.195650][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.253780][ T3536] lo speed is unknown, defaulting to 1000 [ 40.259867][ T3536] lo speed is unknown, defaulting to 1000 [ 40.266170][ T3536] lo speed is unknown, defaulting to 1000 [ 40.272545][ T3536] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 40.280986][ T3536] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 40.294147][ T3536] lo speed is unknown, defaulting to 1000 [ 40.303506][ T3536] lo speed is unknown, defaulting to 1000 [ 40.309957][ T3536] lo speed is unknown, defaulting to 1000 [ 40.316308][ T3536] lo speed is unknown, defaulting to 1000 [ 40.322868][ T3536] lo speed is unknown, defaulting to 1000 [ 40.356541][ T3536] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 40.464491][ T3548] loop2: detected capacity change from 0 to 128 [ 40.472359][ T3548] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.495786][ T3548] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.514196][ T3548] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.746374][ T3548] ================================================================== [ 40.754524][ T3548] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 40.762567][ T3548] [ 40.764918][ T3548] write to 0xffff88811a41ce14 of 4 bytes by task 3554 on cpu 0: [ 40.772582][ T3548] xas_set_mark+0x12b/0x140 [ 40.777161][ T3548] tag_pages_for_writeback+0xc2/0x290 [ 40.782581][ T3548] writeback_iter+0x340/0x820 [ 40.787309][ T3548] mpage_writepages+0x87/0x1250 [ 40.792224][ T3548] fat_writepages+0x24/0x30 [ 40.796790][ T3548] do_writepages+0x1c6/0x310 [ 40.801423][ T3548] file_write_and_wait_range+0x156/0x2c0 [ 40.807091][ T3548] __generic_file_fsync+0x46/0x160 [ 40.812232][ T3548] fat_file_fsync+0x49/0x100 [ 40.816861][ T3548] vfs_fsync_range+0x10d/0x130 [ 40.821661][ T3548] generic_file_write_iter+0x1b8/0x2f0 [ 40.827180][ T3548] iter_file_splice_write+0x66b/0xa20 [ 40.832583][ T3548] direct_splice_actor+0x156/0x2a0 [ 40.837735][ T3548] splice_direct_to_actor+0x312/0x680 [ 40.843129][ T3548] do_splice_direct+0xda/0x150 [ 40.847904][ T3548] do_sendfile+0x380/0x650 [ 40.852341][ T3548] __x64_sys_sendfile64+0x105/0x150 [ 40.857560][ T3548] x64_sys_call+0x2db1/0x3000 [ 40.862269][ T3548] do_syscall_64+0xca/0x2b0 [ 40.866804][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.872716][ T3548] [ 40.875051][ T3548] read to 0xffff88811a41ce14 of 4 bytes by task 3548 on cpu 1: [ 40.882609][ T3548] file_write_and_wait_range+0x10e/0x2c0 [ 40.888267][ T3548] __generic_file_fsync+0x46/0x160 [ 40.893400][ T3548] fat_file_fsync+0x49/0x100 [ 40.898008][ T3548] vfs_fsync_range+0x10d/0x130 [ 40.902802][ T3548] generic_file_write_iter+0x1b8/0x2f0 [ 40.908289][ T3548] iter_file_splice_write+0x66b/0xa20 [ 40.913690][ T3548] direct_splice_actor+0x156/0x2a0 [ 40.918830][ T3548] splice_direct_to_actor+0x312/0x680 [ 40.924222][ T3548] do_splice_direct+0xda/0x150 [ 40.929003][ T3548] do_sendfile+0x380/0x650 [ 40.933441][ T3548] __x64_sys_sendfile64+0x105/0x150 [ 40.938664][ T3548] x64_sys_call+0x2db1/0x3000 [ 40.943365][ T3548] do_syscall_64+0xca/0x2b0 [ 40.947901][ T3548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.953811][ T3548] [ 40.956144][ T3548] value changed: 0x02000021 -> 0x04000021 [ 40.961871][ T3548] [ 40.964207][ T3548] Reported by Kernel Concurrency Sanitizer on: [ 40.970382][ T3548] CPU: 1 UID: 0 PID: 3548 Comm: syz.2.18 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.979949][ T3548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.990015][ T3548] ================================================================== [ 41.058034][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 41.125467][ T3561] netlink: 184 bytes leftover after parsing attributes in process `syz.1.17'. [ 41.340057][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.425514][ T2358] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.748338][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.797864][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.867718][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.941501][ T52] bridge_slave_1: left allmulticast mode [ 41.947317][ T52] bridge_slave_1: left promiscuous mode [ 41.953106][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.962961][ T52] bridge_slave_0: left allmulticast mode [ 41.968824][ T52] bridge_slave_0: left promiscuous mode [ 41.974628][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.088366][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.107014][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.119719][ T52] bond0 (unregistering): Released all slaves [ 42.180226][ T52] hsr_slave_0: left promiscuous mode [ 42.195693][ T52] hsr_slave_1: left promiscuous mode [ 42.201559][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.209160][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.235641][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.243085][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.268669][ T52] veth1_macvtap: left promiscuous mode [ 42.274241][ T52] veth0_macvtap: left promiscuous mode [ 42.295293][ T52] veth1_vlan: left promiscuous mode [ 42.300651][ T52] veth0_vlan: left promiscuous mode [ 42.381068][ T52] team0 (unregistering): Port device team_slave_1 removed [ 42.392809][ T52] team0 (unregistering): Port device team_slave_0 removed