last executing test programs: 2.069912084s ago: executing program 0 (id=150): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r3, &(0x7f0000000140)="a6bea8a120e5f8320c30e4500800a5e986f34c10", 0x14, 0x0, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) 1.492141043s ago: executing program 1 (id=154): creat(&(0x7f0000000280)='./bus\x00', 0x4f) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="00efea10000000000b0000000000000000000000563181ccb57c12aa90ef0ee6ad4baa3bf766169734d72070366d0254db4b94f58d5bc87e502d99bc506144913a492c2380d279350859f55b9e58e54387ee094059d0de913ff09ce573ac8d5fadbe92682ae304fdd6be49af25d27054f60a19", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="9110b4000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='net_dev_xmit_timeout\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) 1.428067719s ago: executing program 0 (id=155): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001540), 0x4, r2, 0xfeff}, 0x38) 1.427517939s ago: executing program 4 (id=156): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000280)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f00000005c0)="a253524ada0dc6bed3c687", 0xb}], 0x3}}], 0x4, 0x4048841) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r0) close_range(r3, 0xffffffffffffffff, 0x0) 1.350222825s ago: executing program 0 (id=157): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.349786975s ago: executing program 0 (id=158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) io_uring_setup(0x66a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r2, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.348242245s ago: executing program 4 (id=159): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40) (fail_nth: 3) 1.334258976s ago: executing program 1 (id=161): ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xff4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r1, 0x0, 0x0, 0x20000891, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 1.313284868s ago: executing program 1 (id=162): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800020000000000000000019078ac1e0001ac1414aa05009078000000004020000000000000000200000000000000000000940400008625000000000010f79eb4cf6e423ebfd73ab598000f749018c9a54b61394327f1153500000058b0de1cd2cd837768309ec43f11541252ea857b2e02e4444d7c720bbcb3bbb582cba4475b8c1d47ba1ccfeaccd70f6df548e5522e7e6778ece31ca8ba61bc9cbfd160e51d4f279a0704f8e978ab10d18052"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00', @ANYRES16=r0, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32, @ANYBLOB="14000600"], 0x54}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="040000000000800008000000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) read$watch_queue(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.213282827s ago: executing program 4 (id=163): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) 1.17743456s ago: executing program 4 (id=164): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000008000000000000004f2756dbe890b06c5c39f77b6b51c402ec06dd5a04dec28bd8cf8384a835c2a80482a2e3db91ea44e1388928e2ee57e7da612220c4597385473bb00c859b7413b7893347e76a801228525a35cc147c0cda2e5ad47187f53c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="b5000000040000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000ad0ee4dbea350d867e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x0, 0x8, 0xffff0001, 0x5, 0x6, 0x101, 0x7ffffffe}, 0x1c) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='dlm_unlock_end\x00', r5, 0x0, 0x4}, 0x18) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000002c0)=0x7, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000010000000000ebff000000181100004f5c1c0b865c5ea2118285abca0e77a29eb41a394db66c8546e3306466d0b7f87c5b4c2e6bc4cb8fddd7", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f00000005c0)=""/241, 0x0, 0xf1, 0x0, 0x515, 0x0, @void, @value}, 0x28) 1.105457256s ago: executing program 0 (id=165): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x25, &(0x7f0000000b00)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6c}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.038295342s ago: executing program 4 (id=166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r3}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @mcast2, 0x8}}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44801}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, r8, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r3, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 656.291144ms ago: executing program 3 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0}) 638.971686ms ago: executing program 3 (id=168): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffe1f, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x49, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r0) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000789f5b764345470fa4a8603146bbde61a33afb87d854b4a32d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r8}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000000000000400000000000000000000000000000000000000000003800010000000000000003000000000000000000000000000000000000000000000000000000000000000008"], 0x878) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}]}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r11 = syz_io_uring_setup(0xf37, &(0x7f0000000400)={0x0, 0xde39, 0x3000, 0x1, 0xffff}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xfffc}}) 538.364664ms ago: executing program 3 (id=169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) accept(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') prlimit64(r3, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 490.608418ms ago: executing program 2 (id=170): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000280)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f00000005c0)="a253524ada0dc6bed3c687", 0xb}], 0x3}}], 0x4, 0x4048841) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r0) close_range(r3, 0xffffffffffffffff, 0x0) 476.984449ms ago: executing program 3 (id=171): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x77, 0x1a1281) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_vlan={0x88, 0x1, 0x0, 0x0, {{0x9}, {0x5c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x435, 0x8001, 0x4, 0x10001, 0x1ff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa0}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r6 = epoll_create(0x1ff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000001a00"/28], 0x48) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x8000) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r11 = creat(0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r12}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001f2ffffff0000006800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018400000030000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000001850000004000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200000000000085000000860000006ab22000010000009d290800100000001858000009000000000000000000000085100000ffffffff850000000300000002810800ff0f000023a50c0010000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0xb5, &(0x7f0000000440)=""/181, 0x41100, 0x40, '\x00', r2, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r11, 0x7, &(0x7f0000000600)=[r7, 0xffffffffffffffff, r7, r12, r8, r7, r7, r4, r8, r7], &(0x7f0000000640)=[{0x0, 0x3, 0xe, 0x3}, {0x5, 0x5, 0x2, 0x4}, {0x3, 0x3, 0x6, 0x6}, {0x4, 0x1, 0x1}, {0x4, 0x2, 0x4, 0x6}, {0x1, 0x3, 0xa, 0x7}, {0x2, 0x1, 0x4, 0xc}], 0x10, 0x8, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80005520, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x21}, {0x1, 0x0, 0x0, 0x7ffffdbd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) 456.560121ms ago: executing program 2 (id=172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18e6ffff8f2fee27d451fdfb8e03", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000f2c99869b27522af7bafd2685ea11b4bd2f9cfed9a4786758121c04de5c309482a00c840d47810f53405af3364cec5570f58a7adbd8df400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES8=r0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(0x0, 0x0, &(0x7f0000000300)='pvfs2\x00', 0x4400, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x26, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8}, 0x0, 0x3, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 455.655681ms ago: executing program 1 (id=173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000009505ca66a15d91e1a936dffc72bb0402b3c957f77a623a15f0ae1595b5fd587bdb6c25118c7f9818706a2cef4150a095d32dd8fb14aa12472c05000000000000001c787d2627e30c4fda397a6f70a82997b58f2d10c4fab5d08e33c403ff654198a2213ea3dbbfbc77bb70c9fcff88ea289e52fcf12ad6b1150e6230336a9a1c3873ea4aae05c1b722dd395420c23e6f11631546eff07e7ee43d7b7a8b5adb4a3776e328a86f353b433e43be01e4e7146adbf2f8c23a3dd640bc8ec97d43e3e823cef7940000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000001600000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080000000011907800b738000000000000ec1b2d965d0018b05504338800000000000000dfffffffffff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000021c9003d0400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x6, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r8, 0x5) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r9, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 404.887615ms ago: executing program 2 (id=174): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000543000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) 404.312815ms ago: executing program 3 (id=175): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x14) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') connect$unix(r2, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x17, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000a44800000006bfde8e56f96651899605230a09040000000000000000020000001c000480f9ffffffffffffff73796e947239a7f811143e1e448afb7c040002800900010073797a30fed0fd569a3a000000000900020173797a32000000001400000011000100009d5d64b340a832d23db016c37f4e73345368db0117d72b9862e8360d5865"], 0x70}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001900850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r7, &(0x7f00000000c0)='./file1\x00') link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') close(r4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000004c0)={{0x6, 0x8}, {0x2, 0x8c}, 0x100, 0x4, 0x1}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x4040850) sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) mkdir(&(0x7f0000000280)='./file0/file0\x00', 0xbe) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x408, 0xe8, 0x1f0, 0x1f0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random="bd22fdd68c29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "0d6581a280a9fd38cc0cd92b7c41598c1625a223e855c9fbc1389f5d44ef17d4f24b7890dbf5909d70031d8427048dc1646921eaa7e6ac8400"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 403.914485ms ago: executing program 2 (id=176): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @local, 0x7f}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000005dc0)=[{{&(0x7f00000001c0)={0x2, 0xfffc, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000240)="a9050000000074640021000000003552bde5c064c6a1e49db6cf48a9025ee904103073d7", 0x24}], 0x1}}], 0x1, 0x0) 401.554706ms ago: executing program 1 (id=177): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r2, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r5, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x0, 0xffffbffc}, 0xc) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$binfmt_script(r8, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0xfffffffffffffffe) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@filename='./file0\x00', 0x0, 0x0) rt_sigqueueinfo(0x0, 0x24, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, &(0x7f0000000080)=0x80, 0x4) getsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, 0x0, &(0x7f00000001c0)=0x33) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc38, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) 352.96297ms ago: executing program 1 (id=178): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x253, &(0x7f0000001cc0)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000048a80000000000e9ffffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x9, &(0x7f0000000380)=[{0x0, 0x1, 0x0, 0x7}, {0x5, 0x3, 0x1e, 0xd}, {0x1, 0x1b, 0x5, 0x4}, {0x6, 0x6, 0xf, 0x9}, {0x3, 0x5, 0x1, 0x7}, {0x0, 0x8, 0x4, 0x5}, {0xff, 0xff, 0x30, 0x80000000}, {0x8, 0x6b, 0x9, 0x6}, {0x9, 0xd, 0x3b, 0x8}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 345.44146ms ago: executing program 2 (id=179): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x419, &(0x7f0000000040)={[{@data_writeback}, {@noblock_validity}, {@nouid32}, {@nogrpid}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x1, 0x63e, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000000)={0x0, 0xff, 0x101, 0x0, 0x56, "b77a1c2d3107f6d74ec1fd7c421a07ac33fb6c", 0xd8, 0x8}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x84, 0x0, &(0x7f0000000040)) r6 = add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000008c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r9) keyctl$negate(0xd, r6, 0x690a, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000d96600000000000000000000000000000000000000000000000000001ae0000000000000feffffff0100000011000000000000008100626373663000000200080000003f000000000000000002000000ffff00000000626f6e643000000000000000000000007600000000010000005c121d00000000ffffffffffff0000000000000000000000000000000000000000d0000000d000000000010000766c616e000000ff030000002000000000000000000000000000000000000000080000000000007f0000000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000063810020041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000030000000000000000006970365f76746930000000000000000073797a6b616c6c6572300000000000006263736630000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaacc030000000000aaaaaaaaaaaa00000000000000007000000070000000a8000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000fcffffff0000000000000000000000000000000000000000000000000000000000000000400000000000000002000000ffffffff00000000"]}, 0x2b0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x1c0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r11, 0x4008662c, 0x0) keyctl$search(0xa, r6, &(0x7f0000000200)='.dead\x00', &(0x7f0000000240)={'syz', 0x2}, 0xfffffffffffffffd) 106.157761ms ago: executing program 0 (id=180): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5d31, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r0, &(0x7f00000007c0)={'#! ', './file0', [{0x20, 'lo\x00'}, {0x20, 'GPL\x00'}, {0x20, 'tls\x00'}, {0x20, ':]'}, {0x20, ':.{'}, {}, {}, {0x20, '\x13\xf9\xfd\x03\x9ce\xe4e*\x92\xa9\xc9\xf2D\xbb\x15aK6F\xdfD\xdb\x82\xc0\xf7\xdd6\xcd\xfe~\xa22\rdvK\xf0eh1\xfd,\xb3\xafr\xa3\xa7\xe4\xf5 ;^\x1f\x05;\xd2G\x14V\x1a\b:\x93\xfc\xb5\xb8\xc2\xde\xd7\xea\xa9\xd9\xea'}, {0x20, '\t\xebp\n'}, {0x20, '\xb8c<\xb6[\x98K\xba\x99\xc5n\xfb\xfa\xc0a\x02\n\xb0\xf7\x90\xaa.G\xc6A4\t\x98\xd8^\xa5\xbb\xb9\xdci\xea\x870(W(\x1e\xfd\x8a\xaf\x82_j>\x19:\xa0\x0eX\f'}], 0xa, "f2896998ccafb34b7f752b1dc81987b9ea1d6804fb0d700a572bf8319195d42609a65b3c38ccab0754a68d9e81f3fc1c3b665db6408b9d8798c4a74d00e49b7e2bfaf34727ca524c71ec166a338d87468c18535c4a0e5b6975274a31d98d0e9dc72eb07e7b32db1b628df8a1f112ad645935b570bea9936517a7b808e483e90efc4e9ae9b6a1ea4b2325e6516e1df6bc2894254d8c"}, 0xfffffffffffffd24) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r2, 0x40095505, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r4 = gettid() ptrace$setregset(0x4205, r4, 0x4, &(0x7f0000000000)={0x0}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x9, 0x3, 0x0, 0x6, 0xfffffefa, 0x22}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x58}}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 85.771573ms ago: executing program 4 (id=181): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095b41f893cff06848e48a862d91e7f02e9483b637d387f2a857a327702083428e53eef108fcd7b6975f3c096b5ffa5791d46b2023d6cb051c5d809dbf7e5ceab0b316bd57fc42b86422d5d5808ab33fde3c04bfc770f73d52241b05391a093ae7b8733b3d85111eef478b266cb5f3e967ab18d8574d610f077cce4dbe825c22f1cdeeae694527e31234a972052d65b11149ed019b075b8f9b88baa95cafd72fbae60a3ac138588850b0a61bbbfbd"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000006c0)={0x3, 0x5}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x18}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDR6={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c800) socket$packet(0x11, 0x2, 0x300) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0), 0x10, 0x0}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001300010000000000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0400dffeffffff"], 0x20}}, 0x480c1) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0x49a34200, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180), {0x23}, &(0x7f0000000240)=""/55, 0x37, &(0x7f00000003c0)=""/147, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r8}}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x40, 0x0, &(0x7f00000001c0)=0x15) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 30.429768ms ago: executing program 2 (id=182): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000280)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f00000005c0)="a253524ada0dc6bed3c687", 0xb}], 0x3}}], 0x4, 0x4048841) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r0) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=183): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000280)=""/151) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000900)='scsi_dispatch_cmd_start\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sysinfo(&(0x7f00000004c0)=""/216) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00120004ea0000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'virt_wifi0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70801000000000000008da2450c8d631b0000000000007b8af8ff00000000bfa222000000f8edb1be69e4583dc10000f8ff000008200000b704ce03351bdb6eb651932ccc5b7c2300000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@delchain={0x44, 0x65, 0x0, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xf, 0xa}, {0x3, 0x3}, {0x9, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x10000}, @TCA_RATE={0x6, 0x5, {0x8, 0x33}}, @TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000041c0c00000000000000000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(&(0x7f0000003840)='./bus\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdcd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="184b0000fcffffff00000000000000008510000007000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000ed000000f8ff0100b702000008000000b70300000400000085000000060000008520000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() kernel console output (not intermixed with test programs): [ 20.374368][ T29] audit: type=1400 audit(1729147643.099:81): avc: denied { read } for pid=2950 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 26.593527][ T29] audit: type=1400 audit(1729147649.319:82): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.594803][ T3254] cgroup: Unknown subsys name 'net' [ 26.616329][ T29] audit: type=1400 audit(1729147649.319:83): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.644122][ T29] audit: type=1400 audit(1729147649.349:84): avc: denied { unmount } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.783597][ T3254] cgroup: Unknown subsys name 'cpuset' [ 26.790113][ T3254] cgroup: Unknown subsys name 'rlimit' [ 26.958527][ T29] audit: type=1400 audit(1729147649.679:85): avc: denied { setattr } for pid=3254 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.983824][ T3259] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.990493][ T29] audit: type=1400 audit(1729147649.679:86): avc: denied { create } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.013032][ T29] audit: type=1400 audit(1729147649.679:87): avc: denied { write } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.033488][ T29] audit: type=1400 audit(1729147649.679:88): avc: denied { read } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.053892][ T29] audit: type=1400 audit(1729147649.679:89): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.057374][ T3254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.078950][ T29] audit: type=1400 audit(1729147649.679:90): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.110929][ T29] audit: type=1400 audit(1729147649.709:91): avc: denied { relabelto } for pid=3259 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.318835][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 28.327936][ T3271] chnl_net:caif_netlink_parms(): no params data found [ 28.403016][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 28.412026][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.419208][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.426876][ T3271] bridge_slave_0: entered allmulticast mode [ 28.433425][ T3271] bridge_slave_0: entered promiscuous mode [ 28.440038][ T3270] chnl_net:caif_netlink_parms(): no params data found [ 28.462722][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.469892][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.477174][ T3271] bridge_slave_1: entered allmulticast mode [ 28.483878][ T3271] bridge_slave_1: entered promiscuous mode [ 28.496273][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.503474][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.510647][ T3266] bridge_slave_0: entered allmulticast mode [ 28.517554][ T3266] bridge_slave_0: entered promiscuous mode [ 28.543692][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.550863][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.558560][ T3266] bridge_slave_1: entered allmulticast mode [ 28.565241][ T3266] bridge_slave_1: entered promiscuous mode [ 28.581615][ T3271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.604453][ T3274] chnl_net:caif_netlink_parms(): no params data found [ 28.614106][ T3271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.629246][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.657353][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.685174][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.692287][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.699857][ T3270] bridge_slave_0: entered allmulticast mode [ 28.706554][ T3270] bridge_slave_0: entered promiscuous mode [ 28.718315][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.725439][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.732842][ T3267] bridge_slave_0: entered allmulticast mode [ 28.739160][ T3267] bridge_slave_0: entered promiscuous mode [ 28.748573][ T3271] team0: Port device team_slave_0 added [ 28.754383][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.761510][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.768754][ T3270] bridge_slave_1: entered allmulticast mode [ 28.775325][ T3270] bridge_slave_1: entered promiscuous mode [ 28.786026][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.793166][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.800415][ T3267] bridge_slave_1: entered allmulticast mode [ 28.806917][ T3267] bridge_slave_1: entered promiscuous mode [ 28.820484][ T3271] team0: Port device team_slave_1 added [ 28.831505][ T3266] team0: Port device team_slave_0 added [ 28.860634][ T3266] team0: Port device team_slave_1 added [ 28.867713][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.882069][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.889158][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.915302][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.927904][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.938510][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.953275][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.971958][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.978985][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.005818][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.029112][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.036128][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.062179][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.072943][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.080063][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.087453][ T3274] bridge_slave_0: entered allmulticast mode [ 29.094039][ T3274] bridge_slave_0: entered promiscuous mode [ 29.100640][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.107862][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.115244][ T3274] bridge_slave_1: entered allmulticast mode [ 29.121904][ T3274] bridge_slave_1: entered promiscuous mode [ 29.134202][ T3270] team0: Port device team_slave_0 added [ 29.144578][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.151587][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.177784][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.201557][ T3270] team0: Port device team_slave_1 added [ 29.208272][ T3267] team0: Port device team_slave_0 added [ 29.215208][ T3267] team0: Port device team_slave_1 added [ 29.227255][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.252411][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.267976][ T3271] hsr_slave_0: entered promiscuous mode [ 29.274124][ T3271] hsr_slave_1: entered promiscuous mode [ 29.310917][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.317990][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.343989][ T3270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.355570][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.362617][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.388739][ T3270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.399969][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.406955][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.433294][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.444498][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.451533][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.477638][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.493767][ T3274] team0: Port device team_slave_0 added [ 29.501644][ T3266] hsr_slave_0: entered promiscuous mode [ 29.507794][ T3266] hsr_slave_1: entered promiscuous mode [ 29.513714][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.521275][ T3266] Cannot create hsr debugfs directory [ 29.544434][ T3274] team0: Port device team_slave_1 added [ 29.551984][ T3270] hsr_slave_0: entered promiscuous mode [ 29.558115][ T3270] hsr_slave_1: entered promiscuous mode [ 29.564067][ T3270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.571640][ T3270] Cannot create hsr debugfs directory [ 29.610006][ T3267] hsr_slave_0: entered promiscuous mode [ 29.616065][ T3267] hsr_slave_1: entered promiscuous mode [ 29.621873][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.629466][ T3267] Cannot create hsr debugfs directory [ 29.640542][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.647556][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.673786][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.692742][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.699741][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.725690][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.817408][ T3274] hsr_slave_0: entered promiscuous mode [ 29.823512][ T3274] hsr_slave_1: entered promiscuous mode [ 29.829253][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.836881][ T3274] Cannot create hsr debugfs directory [ 29.924646][ T3271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.947788][ T3271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.957059][ T3271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.971259][ T3271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.997194][ T3270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.012167][ T3270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.021296][ T3270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.035564][ T3270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.044749][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.054889][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.068185][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.085852][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.107203][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.117988][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.127083][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.135878][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.172199][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.186177][ T3274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.195427][ T3274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.210393][ T3274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.219052][ T3274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.256383][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.283700][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.290905][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.299771][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.306989][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.331409][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.377023][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.394607][ T3270] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.403910][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.417299][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.437859][ T3274] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.446202][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.454611][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.461717][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.471538][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.478648][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.499610][ T1753] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.506913][ T1753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.522542][ T1753] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.529685][ T1753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.544812][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.558269][ T1753] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.565599][ T1753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.581184][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.590110][ T1753] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.597244][ T1753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.615587][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.622790][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.645335][ T3266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.655825][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.672112][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.679341][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.728989][ T3274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.750715][ T3267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.761251][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.804692][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.816908][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.892504][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.950297][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.960241][ T3271] veth0_vlan: entered promiscuous mode [ 30.974665][ T3271] veth1_vlan: entered promiscuous mode [ 31.004445][ T3270] veth0_vlan: entered promiscuous mode [ 31.012187][ T3270] veth1_vlan: entered promiscuous mode [ 31.027382][ T3271] veth0_macvtap: entered promiscuous mode [ 31.037438][ T3271] veth1_macvtap: entered promiscuous mode [ 31.059064][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.086791][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.108811][ T3271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.117731][ T3271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.126505][ T3271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.135275][ T3271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.147514][ T3270] veth0_macvtap: entered promiscuous mode [ 31.162523][ T3274] veth0_vlan: entered promiscuous mode [ 31.178867][ T3270] veth1_macvtap: entered promiscuous mode [ 31.188311][ T3266] veth0_vlan: entered promiscuous mode [ 31.201512][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.212088][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.223407][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.231132][ T3274] veth1_vlan: entered promiscuous mode [ 31.245739][ T3274] veth0_macvtap: entered promiscuous mode [ 31.252166][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.262704][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.276814][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.289521][ T3271] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.296171][ T3267] veth0_vlan: entered promiscuous mode [ 31.311281][ T3274] veth1_macvtap: entered promiscuous mode [ 31.325582][ T3267] veth1_vlan: entered promiscuous mode [ 31.334878][ T3266] veth1_vlan: entered promiscuous mode [ 31.352964][ T3270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.361805][ T3270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.370660][ T3270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.379468][ T3270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.392149][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.402718][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.412612][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.423117][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.434004][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.448190][ T3267] veth0_macvtap: entered promiscuous mode [ 31.459289][ T3266] veth0_macvtap: entered promiscuous mode [ 31.466791][ T3266] veth1_macvtap: entered promiscuous mode [ 31.476324][ T3267] veth1_macvtap: entered promiscuous mode [ 31.487014][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.497623][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.507545][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.518213][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.528156][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.538768][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.550862][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.558721][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.569324][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.579280][ T3274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.589873][ T3274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.600953][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.611497][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.622118][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.632055][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.642609][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.652544][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.663118][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.673087][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.683666][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.697072][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 31.697161][ T29] audit: type=1400 audit(1729147654.419:127): avc: denied { create } for pid=3407 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 31.729456][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.738725][ T29] audit: type=1400 audit(1729147654.449:128): avc: denied { map_create } for pid=3407 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.747595][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.768468][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.778492][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.783157][ T29] audit: type=1400 audit(1729147654.509:129): avc: denied { connect } for pid=3407 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 31.789023][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.818650][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.829169][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.842279][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.850638][ T29] audit: type=1400 audit(1729147654.539:130): avc: denied { write } for pid=3407 comm="syz.3.6" path="socket:[3711]" dev="sockfs" ino=3711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 31.850705][ T3274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.882535][ T3274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.891722][ T3274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.900545][ T3274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916365][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.926975][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.936918][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.947396][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.957271][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.968051][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.977894][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.988358][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.000302][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.011377][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.020259][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.029065][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.037868][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.056880][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.065868][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.074830][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.083694][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.120188][ T29] audit: type=1400 audit(1729147654.839:131): avc: denied { map_read map_write } for pid=3413 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.148123][ T3414] IPv6: Can't replace route, no match found [ 32.161468][ T29] audit: type=1400 audit(1729147654.879:132): avc: denied { create } for pid=3413 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.181361][ T29] audit: type=1400 audit(1729147654.879:133): avc: denied { ioctl } for pid=3413 comm="syz.3.7" path="socket:[3790]" dev="sockfs" ino=3790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.211457][ T29] audit: type=1326 audit(1729147654.909:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 32.235583][ T29] audit: type=1326 audit(1729147654.909:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 32.259734][ T29] audit: type=1326 audit(1729147654.909:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3415 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 32.360347][ T3426] loop3: detected capacity change from 0 to 164 [ 32.397768][ T3426] syz.3.9: attempt to access beyond end of device [ 32.397768][ T3426] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 32.420486][ T3426] syz.3.9: attempt to access beyond end of device [ 32.420486][ T3426] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.481084][ T3417] mmap: syz.1.2 (3417) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.490124][ T3426] syz.3.9: attempt to access beyond end of device [ 32.490124][ T3426] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.509224][ T3430] loop4: detected capacity change from 0 to 164 [ 32.517089][ T3426] syz.3.9: attempt to access beyond end of device [ 32.517089][ T3426] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.539636][ T3426] syz.3.9: attempt to access beyond end of device [ 32.539636][ T3426] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.564898][ T3426] syz.3.9: attempt to access beyond end of device [ 32.564898][ T3426] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.585471][ T3426] syz.3.9: attempt to access beyond end of device [ 32.585471][ T3426] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.600957][ T3430] syz.4.5: attempt to access beyond end of device [ 32.600957][ T3430] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 32.606303][ T3426] syz.3.9: attempt to access beyond end of device [ 32.606303][ T3426] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.661917][ T3449] syz.4.5: attempt to access beyond end of device [ 32.661917][ T3449] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 32.782409][ T3452] loop2: detected capacity change from 0 to 2048 [ 32.798608][ T3452] EXT4-fs: Ignoring removed oldalloc option [ 32.825745][ T3452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.867037][ T3459] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 32.889312][ T3446] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.15: bg 0: block 234: padding at end of block bitmap is not set [ 32.933801][ T3446] EXT4-fs (loop2): Remounting filesystem read-only [ 32.963187][ T3461] syz.1.18[3461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.963343][ T3461] syz.1.18[3461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.974818][ T3461] syz.1.18[3461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.006358][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.077216][ T3464] syz.2.19[3464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.077381][ T3464] syz.2.19[3464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.102177][ T3464] syz.2.19[3464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.145099][ T3467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 33.165492][ T3467] netlink: 'syz.1.20': attribute type 12 has an invalid length. [ 33.174825][ T3469] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.190571][ T3467] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.199458][ T3467] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.208509][ T3467] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.217530][ T3467] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.251989][ T3467] vxlan0: entered promiscuous mode [ 33.396997][ T3472] loop2: detected capacity change from 0 to 8192 [ 33.523317][ T3476] loop4: detected capacity change from 0 to 8192 [ 33.617532][ T3485] loop2: detected capacity change from 0 to 164 [ 33.686581][ T3491] syz.4.31[3491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.686722][ T3491] syz.4.31[3491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.702461][ T3491] syz.4.31[3491] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.831310][ T3509] loop0: detected capacity change from 0 to 512 [ 33.873190][ T3505] loop4: detected capacity change from 0 to 8192 [ 33.875939][ T3511] loop3: detected capacity change from 0 to 164 [ 33.885939][ T3505] ======================================================= [ 33.885939][ T3505] WARNING: The mand mount option has been deprecated and [ 33.885939][ T3505] and is ignored by this kernel. Remove the mand [ 33.885939][ T3505] option from the mount to silence this warning. [ 33.885939][ T3505] ======================================================= [ 33.923537][ T3467] syz.1.20 (3467) used greatest stack depth: 10592 bytes left [ 33.932629][ T3505] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.948405][ T3505] FAULT_INJECTION: forcing a failure. [ 33.948405][ T3505] name failslab, interval 1, probability 0, space 0, times 0 [ 33.961282][ T3505] CPU: 0 UID: 0 PID: 3505 Comm: syz.4.36 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 33.972108][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 33.982463][ T3505] Call Trace: [ 33.985762][ T3505] [ 33.988705][ T3505] dump_stack_lvl+0xf2/0x150 [ 33.993387][ T3505] dump_stack+0x15/0x20 [ 33.997568][ T3505] should_fail_ex+0x223/0x230 [ 34.002346][ T3505] ? __se_sys_mount+0xf7/0x2d0 [ 34.007320][ T3505] should_failslab+0x8f/0xb0 [ 34.011953][ T3505] __kmalloc_cache_noprof+0x4b/0x2a0 [ 34.017344][ T3505] __se_sys_mount+0xf7/0x2d0 [ 34.021982][ T3505] ? fput+0x14e/0x190 [ 34.026004][ T3505] ? ksys_write+0x17a/0x1b0 [ 34.030717][ T3505] __x64_sys_mount+0x67/0x80 [ 34.035403][ T3505] x64_sys_call+0x203e/0x2d60 [ 34.040147][ T3505] do_syscall_64+0xc9/0x1c0 [ 34.044694][ T3505] ? clear_bhb_loop+0x55/0xb0 [ 34.049420][ T3505] ? clear_bhb_loop+0x55/0xb0 [ 34.054164][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.060163][ T3505] RIP: 0033:0x7f9e3f63dff9 [ 34.064623][ T3505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.084433][ T3505] RSP: 002b:00007f9e3e2b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.092938][ T3505] RAX: ffffffffffffffda RBX: 00007f9e3f7f5f80 RCX: 00007f9e3f63dff9 [ 34.100940][ T3505] RDX: 0000000020000400 RSI: 00000000200003c0 RDI: 0000000000000000 [ 34.108956][ T3505] RBP: 00007f9e3e2b7090 R08: 0000000020000000 R09: 0000000000000000 [ 34.116990][ T3505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.125159][ T3505] R13: 0000000000000000 R14: 00007f9e3f7f5f80 R15: 00007fff1b8ce348 [ 34.133248][ T3505] [ 34.187710][ T3518] netlink: 292 bytes leftover after parsing attributes in process `syz.0.41'. [ 34.221245][ T3520] process 'syz.1.39' launched '/dev/fd/11' with NULL argv: empty string added [ 34.260812][ T3520] syz.1.39[3520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.266915][ T3520] loop1: detected capacity change from 0 to 512 [ 34.488712][ T3536] loop1: detected capacity change from 0 to 8192 [ 34.496912][ T3536] vfat: Unknown parameter '00000000000000000000000V|:sIM[ȴ2 <{zf' [ 34.553084][ T3536] Zero length message leads to an empty skb [ 34.566761][ T3536] mmap: syz.1.46 (3536): VmData 28991488 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 34.740843][ T3552] loop2: detected capacity change from 0 to 512 [ 34.784193][ T3552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.811299][ T3552] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.957601][ T3564] 9pnet_fd: Insufficient options for proto=fd [ 34.979677][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.987659][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.018304][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.025907][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.070138][ T3569] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.153684][ T3562] syz.0.55 (3562) used greatest stack depth: 10368 bytes left [ 35.228537][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.306600][ T3574] loop4: detected capacity change from 0 to 1024 [ 35.328116][ T3574] EXT4-fs: Ignoring removed orlov option [ 35.343369][ T3574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.351662][ T3586] loop1: detected capacity change from 0 to 2048 [ 35.363393][ T3584] netlink: 199796 bytes leftover after parsing attributes in process `syz.0.65'. [ 35.370781][ T3586] EXT4-fs: Ignoring removed orlov option [ 35.379470][ T3586] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.388013][ T3574] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 35.396292][ T3586] EXT4-fs: dax option not supported [ 35.404485][ T3574] System zones: 0-1, 3-12 [ 35.415272][ T3574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.456400][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.468852][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 35.478287][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 35.489483][ T3594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.508302][ T3569] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 35.526391][ T3569] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.58: corrupted in-inode xattr: bad magic number in in-inode xattr [ 35.544201][ T3569] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.58: attempt to clear invalid blocks 1886221359 len 1 [ 35.551412][ T3606] loop0: detected capacity change from 0 to 2048 [ 35.561583][ T3605] pim6reg: entered allmulticast mode [ 35.571042][ T3605] pim6reg: left allmulticast mode [ 35.595849][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 35.608706][ T3608] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.617486][ T3608] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.626295][ T3608] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.635206][ T3608] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.636098][ T3609] loop0: detected capacity change from 0 to 2048 [ 35.650685][ T3608] vxlan0: entered promiscuous mode [ 35.655961][ T3608] vxlan0: entered allmulticast mode [ 35.664995][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.674588][ T3608] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.683581][ T3608] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.692485][ T3608] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.693268][ T3609] loop0: p1 < > p4 [ 35.701940][ T3608] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 35.707796][ T3609] loop0: p4 size 8388608 extends beyond EOD, truncated [ 35.755497][ T3614] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffff [ 35.799755][ T3619] tipc: Started in network mode [ 35.804808][ T3619] tipc: Node identity , cluster identity 4711 [ 35.811045][ T3619] tipc: Failed to set node id, please configure manually [ 35.818121][ T3619] tipc: Enabling of bearer rejected, failed to enable media [ 35.834502][ T3620] loop4: detected capacity change from 0 to 164 [ 36.390190][ T3630] FAULT_INJECTION: forcing a failure. [ 36.390190][ T3630] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.403521][ T3630] CPU: 1 UID: 0 PID: 3630 Comm: syz.0.79 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 36.414105][ T3630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.424271][ T3630] Call Trace: [ 36.427664][ T3630] [ 36.430663][ T3630] dump_stack_lvl+0xf2/0x150 [ 36.435369][ T3630] dump_stack+0x15/0x20 [ 36.439543][ T3630] should_fail_ex+0x223/0x230 [ 36.444390][ T3630] should_fail+0xb/0x10 [ 36.448584][ T3630] should_fail_usercopy+0x1a/0x20 [ 36.453990][ T3630] _copy_from_user+0x1e/0xd0 [ 36.458627][ T3630] usbdev_ioctl+0x101b/0x3e00 [ 36.463439][ T3630] ? do_vfs_ioctl+0x96e/0x1530 [ 36.468307][ T3630] ? selinux_file_ioctl+0x2f7/0x380 [ 36.473621][ T3630] ? __fget_files+0x1d4/0x210 [ 36.478622][ T3630] ? __pfx_usbdev_ioctl+0x10/0x10 [ 36.483701][ T3630] __se_sys_ioctl+0xcd/0x140 [ 36.488341][ T3630] __x64_sys_ioctl+0x43/0x50 [ 36.492974][ T3630] x64_sys_call+0x15cc/0x2d60 [ 36.497841][ T3630] do_syscall_64+0xc9/0x1c0 [ 36.502371][ T3630] ? clear_bhb_loop+0x55/0xb0 [ 36.507177][ T3630] ? clear_bhb_loop+0x55/0xb0 [ 36.511889][ T3630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.517856][ T3630] RIP: 0033:0x7fe4b33fdff9 [ 36.522351][ T3630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.542510][ T3630] RSP: 002b:00007fe4b2077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.551068][ T3630] RAX: ffffffffffffffda RBX: 00007fe4b35b5f80 RCX: 00007fe4b33fdff9 [ 36.559162][ T3630] RDX: 0000000020000000 RSI: 000000008038550a RDI: 0000000000000007 [ 36.567255][ T3630] RBP: 00007fe4b2077090 R08: 0000000000000000 R09: 0000000000000000 [ 36.575411][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.583430][ T3630] R13: 0000000000000000 R14: 00007fe4b35b5f80 R15: 00007ffe8e5bb418 [ 36.591518][ T3630] [ 36.631313][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 36.643911][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 36.689448][ T3642] loop0: detected capacity change from 0 to 512 [ 36.733653][ T3642] : renamed from syzkaller0 [ 36.748234][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 36.748251][ T29] audit: type=1326 audit(1729147659.469:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.791568][ T3653] loop1: detected capacity change from 0 to 512 [ 36.801310][ T29] audit: type=1326 audit(1729147659.469:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.824544][ T29] audit: type=1326 audit(1729147659.469:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.847772][ T29] audit: type=1326 audit(1729147659.469:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.871137][ T29] audit: type=1326 audit(1729147659.469:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.894679][ T29] audit: type=1326 audit(1729147659.469:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.917979][ T29] audit: type=1326 audit(1729147659.469:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.941623][ T29] audit: type=1326 audit(1729147659.479:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.964916][ T29] audit: type=1326 audit(1729147659.479:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 36.988194][ T29] audit: type=1326 audit(1729147659.479:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 37.036320][ T3653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.055548][ T3653] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.098954][ T3653] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.89: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 37.124990][ T3653] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.135474][ T3653] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.89: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 37.152170][ T3668] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.89: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 37.169164][ T3653] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.188670][ T3653] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.89: bg 0: block 18: invalid block bitmap [ 37.211227][ T3671] FAULT_INJECTION: forcing a failure. [ 37.211227][ T3671] name failslab, interval 1, probability 0, space 0, times 0 [ 37.224010][ T3671] CPU: 0 UID: 0 PID: 3671 Comm: syz.2.93 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 37.234547][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 37.244727][ T3671] Call Trace: [ 37.248017][ T3671] [ 37.250953][ T3671] dump_stack_lvl+0xf2/0x150 [ 37.255558][ T3671] dump_stack+0x15/0x20 [ 37.259726][ T3671] should_fail_ex+0x223/0x230 [ 37.264426][ T3671] ? vm_area_alloc+0xac/0x130 [ 37.269201][ T3671] should_failslab+0x8f/0xb0 [ 37.273834][ T3671] kmem_cache_alloc_noprof+0x4c/0x290 [ 37.279343][ T3671] vm_area_alloc+0xac/0x130 [ 37.283881][ T3671] mmap_region+0x938/0x16e0 [ 37.288417][ T3671] do_mmap+0x718/0xb60 [ 37.292538][ T3671] vm_mmap_pgoff+0x133/0x290 [ 37.297242][ T3671] ksys_mmap_pgoff+0xd0/0x330 [ 37.301944][ T3671] ? fpregs_assert_state_consistent+0x83/0xa0 [ 37.308099][ T3671] x64_sys_call+0x1884/0x2d60 [ 37.312802][ T3671] do_syscall_64+0xc9/0x1c0 [ 37.317317][ T3671] ? clear_bhb_loop+0x55/0xb0 [ 37.322028][ T3671] ? clear_bhb_loop+0x55/0xb0 [ 37.326798][ T3671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.332841][ T3671] RIP: 0033:0x7f046b95e033 [ 37.337288][ T3671] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 37.357138][ T3671] RSP: 002b:00007f046a5d0d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 37.365578][ T3671] RAX: ffffffffffffffda RBX: 000000000000059b RCX: 00007f046b95e033 [ 37.373570][ T3671] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 37.381710][ T3671] RBP: 0000000020000002 R08: 00000000ffffffff R09: 0000000000000000 [ 37.390306][ T3671] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 37.398412][ T3671] R13: 00007f046a5d0dec R14: 00007f046a5d0df0 R15: 00007ffd36d5aed8 [ 37.406413][ T3671] [ 37.439422][ T3653] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.89: Failed to acquire dquot type 1 [ 37.452806][ T3668] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.463018][ T3668] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.89: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 37.484250][ T3676] SELinux: policydb version 4376 does not match my version range 15-33 [ 37.492815][ T3676] SELinux: failed to load policy [ 37.505241][ T3676] loop3: detected capacity change from 0 to 512 [ 37.512948][ T3668] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 37.531526][ T3668] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.89: Failed to acquire dquot type 1 [ 37.534167][ T3676] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.95: bad orphan inode 15 [ 37.553338][ T3676] ext4_test_bit(bit=14, block=5) = 0 [ 37.559067][ T3676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.590186][ T3676] EXT4-fs error (device loop3): __ext4_new_inode:1070: comm syz.3.95: reserved inode found cleared - inode=1 [ 37.649253][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.925210][ T3653] syz.1.89 (3653) used greatest stack depth: 9448 bytes left [ 37.945991][ T3270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.968890][ T3687] FAULT_INJECTION: forcing a failure. [ 37.968890][ T3687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.982030][ T3687] CPU: 0 UID: 0 PID: 3687 Comm: syz.4.98 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 37.992736][ T3687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.002875][ T3687] Call Trace: [ 38.006178][ T3687] [ 38.009121][ T3687] dump_stack_lvl+0xf2/0x150 [ 38.013932][ T3687] dump_stack+0x15/0x20 [ 38.018160][ T3687] should_fail_ex+0x223/0x230 [ 38.022901][ T3687] should_fail+0xb/0x10 [ 38.027098][ T3687] should_fail_usercopy+0x1a/0x20 [ 38.032152][ T3687] _copy_to_user+0x1e/0xa0 [ 38.036644][ T3687] simple_read_from_buffer+0xa0/0x110 [ 38.042046][ T3687] proc_fail_nth_read+0xf9/0x140 [ 38.047035][ T3687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 38.052609][ T3687] vfs_read+0x195/0x720 [ 38.056787][ T3687] ? __se_sys_pselect6+0x218/0x270 [ 38.062001][ T3687] ? xfd_validate_state+0x46/0xf0 [ 38.067250][ T3687] ksys_read+0xeb/0x1b0 [ 38.071536][ T3687] __x64_sys_read+0x42/0x50 [ 38.076063][ T3687] x64_sys_call+0x27d3/0x2d60 [ 38.080761][ T3687] do_syscall_64+0xc9/0x1c0 [ 38.085348][ T3687] ? clear_bhb_loop+0x55/0xb0 [ 38.090224][ T3687] ? clear_bhb_loop+0x55/0xb0 [ 38.095019][ T3687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.100958][ T3687] RIP: 0033:0x7f9e3f63ca3c [ 38.105378][ T3687] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 38.125040][ T3687] RSP: 002b:00007f9e3e2b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.133555][ T3687] RAX: ffffffffffffffda RBX: 00007f9e3f7f5f80 RCX: 00007f9e3f63ca3c [ 38.141548][ T3687] RDX: 000000000000000f RSI: 00007f9e3e2b70a0 RDI: 000000000000000a [ 38.149535][ T3687] RBP: 00007f9e3e2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.157538][ T3687] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 38.165520][ T3687] R13: 0000000000000000 R14: 00007f9e3f7f5f80 R15: 00007fff1b8ce348 [ 38.173506][ T3687] [ 38.181037][ T3690] loop2: detected capacity change from 0 to 164 [ 38.191994][ T3695] loop0: detected capacity change from 0 to 512 [ 38.223217][ T3695] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.246065][ T3690] bio_check_eod: 54280 callbacks suppressed [ 38.246089][ T3690] syz.2.101: attempt to access beyond end of device [ 38.246089][ T3690] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.247943][ T3695] ext4: Unknown parameter 'subj_type' [ 38.252208][ T3690] syz.2.101: attempt to access beyond end of device [ 38.252208][ T3690] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.289108][ T3698] loop3: detected capacity change from 0 to 512 [ 38.304632][ T3698] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.317791][ T3698] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.333697][ T3701] loop4: detected capacity change from 0 to 164 [ 38.372655][ T3690] syz.2.101: attempt to access beyond end of device [ 38.372655][ T3690] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.414531][ T3701] syz.4.105: attempt to access beyond end of device [ 38.414531][ T3701] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.438868][ T3690] syz.2.101: attempt to access beyond end of device [ 38.438868][ T3690] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.473215][ T3698] EXT4-fs (loop3): 1 truncate cleaned up [ 38.479300][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.529725][ T3701] syz.4.105: attempt to access beyond end of device [ 38.529725][ T3701] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.543319][ T3705] syz.4.105: attempt to access beyond end of device [ 38.543319][ T3705] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.543663][ T3690] syz.2.101: attempt to access beyond end of device [ 38.543663][ T3690] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.570318][ T3690] syz.2.101: attempt to access beyond end of device [ 38.570318][ T3690] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.592629][ T3690] syz.2.101: attempt to access beyond end of device [ 38.592629][ T3690] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.608016][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.620036][ T3706] loop0: detected capacity change from 0 to 164 [ 38.629350][ T3708] __nla_validate_parse: 3 callbacks suppressed [ 38.629437][ T3708] netlink: 199796 bytes leftover after parsing attributes in process `syz.1.102'. [ 38.704177][ T3712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 38.718643][ T3713] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 38.745835][ T3712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 38.913165][ T3728] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 39.030085][ T3729] loop2: detected capacity change from 0 to 164 [ 39.114535][ T3342] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 39.122313][ T3342] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 39.178179][ T3342] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 39.277651][ T3342] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 39.344815][ T3741] loop1: detected capacity change from 0 to 512 [ 39.407892][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.431410][ T3747] netlink: 199796 bytes leftover after parsing attributes in process `syz.0.118'. [ 39.442814][ T3742] loop4: detected capacity change from 0 to 164 [ 39.452712][ T3741] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.494578][ T3734] tipc: Enabling of bearer rejected, failed to enable media [ 39.666171][ T3751] loop0: detected capacity change from 0 to 512 [ 39.686893][ T3751] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.706135][ T3751] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.120: bg 0: block 64: padding at end of block bitmap is not set [ 39.739053][ T3751] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.120: Failed to acquire dquot type 0 [ 39.828201][ T3751] EXT4-fs (loop0): 1 truncate cleaned up [ 39.851871][ T3751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.985864][ T3751] syz.0.120 (3751) used greatest stack depth: 9344 bytes left [ 40.004816][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.067663][ T3270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.298140][ T3781] loop1: detected capacity change from 0 to 512 [ 40.344393][ T3781] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 40.355465][ T3781] EXT4-fs (loop1): group descriptors corrupted! [ 40.434744][ T3783] batadv_slave_0: entered promiscuous mode [ 40.496750][ T3786] batadv_slave_0: left promiscuous mode [ 40.688888][ T3781] netlink: zone id is out of range [ 40.694118][ T3781] netlink: zone id is out of range [ 40.699268][ T3781] netlink: set zone limit has 8 unknown bytes [ 40.699287][ T3789] FAULT_INJECTION: forcing a failure. [ 40.699287][ T3789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.718498][ T3789] CPU: 0 UID: 0 PID: 3789 Comm: syz.4.131 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 40.729194][ T3789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.739274][ T3789] Call Trace: [ 40.742628][ T3789] [ 40.745580][ T3789] dump_stack_lvl+0xf2/0x150 [ 40.750215][ T3789] dump_stack+0x15/0x20 [ 40.754407][ T3789] should_fail_ex+0x223/0x230 [ 40.759173][ T3789] should_fail+0xb/0x10 [ 40.763383][ T3789] should_fail_usercopy+0x1a/0x20 [ 40.766029][ T3787] loop0: detected capacity change from 0 to 8192 [ 40.768442][ T3789] _copy_from_iter+0xd3/0xd20 [ 40.779525][ T3789] ? kmalloc_reserve+0x16e/0x190 [ 40.784476][ T3789] ? __build_skb_around+0x196/0x1f0 [ 40.789690][ T3789] ? __alloc_skb+0x21f/0x310 [ 40.794336][ T3789] ? __virt_addr_valid+0x1ed/0x250 [ 40.799476][ T3789] ? __check_object_size+0x364/0x520 [ 40.804872][ T3789] netlink_sendmsg+0x460/0x6e0 [ 40.809738][ T3789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.815080][ T3789] __sock_sendmsg+0x140/0x180 [ 40.819807][ T3789] ____sys_sendmsg+0x312/0x410 [ 40.824763][ T3789] __sys_sendmsg+0x1d9/0x270 [ 40.829421][ T3789] __x64_sys_sendmsg+0x46/0x50 [ 40.834355][ T3789] x64_sys_call+0x2689/0x2d60 [ 40.839058][ T3789] do_syscall_64+0xc9/0x1c0 [ 40.843654][ T3789] ? clear_bhb_loop+0x55/0xb0 [ 40.848370][ T3789] ? clear_bhb_loop+0x55/0xb0 [ 40.853107][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.859111][ T3789] RIP: 0033:0x7f9e3f63dff9 [ 40.863534][ T3789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.883239][ T3789] RSP: 002b:00007f9e3e2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.891663][ T3789] RAX: ffffffffffffffda RBX: 00007f9e3f7f5f80 RCX: 00007f9e3f63dff9 [ 40.899736][ T3789] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 40.907935][ T3789] RBP: 00007f9e3e2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 40.915954][ T3789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.924193][ T3789] R13: 0000000000000000 R14: 00007f9e3f7f5f80 R15: 00007fff1b8ce348 [ 40.932396][ T3789] [ 40.955481][ T3794] netlink: 16 bytes leftover after parsing attributes in process `syz.4.133'. [ 41.023526][ T3801] loop4: detected capacity change from 0 to 512 [ 41.031774][ T3801] EXT4-fs: Ignoring removed orlov option [ 41.038772][ T3801] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.050445][ T3801] EXT4-fs (loop4): 1 orphan inode deleted [ 41.056510][ T3801] EXT4-fs (loop4): 1 truncate cleaned up [ 41.063084][ T3801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.078948][ T3805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 41.088223][ T3801] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 41.088355][ T3805] bridge_slave_1: left allmulticast mode [ 41.108553][ T3805] bridge_slave_1: left promiscuous mode [ 41.114407][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.124915][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.138002][ T3805] bridge_slave_0: left allmulticast mode [ 41.143826][ T3805] bridge_slave_0: left promiscuous mode [ 41.149528][ T3805] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.171347][ T3815] FAULT_INJECTION: forcing a failure. [ 41.171347][ T3815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.184964][ T3815] CPU: 1 UID: 0 PID: 3815 Comm: syz.4.139 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 41.196071][ T3815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.206909][ T3815] Call Trace: [ 41.210258][ T3815] [ 41.213380][ T3815] dump_stack_lvl+0xf2/0x150 [ 41.218102][ T3815] dump_stack+0x15/0x20 [ 41.222980][ T3815] should_fail_ex+0x223/0x230 [ 41.228396][ T3815] should_fail+0xb/0x10 [ 41.234354][ T3815] should_fail_usercopy+0x1a/0x20 [ 41.239504][ T3815] _copy_from_user+0x1e/0xd0 [ 41.244166][ T3815] copy_msghdr_from_user+0x54/0x2a0 [ 41.249535][ T3815] __sys_recvmsg+0x160/0x270 [ 41.254362][ T3815] __x64_sys_recvmsg+0x46/0x50 [ 41.259407][ T3815] x64_sys_call+0xb84/0x2d60 [ 41.264019][ T3815] do_syscall_64+0xc9/0x1c0 [ 41.268539][ T3815] ? clear_bhb_loop+0x55/0xb0 [ 41.273421][ T3815] ? clear_bhb_loop+0x55/0xb0 [ 41.278169][ T3815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.284144][ T3815] RIP: 0033:0x7f9e3f63dff9 [ 41.288567][ T3815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.308214][ T3815] RSP: 002b:00007f9e3e2b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 41.316676][ T3815] RAX: ffffffffffffffda RBX: 00007f9e3f7f5f80 RCX: 00007f9e3f63dff9 [ 41.324681][ T3815] RDX: 0000000000000000 RSI: 00000000200018c0 RDI: 0000000000000006 [ 41.332664][ T3815] RBP: 00007f9e3e2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 41.340782][ T3815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.348925][ T3815] R13: 0000000000000000 R14: 00007f9e3f7f5f80 R15: 00007fff1b8ce348 [ 41.357108][ T3815] [ 41.384914][ T3820] loop1: detected capacity change from 0 to 1024 [ 41.391788][ T3820] EXT4-fs: Ignoring removed orlov option [ 41.397649][ T3820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.414140][ T3822] loop0: detected capacity change from 0 to 512 [ 41.443374][ T3820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.465535][ T3822] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.489489][ T3811] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 41.497428][ T3811] netlink: 40 bytes leftover after parsing attributes in process `syz.1.138'. [ 41.499960][ T3822] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.506592][ T3811] hsr0: entered promiscuous mode [ 41.521863][ T3811] hsr0: entered allmulticast mode [ 41.527051][ T3811] hsr_slave_0: entered allmulticast mode [ 41.532757][ T3811] hsr_slave_1: entered allmulticast mode [ 41.596211][ T3811] bridge0: port 3(hsr0) entered blocking state [ 41.602515][ T3811] bridge0: port 3(hsr0) entered disabled state [ 41.615196][ T3811] bridge0: port 3(hsr0) entered blocking state [ 41.621748][ T3811] bridge0: port 3(hsr0) entered forwarding state [ 41.631574][ T3831] loop2: detected capacity change from 0 to 164 [ 41.640190][ T3838] FAULT_INJECTION: forcing a failure. [ 41.640190][ T3838] name failslab, interval 1, probability 0, space 0, times 0 [ 41.653030][ T3838] CPU: 1 UID: 0 PID: 3838 Comm: syz.3.147 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 41.663737][ T3838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 41.673838][ T3838] Call Trace: [ 41.677178][ T3838] [ 41.680112][ T3838] dump_stack_lvl+0xf2/0x150 [ 41.684777][ T3838] dump_stack+0x15/0x20 [ 41.688976][ T3838] should_fail_ex+0x223/0x230 [ 41.693677][ T3838] ? io_cqring_event_overflow+0x5a/0x300 [ 41.699466][ T3838] should_failslab+0x8f/0xb0 [ 41.704085][ T3838] __kmalloc_noprof+0xa5/0x370 [ 41.708879][ T3838] io_cqring_event_overflow+0x5a/0x300 [ 41.714365][ T3838] ? io_uring_cmd_sock+0x1d4/0x310 [ 41.719530][ T3838] io_req_cqe_overflow+0x89/0xb0 [ 41.724729][ T3838] __io_submit_flush_completions+0x34e/0xa00 [ 41.730741][ T3838] io_submit_sqes+0xe9b/0x1090 [ 41.735594][ T3838] ? __rcu_read_unlock+0x4e/0x70 [ 41.740583][ T3838] ? xa_load+0xb9/0xe0 [ 41.744762][ T3838] __se_sys_io_uring_enter+0x1ce/0x17b0 [ 41.750319][ T3838] ? get_pid_task+0x8e/0xc0 [ 41.754972][ T3838] ? proc_fail_nth_write+0x12a/0x150 [ 41.760368][ T3838] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.766019][ T3838] ? vfs_write+0x580/0x910 [ 41.770516][ T3838] ? __fget_files+0x1d4/0x210 [ 41.775260][ T3838] ? fput+0x14e/0x190 [ 41.779260][ T3838] ? ksys_write+0x17a/0x1b0 [ 41.783876][ T3838] __x64_sys_io_uring_enter+0x78/0x90 [ 41.789262][ T3838] x64_sys_call+0x2567/0x2d60 [ 41.793994][ T3838] do_syscall_64+0xc9/0x1c0 [ 41.798514][ T3838] ? clear_bhb_loop+0x55/0xb0 [ 41.803216][ T3838] ? clear_bhb_loop+0x55/0xb0 [ 41.807995][ T3838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.813915][ T3838] RIP: 0033:0x7f8b3454dff9 [ 41.818358][ T3838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.837983][ T3838] RSP: 002b:00007f8b331c1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 41.846477][ T3838] RAX: ffffffffffffffda RBX: 00007f8b34705f80 RCX: 00007f8b3454dff9 [ 41.854605][ T3838] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000004 [ 41.862673][ T3838] RBP: 00007f8b331c1090 R08: 0000000000000000 R09: 0000000000000000 [ 41.870651][ T3838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.878666][ T3838] R13: 0000000000000000 R14: 00007f8b34705f80 R15: 00007ffc768186f8 [ 41.886711][ T3838] [ 41.892865][ T3267] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.894782][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 41.894797][ T29] audit: type=1326 audit(1729147664.619:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.1.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd0f58dff9 code=0x7ffc0000 [ 42.073720][ T29] audit: type=1400 audit(1729147664.789:1297): avc: denied { create } for pid=3841 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.093739][ T29] audit: type=1400 audit(1729147664.799:1298): avc: denied { write } for pid=3841 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.113916][ T29] audit: type=1400 audit(1729147664.799:1299): avc: denied { bind } for pid=3841 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.133739][ T3270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.155789][ T3845] loop0: detected capacity change from 0 to 128 [ 42.181093][ T3843] FAULT_INJECTION: forcing a failure. [ 42.181093][ T3843] name failslab, interval 1, probability 0, space 0, times 0 [ 42.193872][ T3843] CPU: 1 UID: 0 PID: 3843 Comm: syz.3.148 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 42.204779][ T3843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.214965][ T3843] Call Trace: [ 42.218283][ T3843] [ 42.221302][ T3843] dump_stack_lvl+0xf2/0x150 [ 42.226004][ T3843] dump_stack+0x15/0x20 [ 42.226694][ T3848] loop1: detected capacity change from 0 to 512 [ 42.230434][ T3843] should_fail_ex+0x223/0x230 [ 42.241730][ T3843] ? p9_fid_create+0x30/0x230 [ 42.246453][ T3843] should_failslab+0x8f/0xb0 [ 42.251142][ T3843] __kmalloc_cache_noprof+0x4b/0x2a0 [ 42.256507][ T3843] p9_fid_create+0x30/0x230 [ 42.261134][ T3843] p9_client_attach+0x4d/0x270 [ 42.265993][ T3843] v9fs_fid_lookup+0x430/0xa20 [ 42.270792][ T3843] v9fs_file_open+0x118/0x530 [ 42.275508][ T3843] ? __pfx_v9fs_file_open+0x10/0x10 [ 42.280924][ T3843] do_dentry_open+0x621/0xa20 [ 42.286248][ T3843] vfs_open+0x38/0x1f0 [ 42.290387][ T3843] path_openat+0x1ac2/0x1fa0 [ 42.295057][ T3843] ? _parse_integer_limit+0x167/0x180 [ 42.300563][ T3843] ? _parse_integer+0x27/0x30 [ 42.305403][ T3843] ? kstrtoull+0x110/0x140 [ 42.309865][ T3843] do_filp_open+0xf7/0x200 [ 42.314324][ T3843] do_sys_openat2+0xab/0x120 [ 42.318936][ T3843] __x64_sys_open+0xe6/0x110 [ 42.323556][ T3843] x64_sys_call+0x1321/0x2d60 [ 42.328320][ T3843] do_syscall_64+0xc9/0x1c0 [ 42.332879][ T3843] ? clear_bhb_loop+0x55/0xb0 [ 42.337606][ T3843] ? clear_bhb_loop+0x55/0xb0 [ 42.342791][ T3843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.348785][ T3843] RIP: 0033:0x7f8b3454dff9 [ 42.353217][ T3843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.372941][ T3843] RSP: 002b:00007f8b331c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 42.381751][ T3843] RAX: ffffffffffffffda RBX: 00007f8b34705f80 RCX: 00007f8b3454dff9 [ 42.390017][ T3843] RDX: 000000000000000c RSI: 0000000000002000 RDI: 0000000020000080 [ 42.398032][ T3843] RBP: 00007f8b331c1090 R08: 0000000000000000 R09: 0000000000000000 [ 42.406200][ T3843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.414310][ T3843] R13: 0000000000000000 R14: 00007f8b34705f80 R15: 00007ffc768186f8 [ 42.422309][ T3843] [ 42.428628][ T3845] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.443614][ T3845] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.485894][ T3851] loop4: detected capacity change from 0 to 512 [ 42.494855][ T3848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.522700][ T3848] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.523875][ T3851] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 42.548469][ T3851] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.151: bad orphan inode 15 [ 42.559247][ T3851] ext4_test_bit(bit=14, block=4) = 1 [ 42.564658][ T3851] is_bad_inode(inode)=0 [ 42.568927][ T3851] NEXT_ORPHAN(inode)=0 [ 42.573081][ T3851] max_ino=32 [ 42.576303][ T3851] i_nlink=1 [ 42.581976][ T3851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.604885][ T29] audit: type=1400 audit(1729147665.329:1300): avc: denied { setopt } for pid=3846 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 42.624415][ T29] audit: type=1400 audit(1729147665.329:1301): avc: denied { connect } for pid=3850 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.644727][ T29] audit: type=1400 audit(1729147665.369:1302): avc: denied { listen } for pid=3846 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.682929][ T3266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.692132][ T29] audit: type=1400 audit(1729147665.399:1303): avc: denied { accept } for pid=3846 comm="syz.1.149" lport=55710 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.723363][ T3270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.736390][ T29] audit: type=1400 audit(1729147665.459:1304): avc: denied { relabelfrom } for pid=3863 comm="syz.4.153" name="" dev="pipefs" ino=5521 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 42.765834][ T3267] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.848005][ T3865] loop3: detected capacity change from 0 to 164 [ 42.910554][ T29] audit: type=1400 audit(1729147665.629:1305): avc: denied { shutdown } for pid=3879 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.986024][ T3890] loop2: detected capacity change from 0 to 512 [ 43.003272][ T3890] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.007561][ T3891] loop1: detected capacity change from 0 to 512 [ 43.014955][ T3875] loop0: detected capacity change from 0 to 8192 [ 43.058968][ T3891] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.059814][ T3890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.104636][ T3891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.253038][ T3857] bio_check_eod: 50078 callbacks suppressed [ 43.253057][ T3857] syz.3.152: attempt to access beyond end of device [ 43.253057][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.274173][ T3857] syz.3.152: attempt to access beyond end of device [ 43.274173][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.288397][ T3857] syz.3.152: attempt to access beyond end of device [ 43.288397][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.302086][ T3857] syz.3.152: attempt to access beyond end of device [ 43.302086][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.315777][ T3857] syz.3.152: attempt to access beyond end of device [ 43.315777][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.329498][ T3857] syz.3.152: attempt to access beyond end of device [ 43.329498][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.343954][ T3857] syz.3.152: attempt to access beyond end of device [ 43.343954][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.357517][ T3857] syz.3.152: attempt to access beyond end of device [ 43.357517][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.371905][ T3857] syz.3.152: attempt to access beyond end of device [ 43.371905][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.386821][ T3857] syz.3.152: attempt to access beyond end of device [ 43.386821][ T3857] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.715665][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.745338][ T3270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.755565][ T3916] Illegal XDP return value 782456839 on prog (id 152) dev syz_tun, expect packet loss! [ 43.777163][ T3923] netlink: 199796 bytes leftover after parsing attributes in process `syz.1.173'. [ 43.811182][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 43.820860][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 43.832437][ T3929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 43.842578][ T3927] netlink: 'syz.3.175': attribute type 10 has an invalid length. [ 43.862090][ T3927] batman_adv: batadv0: Adding interface: team0 [ 43.868439][ T3927] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.873658][ T3936] loop2: detected capacity change from 0 to 1024 [ 43.894045][ T3927] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 43.898458][ T3927] netlink: 'syz.3.175': attribute type 10 has an invalid length. [ 43.902513][ T3936] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 43.910441][ T3927] netlink: 2 bytes leftover after parsing attributes in process `syz.3.175'. [ 43.918223][ T3936] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 43.929440][ T3927] team0: entered promiscuous mode [ 43.939304][ T3936] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.947571][ T3927] team_slave_0: entered promiscuous mode [ 43.947637][ T3927] team_slave_1: entered promiscuous mode [ 43.948890][ T3927] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.953843][ T3936] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: comm syz.2.179: inode #1: comm syz.2.179: iget: illegal inode # [ 43.968674][ T3927] batman_adv: batadv0: Interface activated: team0 [ 43.970870][ T3934] loop1: detected capacity change from 0 to 128 [ 43.974895][ T3927] batman_adv: batadv0: Interface deactivated: team0 [ 43.984058][ T3936] EXT4-fs (loop2): no journal found [ 43.994556][ T3927] batman_adv: batadv0: Removing interface: team0 [ 44.000998][ T3936] EXT4-fs (loop2): can't get journal size [ 44.022299][ T3934] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.034962][ T3936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.060153][ T3934] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.150555][ T3954] bpf_get_probe_write_proto: 2 callbacks suppressed [ 44.150574][ T3954] syz.1.178[3954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.163588][ T3954] syz.1.178[3954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.163948][ T3274] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.183124][ T3954] syz.1.178[3954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.236298][ T164] ================================================================== [ 44.256294][ T164] BUG: KCSAN: data-race in alloc_pid / copy_process [ 44.262904][ T164] [ 44.265228][ T164] read-write to 0xffffffff8665d858 of 4 bytes by task 3965 on cpu 0: [ 44.273382][ T164] alloc_pid+0x542/0x6f0 [ 44.277645][ T164] copy_process+0xe72/0x1f90 [ 44.282253][ T164] kernel_clone+0x167/0x5e0 [ 44.286778][ T164] __se_sys_clone3+0x1b5/0x1f0 [ 44.291574][ T164] __x64_sys_clone3+0x31/0x40 [ 44.296267][ T164] x64_sys_call+0x287d/0x2d60 [ 44.300957][ T164] do_syscall_64+0xc9/0x1c0 [ 44.305480][ T164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.311395][ T164] [ 44.313847][ T164] read to 0xffffffff8665d858 of 4 bytes by task 164 on cpu 1: [ 44.321366][ T164] copy_process+0x1799/0x1f90 [ 44.326067][ T164] kernel_clone+0x167/0x5e0 [ 44.330584][ T164] user_mode_thread+0x7d/0xb0 [ 44.335272][ T164] call_usermodehelper_exec_work+0x7a/0x150 [ 44.341205][ T164] process_scheduled_works+0x483/0x9a0 [ 44.346858][ T164] worker_thread+0x51d/0x6f0 [ 44.351475][ T164] kthread+0x1d1/0x210 [ 44.355642][ T164] ret_from_fork+0x4b/0x60 [ 44.360070][ T164] ret_from_fork_asm+0x1a/0x30 [ 44.364846][ T164] [ 44.367171][ T164] value changed: 0x800000af -> 0x800000b0 [ 44.372978][ T164] [ 44.375396][ T164] Reported by Kernel Concurrency Sanitizer on: [ 44.381568][ T164] CPU: 1 UID: 0 PID: 164 Comm: kworker/u8:5 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 44.392787][ T164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.403581][ T164] Workqueue: events_unbound call_usermodehelper_exec_work [ 44.411080][ T164] ================================================================== [ 44.427771][ T3962] loop3: detected capacity change from 0 to 512 [ 44.433980][ T3957] loop4: detected capacity change from 0 to 512 [ 44.443898][ T3942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.454572][ T3962] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.478261][ T3942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.478921][ T3270] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.496968][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.510650][ T3962] EXT4-fs (loop3): 1 truncate cleaned up [ 44.512248][ T3957] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.519545][ T3962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.529051][ T3957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.588036][ T3271] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.