last executing test programs: 4.117905818s ago: executing program 0 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r4, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000001081e040031004000000001090224000140000000090400000203000000092105000905810300000000000000000000ad8b92adad372737298cf6e3ddda0e29480b4531fc551117e3ff1dcd8b5567462aaca85ea2287461d06e12f49cb27c7f1771e505b9ee9e638dfbdeec24c76100000000000000a7c2df699422f12679bd463c3fb7f1a772ef57ad086401380a7313a32d880c2911230e7bf45f7cae6391539c44e23e2d18cef5429977cb9fdfa1e1f4ea8c901c092d06ba9b0ca8c00e766a72bf496463da152858882f52f3377cc6ff8a4c1c901f783f7c206b28de89a53a5d85c4ef3b6b2d8b359cd3a6e1bf38084a566b56a5c32da0e0441ab0200537e8c64fb9655195b065e634d4d02d80c8efc24e210aee38cc7af470720321962c49a2b2cf008afc38deb01b6361b3ee657e092a6abea2c19e583fe40970038722a4f2e5b776ede9c92cd27b22ff1eb5ec6a87fc27fa3ccaa98fe23679d385b46fe761416c1164cd32524048ae70b1265be4aa4f"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) syz_usb_control_io$hid(r9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstat(0xffffffffffffffff, 0x0) 3.468436919s ago: executing program 0 (id=143): r0 = socket(0xa, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xfc65, 0x0, r1, 0x3, '\x00', 0x0, r0, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0xefff) 2.609858771s ago: executing program 0 (id=154): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) getsockopt$inet6_mreq(r1, 0x29, 0x3b, &(0x7f0000000100)={@private1, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0x2, 0xa, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x8, 0x7, 0x1, 0x2}}) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="00000000000000001c001a80180004"], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x140, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 2.575511925s ago: executing program 0 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty=0xe0000001, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SET_NAME(0xf, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x1}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "33e2a6da95f035f06f726f80bb909573d17769b1545b934cf9ae900d9caf6226574853c9d3d4cb25edc97aa0385d4dde8fef409514f08a64186844db5e67febd", 0x29}, 0x48, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r8, &(0x7f00000013c0)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="ec368a186dcec3bdc91e4e75465d83e5c2e4efcb5226bfec256ae058908b231cc6214a65888e23551ec8b564fb9cc5fd06153338e2fd95a61f88b6af706f1c32dbdbbdeb260d354a1fc8cacab92cd9799718eb95fc340899c9498a578c281a8d5c1bb4a984becd6acf21594dcbbe87b219253d38311b81329247dd8840bc2521c5539de532eeab34a1de5d35d199a6", 0x8f}, {&(0x7f0000000580)="c1e1d5f7ffbb93eca0ee23acd8246063a65eb44e558fffa4ad75ced5381ab53c80b4726709adaff2d481459e1177c05ef40c8dd8dd5a6eeaa9d775af3637e799eb4883f3a2dc04d83a15f49f1de7ff70f3340a75354d97151f828ff676358f1421ad7dfd97051d134b7f7584f1fb71e46a26ce7c19d292daa12d73892941152af95b9ed63a34039be289d70e1b19ae27cacae1a5813b46d2bbc2ee0ec4cb", 0x9e}, {&(0x7f0000001080)="eabb5a4772f71091a5d02473e816d906b8062fac49ede01e1bb3e38a689a489e038e67e9f54ded2b5a0382dad2d6bffb8f729409f40d49773433dc7f701cc20ff68cff14667d782ffbfe2522c001cd99f7b66022107afedc9c4e8e303301d45fd15f663b3e54d665532bb71a666c24e29d914ceba7e129a84747cc30f64f9e91a2db8bda0dee5d138fa1469b531d8e707f8c817ffeed395fae4781ed55e0cd7fd8f1c9e76b3272f6", 0xa8}, {&(0x7f0000001140)="c9b9cba8ce50c4eaab063706f57f4348167335aa6c45aaf72a57d1562e1294fac2187c14e4cfeab0df3de0b3038170e5f6617b2c740099a0f38283e63634796d37b94fb1d95c82f61e8dfed66fadafc4d895bae78517a87095c2d05bc34526077709a6c2efa6a82b4a85693947ac726973ba527337f25ab601f8618712dd4af272779f24600bd25224b3149b6272b787679db7c68a4eb532802e5feea107bf56f9459167289785af54332e33dc2b97c42229d635067cf54c07419930ad4c0c6ac00c0fbfc0", 0xc5}, {&(0x7f0000001240)="b05a061fa11f800431b17e58b9dfd299e6b5f06b81357062598c1103471660a8f5aa2f48abde4e29f8b5785ac6a19a0eb41245cbc29f6a6ca2b3a97eb3b2c69dfd884a8fa8c87a502d93588d89a448c4a53ff3d8f5192c1c6d77d6db092194ff8729fb7fccfde8cd147754fdc95737f45e8f30b4344920815cb7bf6f3902d877fb626d2cbdabe4afa41f523bf95c5025d2226539", 0x94}, {&(0x7f0000000640)="ccacd806ad1c8f8dddbd2cd7efdd533c9d3d071dc8706da440316798b5b9bc316464e59fbd9a066e738994d203b48567743487a19980ffe10c86284ef6253a81d3a016c481906bf3376dc701", 0x4c}, {&(0x7f0000001300)="1684215dcc3951e3f2cd224c44c0d8ac4f0aac3802dced0caba196f521b74c603097d35b54adc24fedc88afd473279a5a15ad707707ae82c73db8ef3fe67a0b412efd3764f21fad315750f73225e43aa0370eaf98212527d02bc1e2e102267102e9aa0a4880850121902db515fb0e3d37f94b69ab83b2a1af0346b86689c203de65c12bd16677de4ac6e0d75870e0f6d", 0x90}], 0x8, r9) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$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") syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 2.359806215s ago: executing program 3 (id=162): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) lseek(r0, 0x7, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001840)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0xa8, 0xfeffffff, 0xa8, 0xa8, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'gre0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {0x0, 0x7}, [@common=@set={{0x40}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'caif0\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) 2.259662355s ago: executing program 0 (id=163): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "bcce10decbb5b04e69b917c9945696bd0000351c79b2b93bb8360daacbe700358471f14b1c05f8c0c30690d75c2bdb10a37d3e178c55f32d6afa0864dd00", 0x35}, 0x48, 0xfffffffffffffffd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580)={[{@commit}, {@abort}, {@barrier}, {@norecovery}, {@norecovery}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nodelalloc}, {@nodiscard}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./bus\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@dev, @dev, 0x0}, &(0x7f0000000640)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0xffffffff, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb904"], 0xfdef) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x9, 0x80000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') keyctl$setperm(0x5, r0, 0x4030126) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) 1.823495526s ago: executing program 3 (id=166): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0xe4, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000640), 0x2000000000, 0x822b01) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r4) shmdt(r4) shmdt(r4) io_submit(0x0, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2778) 1.683962829s ago: executing program 3 (id=168): r0 = perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r8, &(0x7f0000001400)=[{{}, 0x17, 0x9, 0x5}, {{}, 0x4, 0x6, 0x3}], 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r9 = io_uring_setup(0x17c7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3bd}) r10 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r10, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r10, 0x4) recvmmsg(r10, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001380)=ANY=[@ANYRESOCT=r11, @ANYRES64=r0, @ANYRESDEC=r11, @ANYRESOCT=r4, @ANYRESOCT=r4, @ANYRES16=r2, @ANYRESDEC=r10, @ANYRES8=r9, @ANYRES16=r7], 0x0) ioprio_get$uid(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.68213817s ago: executing program 1 (id=169): r0 = io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x257}) io_uring_enter(r0, 0x2000000, 0x2, 0xf, 0x0, 0x100000) 1.652601522s ago: executing program 1 (id=170): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x7a, &(0x7f0000000800)={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0xf, 0x6, "5e9c72", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x8, 0x2, 0x1, 0x3, 0x6, 0x5}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x1, {{0x5, 0x2, 0x7, 0x0, 0x1, 0x2, 0x2, 0x3}, 0x2, {0xb, 0x7, 0x1, 0x12, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async, rerun: 64) r5 = inotify_init1(0x0) (async, rerun: 64) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) close_range(r5, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 1.526366965s ago: executing program 1 (id=171): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x2c, r2, 0x4196ccce67868bab, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) 1.391409287s ago: executing program 1 (id=173): unshare(0x2040400) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541d, 0x0) (fail_nth: 1) 1.139212531s ago: executing program 0 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000c2abf87ff834e1f82c8d268159a12296ca3b53a20f0b0430eb6c12e5254308ffb59d63000f63ba241a", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40085507, &(0x7f0000000080)=0x1000000) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000000000)=""/210, 0xd2}], 0x5}}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200143300fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000040), 0x0}, 0x20) unshare(0x2040400) unshare(0x30080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x4822, &(0x7f00000004c0)={0x0, 0x0, 0x400}) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) read(r7, &(0x7f0000000100)=""/27, 0x1b) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r9 = syz_open_pts(r8, 0x0) ioctl$TCSETSF(r9, 0x541d, 0x0) 1.106889054s ago: executing program 1 (id=175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f0000000100), 0x1, 0x5ea, &(0x7f0000000880)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c00020001000000060000000800010001"], 0x2c}}, 0x4000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000280)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x22}) r6 = openat(r5, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061124000000000009500000000000000f6955d54904f4e166028e88a4d5c38494844cdc1f2b4640a932e09c1c71ffaa7ee5fbfbf55c37e761c51853dda755423ae24ea58079be4e8d9289ab77a7d89afe5b7074b095092483ba667d4cd22a48fa7069ec31b5dc81ae406e5e7076b3a5328eac32f0f9c34832e07ae6fad61edf151ef9885fedfa4b517f8749ef7d24672e177ce55686c99e2cd03a11eff7c1c0595f69fff9c864205bdc0c476a1917b4277ec9e6c3d4cb584036920d8f4f712b71c261b8e0cb80c7c4fd5b8f1f7f674251305ec26c946400deaea58c6cd51f40d5603b2250cbbf93981083f41fb5e24be8a1c7491"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000001c0)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 990.772105ms ago: executing program 1 (id=178): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x5, 0xfffffff7, 0x6, @empty, @local, 0x40, 0x7, 0x4, 0x6}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ea0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[], 0x0) close_range(r3, r2, 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0x0}, 0x58) syz_open_dev$vcsu(&(0x7f0000000400), 0x8, 0x101000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381", 0xe}, {&(0x7f00000005c0)="c2c186", 0x3}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x82, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000640)) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd0000000100000018000380", @ANYRESOCT], 0x2c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r7], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') socket(0x18, 0x0, 0x0) 976.870737ms ago: executing program 2 (id=180): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 969.685637ms ago: executing program 4 (id=181): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000008000100", @ANYRES32], 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) sendto$packet(r0, &(0x7f0000000340)="10", 0x1, 0xc081, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) symlinkat(0x0, 0xffffffffffffff9c, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0xe100, 0x0) rmdir(0x0) 941.27455ms ago: executing program 2 (id=182): r0 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x87ff}, 0x1c) 940.86823ms ago: executing program 2 (id=183): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x40, 0x80, 0x8, 0x5, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x67, 0x0, 0x60, 0x4, 0x0, @empty, @multicast2}}}}) (fail_nth: 1) 553.781077ms ago: executing program 4 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40800) 552.735157ms ago: executing program 2 (id=185): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000080000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) unshare(0x40000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) r7 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r7, 0x10d, 0xa3, 0x0, &(0x7f0000000000)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4040006) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x6d, 0x9, 0x5, 0x8, 0x0, 0x7849, 0x1448, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000002c0), 0x9}, 0x104918, 0x1, 0x9, 0x8, 0x100000001, 0x7, 0xc9d3, 0x0, 0x5, 0x0, 0xbcdc}, 0x0, 0x10, r4, 0x1) 552.088957ms ago: executing program 4 (id=186): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/243, 0xf3}], 0x2, 0x4, 0x9) r1 = syz_open_dev$sg(&(0x7f00000001c0), 0x8, 0x147b40) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000200)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000240)={0x4, 0x0, 0xd1c0}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x204400, 0x0) r4 = fsmount(r3, 0x1, 0x4) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x76, 0xd1, @scatter={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000300)=""/88, 0x58}]}, &(0x7f00000003c0)="53dc804f4a8be3902f4ab7a43c383952184b496d627b8ee56675f6b977fbb1233a7afd2a5721df4c5432a60ac1b7971a8e6f14bf0cbbdeb8c1e4c39b4d09d347ce037103e44119d419af63adf4f2ffba9b2fa8ee10903797b002cce5533c3727582a4f301b8b3c81758d87ea9aa3a71cebb8864f0c05", &(0x7f0000000440)=""/178, 0x6, 0x3, 0x2, &(0x7f0000000500)}) recvmmsg$unix(r4, &(0x7f0000002b80)=[{{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/16, 0x10}, {&(0x7f0000000680)=""/77, 0x4d}, {&(0x7f0000000700)=""/222, 0xde}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f00000009c0)=""/248, 0xf8}], 0x6, &(0x7f0000000b40)=[@rights={{0x10}}, @cred={{0x1c}}], 0x30}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000c00)=""/252, 0xfc}, {&(0x7f0000000d00)=""/90, 0x5a}, {&(0x7f0000000d80)=""/230, 0xe6}, {&(0x7f0000000e80)=""/82, 0x52}, {&(0x7f0000000f00)=""/204, 0xcc}], 0x5}}, {{&(0x7f0000001080), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/162, 0xa2}, {&(0x7f00000011c0)=""/188, 0xbc}, {&(0x7f0000001280)=""/244, 0xf4}, {&(0x7f0000001380)=""/20, 0x14}], 0x4, &(0x7f0000001400)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/87, 0x57}, {&(0x7f0000001540)=""/141, 0x8d}, {&(0x7f0000001600)=""/42, 0x2a}, {&(0x7f0000001640)=""/98, 0x62}], 0x4, &(0x7f0000001700)}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f00000017c0)=""/39, 0x27}, {&(0x7f0000001800)=""/15, 0xf}], 0x2, &(0x7f0000001880)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000001940)=""/180, 0xb4}, {&(0x7f0000001a00)=""/188, 0xbc}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3, &(0x7f0000002b00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x6, 0x40000062, &(0x7f0000002d00)={0x77359400}) gettid() ioctl$SG_BLKTRACESTOP(r10, 0x1275, 0x0) r13 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002d40), 0x10102, 0x0) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, &(0x7f0000002d80)={0x1, 0x4, 0x0, 0x0, 0xa, [{0x0, 0xff, 0x6, '\x00', 0x1d00}, {0x0, 0x80, 0x9f1, '\x00', 0x2000}, {0xfff, 0x7ff, 0x8, '\x00', 0xe89}, {0x1, 0x10, 0x5, '\x00', 0x310e}, {0x800, 0x5, 0x7fff, '\x00', 0x210a}, {0x10200000000000, 0x6, 0x4, '\x00', 0x100}, {0x7, 0x80, 0x7ff, '\x00', 0x803}, {0x5, 0x9, 0xffffffffffffffff, '\x00', 0x1f00}, {0x2, 0x100, 0x3, '\x00', 0x8}, {0x2, 0xff, 0x9, '\x00', 0x8}]}) ioctl$AUTOFS_IOC_EXPIRE(r11, 0x810c9365, &(0x7f0000003000)={{0x9, 0x4c}, 0x100, './file0\x00'}) getpeername$l2tp6(r5, &(0x7f0000003140)={0xa, 0x0, 0x0, @local}, &(0x7f0000003180)=0x20) r14 = io_uring_setup(0x5889, &(0x7f00000031c0)={0x0, 0x8323, 0x2000, 0x1, 0x24d, 0x0, r4}) vmsplice(r14, &(0x7f0000003480)=[{&(0x7f0000003240)="89819fe86eef85056f43ba6e994f84728e0d2257c5e7d1273225c9b9ca30d6cdd1ef23681ddf0468ec5eeabc51eb757872a991627e4595dc58149d07ad6af00d829c4d5467a275431adb99e9fd4fad1191fef4d6dc5df78cfdc325b2a90c9568e01d04e7001cba16698413d47dce52f4785612a25fa9cf63d0ceb8055790400c851d685c5781fa2d4f7e04f90ad5d6e2babac2b2b2a06a98e69b40208b18e2bfe21c0d36479099af659be9189ae0813dacb559e29a8abbceac6c7b43de3e1d0257321d62d7a80281d0c3de3056607ce6c082", 0xd2}, {&(0x7f0000003340)="eb434b9f54ef9b4f2ac8f5a7278253de45d119f1dba94315ff5add5ce089a14ed1eed6ff30243bb75402bff2ad16b851aafdaee3346aa1ef002182b855a824e4ab250a3a85519a081c8442d275d83d1a773d5e", 0x53}, {&(0x7f00000033c0)="320c0bf82a4b23a662994bca78edcb2548d316c80c83cb46c878df89e6dbed7bbca9eaf75b111017e6f30613670d11a8b35bf914e4608590388889d3c753c22267749d30c8b341a925556eefb68116ab80f3a80d6e838aaa810fd940f213b09f2e714b9b9c31b32bfbd337b7cf77dadda051ea0ed3223b9a63bc14650d98b8771371b29dd35f7efdbe936671f290cca1d67e0c4fbe1ccca8a32e78c06fd8d2c6cf95a1943b90bb57aa", 0xa9}], 0x3, 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f00000034c0)={0x0, @in6={{0xa, 0x4e20, 0xcf1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}, &(0x7f0000003580)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000035c0)={r15}, &(0x7f0000003600)=0x8) getsockname$packet(r12, &(0x7f0000003640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003680)=0x14) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000036c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003700)={0x1b, 0x0, 0x0, 0x9, 0x0, r6, 0x51523f23, '\x00', r16, r17, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r18 = openat2$dir(0xffffffffffffff9c, &(0x7f0000003780)='./file0\x00', &(0x7f00000037c0)={0x200640, 0x4, 0x11}, 0x18) openat2(r18, &(0x7f0000003800)='./file0/file0\x00', &(0x7f0000003840)={0x840, 0x4, 0x38}, 0x18) sendmsg$kcm(r9, &(0x7f0000003bc0)={&(0x7f0000003880)=@x25, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003900)="9688102f31ca44d8c8425e4d2930512e2954c72f84610572797ff82a082c80df5f378e0c3133748dbdc2f2d5c2fb045cd621dcfb413c4849f8e37fcc1d91d52df7edac90ef9cce07ed8d6f64cd3ecb01c040279a8d24194221b976d585d5dd31fb834508fc62875e87223d18cbc0f7cc5cb8ef59965088f89174b6255e384312cfd1c4a63ab4a7133475a44a5ede6509508b9285836c61378fbd6b2e5164fa98b2b087e253c31fd404e35b25614e9a00947cf425f324debe50d0cebf99", 0xbd}, {&(0x7f00000039c0)="ca04fef1232494c6b23f8452bfb07de18cf1ee41ddbf4969fb73dfcc84f3eae6e29040cbd5eb3b5bb19080def5babc2a38bfd44451463b48508ed83f819bd7e49b97e52d1bd2ebce8543cd30d10ce3fb7e0661e3f50060e66d03d219a5d4f7edd0a39ab8955348805c1a1344", 0x6c}, {&(0x7f0000003a40)="24859e293716cb0c2c6b2491000a5c05a958b5323122963fbb006bf351b5506c8f91baa433f689470e0e09993dde54659ef72be758499f21b37ac99a6c0278f1c91fb3c4dd2d5e5755a93462e53ee2c5ffb77d50e98be0ee8f1b7d09a5acba425bbf2f9c25bded9f7591eb2d2ac5b5a1f74db6", 0x73}], 0x3, &(0x7f0000003b00)=[{0x50, 0x1, 0x0, "73a4355a4f6296c6ff40a7d5de02b76df4b29a6911a2e0bd29295189a56a608f1442a6196ac42090fde731579a3fe877229724f89efa2a58abc3"}, {0x38, 0x6, 0xc0, "61760f89cf3a77bccf4d58fc9ed958e1d60f43f1bb13603694875cca3054ffb9b6c19be4a2"}, {0x10, 0x10c, 0x4}], 0x98}, 0x4000) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000003c00)) removexattr(&(0x7f0000003c40)='./file0/file0\x00', &(0x7f0000003c80)=@known='com.apple.system.Security\x00') r19 = gettid() ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000003cc0)={'\x00', 0x3af, 0x81, 0xd5, 0x4, 0x7901, r19}) 515.454421ms ago: executing program 4 (id=187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) execve(&(0x7f0000000040)='./bus\x00', &(0x7f0000000340)={[&(0x7f0000000080)='^!\x00', &(0x7f0000000100)='+\x00', &(0x7f00000001c0)='\x00', &(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)='syzkaller\x00']}, &(0x7f00000003c0)={[&(0x7f0000000380)='-%(\x00']}) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@bh}, {@resuid}, {@auto_da_alloc}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x6}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) 376.428874ms ago: executing program 3 (id=188): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101a43, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 310.22229ms ago: executing program 3 (id=189): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfc, 0x1000}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus\x00') r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syslog(0x9, &(0x7f0000000380)=""/116, 0x74) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) connect$pppoe(r5, &(0x7f0000000380)={0x18, 0x0, {0x0, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r8 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="85", 0x1}, {&(0x7f00000017c0)="3660d7416f9831df3870f4479f95882b628168371a3854e1e7f8564fd7cef0af3f429601b905e0048e72049a71dc9f8664e7f55425b0fa7a7accce5dca67464fb36ef6e5542070dfe4fe207066133cdb138fadbda310f23d2db504dd25c6eb5514f52a2bcd7eac045b616fd06e7ee49b8c889d2819a5600425cafe6e252089c5844c003c38deefbda9f8a748086af400d743c8a988b9cdfee5810b519363d6e4b3f7d2319431233cd5e5ec95829045840311a6b3a71976f584c1b1637e4fda476c14aad37603b3e6efde7c05d8323ad254da9cbf085367e5b33a9c536076f227531b344fd4d76a8e3b86ae5e2cf5f49e4dccd10de72cc09dec1a3099d636df4ea68561d7b38559c1987891a96ed38c78007b962bb1c5642cdc0172c89d976ade29af84512113a747f6bccde3954e027ec995449ad3c753485dd8e12c92ad9b73ed3c8738c4df8f966c026ba61fc64c39b743acdec0bb1ed36bea6046b1af7fc5a901197676fec12a4eb2a0bd364346b30ac5965383aa539ad3285081650b2b4486c65bf7bb2ec5045f228c659ce7fad795ab0f393b530592fbac5dbc9d44bf3e058eaddafedcf65fe030cb24d14b9acc259e4beefe62c36969761426afc644fcecd98b23ce47406a68c724f8ae225eefeb4e054b230c4bd9a4b1374bef6e4cfcae665b61f732d407172f4e1ff915d90e090c34a01e71dba507e1f283e4eaa57345ab2793a7bd605c2b650ae6d83f373774087a032f60ce7b5a0e0badb41349e13e003d66db69374d0815ca9b9415ed3028a60bb2510b9a2df02116906f50744e2d0f2c95f33dff521618948005052f053bda142ab907191877ef5475ee154983998e851b76f29a5743603200db39dbe247123833afcae0a923a402778b26f286f6a0c64f5864afe10cd7c3c25d0492902c7c1a81a7b5a840d02d8057cde336ae458b906459ab33ea911b1cc3cfda20d3cdb34b51ebf0192314e40df1eabda0afc250ca186cab661fcad94683a49362d0858a02a4c92e4b653466364a1937e8e23beb8b3e2a12caf5d14bfa40b5e46e243f7710e31bc530ba892380e183cffa8c06db3dc9d142aeb18af47775142a6ea985eb5fceac1eb3e51edcc88936b387a44b1edbf007e247bd5ad713e3dfeee69dbbdbc046ba424eea88a5692a12873d404b5df5e089bb9ad6b39e80428664efc21bfe1c14c1b3daeb6d46b16bb7e554d68b9cb1c7b013c9b2910998c2497b8d49fe30ba36e1da1f7758b628d09745180492cc635a475712d666f08898c68ea5bb1b3b3b9a17abac0dbaee035570f97880ccb3b4de60374c15423cd4a01d191cedf2f269511f787f9ed4f262cd724fa0c9d4e729c250ac1b68d6b4a143343171ab7458a34ec3c04539481b5aab8ed0d8e896e181bdd28f33aa88c1ccd331130e7d8d4b24c6922fa5c5a12e089784752274b2ec510fc0112411ea5447522c1d9c202b51c93c2b95ab17279e1b263b58265b82100e2d15ec881cad43d577ab94a272f25169fffd53bcec6f922203512ceb9404163cb7798f4a661ad6c56240eb95474d80fd14526460a2b8a622642c2bd7346d4291c4d222100651772d8aabef1cc8de05a0e0287e8f23c19cb64dd6925ccb4a3c97959f1928278c2351bde6857641aa9e7eb465e28403f87c81f7e83adcd3ca48d02ed716fec3264f6e085a9ffeb35ae1de6ee67a50c30496b2c2b5669cb67c770ddf43bad0c2fe07f23d074d32e7dc0c1bd98d30563f0dd92c2d6a26b7674c3ba8fbb273a152100bddb8b021600465b16229737bcf03d7091899b667c154091eaf7e72c51936e1bef2d872a548f027fe3e3dffd93538f6f745320fcdcc5e70f56a36e792b476f16d21c0b99e29abe584b5d85b6052bc83e38deeae9377de5d7d8f9311c7498d3869d2d8e7c0502a0c15fa587caa49d3899bb848313a789c238a49ce560016eb972f1b368e9bd45d1fcd113ee285082ee21a01643e329367e7baf6a8c36f3ce9fad480963cbd3018a60a8251d7ee03b1cdf54d634424c6c19ea07e076f00b938a178be075bd8fdf8d1e75c92e2b2026b0ad7ba26eeaf7589500ca98e81af2de2cc9d59fc3d43b09ae636adefba6231287927d78a832052c4b33f6663309f07bc309571f2bb10e2d3a287d5c0a75f805c4014604db128a12db8198fc261bf901140aba935b2d355b346726fcff7f163ee28438c6428126f1dd851c08eea1b420ced983b7963817941b713432ef62dcbfc924b19b0909287c08c674188678f0bdb7d4fb6be01bd11052a824421c3b68debbc4001574e0a3403175d24ba69a0bb3428d1ede465cd5aa3edecc7756302183d8ab255578fb4f6576e2efa262b6aa2b571b891acf8e1a485b851b9f4fb7f5cac7b1dd8d2c22752342fe3c2fbe022551e8892578d4fda6b13419cb4d16cd0a271dec4dceb32330c6b3a63ab2eb5f2b854e3376265150a78548ff0edd10d10d3ee7f83ea308e9a0ffad77dcc4d08e38abe4bcbe4bd0ff961fd6332f4cc46b4a2ff38b18c5a2d98e3ac1b73b6add7a622a6abaf1dbbedb0dcfc0f9687753db28294a8f26d5f9c4e89d22a5452b38ac7b462f61a8193b25afa4b2af32a4dbf405a50e51ac5a5a01be8c57c600ff6a1987fdc086f03c9d2f196ec71ef90b5033692e2e496e86d25c3111a23da01b7e7ddec6ea9ae1973fc96fb5b01559a24949fd9b12c6d03fdb2322cca995823ae07187909abac720ff6b860dcdb230656877e272599fea63f406fbf020348e5cabc450d94154ef6c09212515e4a293b3ea62af6dfb940db89c8c7768e9e8b6a0bd282bc39a0fafa6a8707902c384ba18db4bd209b6ee49ca097a8725f0e8699b1414afacec3ff1927edbfb3b60559cea43c0c9458b4992f29e1d5bb009de13963ccffec4478f7b8e8322a90b4947805985fd9112d7e65d50b6a633a2d09b82509256a944f3102eeaba24ce96f09d8440d15bbf02e89cda405b4051fae8a90565bedc7fd8be5570d80b682ee8b4d5220b65621f4c0f068bdb5f2741e4f0600b1f2749348d38e8dcb9a407b77588d93a9f8a84bcc14b2351341866bb4d3acc2e4843fd7abc74967e7677e2b74e3dedd8619dcd3150b54c45d03a27d78ed431dac6de59359a57450bda8fd5175ea85486aa8814930c9d516a544cac71668bc6ee4a5df615e1eb0a6254156226b647b6500cd0eeabf46ecf651891f7d5efe5b3372cdf856739253009194813c2e2bb0c77b94319df675eb9bd2dc4f3ff3e299c755afc6912a1deb0b277e034de9fd9c52b3a5346f70cb0854e3eb1b3f95ca173fa7ba8b172ef465e0cbea15e3b7ca1df68a3319f85814d21c327d46b147c0edd5254df0a07a3bf96e8bb4ff150282e07e5d9c0f90c6363c72b13a18992f0afe03fff75c79c89f6f0e24aa65cf712de58e76efa4f628f1c5fbed68e8ca4da2addf4633c05dadc22f33c9c69c80b6dec6d710a3c59a2791e10e0d888267f1f043edd427b25cb01d7b588e2ff4386ae9dcd4d2b0a478753e3b5cbde36c0f6c98c486ff51856eb8d978ee8aa1dbc52217be57927945b9138a8cb4a4d77482ed05bd9e1408e687f46af25e0647427f593a226189fa4b1f7b0d91fa40d104413f3273959237d93e310cc4e15b64efa09d3e0cd506fbd9bc71e35dc695ef467adb8789075e8528f0a911c503bf6af2ab6cce15b9cd5b78abb39cd9018163938842c551b7a8cb7e13c61b13ec44203cf9674d1abc79625985f92ed528976d8aba16a06419e22a9cfcd53f2ef45ae465a84ec382049c5fd16ea6460545198e0da0fc7ae60b979b5938465af3b4a78fb4d13a567af2ed5cefb08b3790d4387dcbbc2e416f1d32fe6bc3260de9ee8fc30b71f23e4364a42a49a61ca186380d80a4138770ea8ec64743ec4b03cc07f6fe5ee368f92b6e7fa79c52826a0f8b30100c8f98cfdaa3dcd250f0805df1741c2303e866cbe343b8f1dcfb92492f4f62a8c5ba6c9d58cecf6f8da4c5f05d4ea23d23792bc47add3e1481090807236925262c050959acf17be55d37db218a8308eb11b2df57ed89d56c6fe8369508178cdee851aac7018886c5b2ec3e069d6a96039fc1b3f38dcc4bd9697589b2b7e6c8936030db01146f6b3ff384a3e43afca79bbb73b8b3f218bf169a0cc8de9312df7524fb73660329be2776ff630b27d0302f72c56a1a71703eb194b24c18762632ed41fc91272ca03fdefc69ec85a61c883793cd3f0ebfccba428e32fa627f9a29a85d3a7bf142425b01a311468cafaae3735015406dfe617d6a3e6cdd11ffb96fdfc8ac8516d971a23f054914b29dd951cd91c36d5fa6eb47a16d7782626cfffc9e8af4d8aab9b76b6a4d8c180ea1bd7f56e12fa448712b7e74e702e2004c1a310e4c8f12ef4b792ec48239e380f5ad0b00ec4e1dc8b13f6ac09e70c167d62f5b7c6effb79cf50192bbf4645329f40f5ece5d418ccc298b82d1e52ef9cf01dd3c9a44def32689200325179b814d94134ab734fe6ee8d71b6b44fc656801abcfebed1696fb41ba519de807431e8de1527cd22190c9891fd08537d32a9c3c0ca933c3b7b48bbbd1193cbdc55acd6004ba466fe6a949abe3a5029863f597c1ad3e8913f2aa6da428a2f7563e63712856da7f8e50abfefdf5dea12d7049584bd2c839f1134c90267895fdd6a384c6d1c6a64824b003030008c6cd91ef9081a486d6561c89bf04dc7cd8e9b26593856b51fbc3070f7d321c0e5de1b5116a2d9e46ae3e2369699f8fd73772c2603306ae0743188ff2b4893d5dca21ca1605a4f30c26be1790851ef76b8d11bbb01fceb3dbf2525e64d4ca9ae0aef26eb687ad827956b72389cadfe59bf9fa0f76aa1e561da41a5f1470a36d04c734842f20a2a5b7ba3976bd3e581bd95200c87cd787f384b3bbfd9ff5eee8cb8fbd0dd03dd927a46e306424cb58cb11a6953824113039a7a2acd3856aa818881cf2a6324e0d8446cd4ea7a0c2ab5e1b4ee5f61d07d9d2bd54d94486aa5d60bce8b991630742043a3650a38ac4110127b405182cd355801c02f8abb67e660197b7479188f09c3df7f9948a20422a2fa147a4cafbdb1527c10f0deaeac8cec3a9371b78e45ff604067aa420428b6e745e695f85c657f6dd482a228e38aad69df054a2b02f3e4405677722e13b77ca62af000926142bb742cc5ef34fdafde4c4e2b22e7f3233813ab3d891dd523c7e84524b1840fbcf954e40f8ad99522e1350101a6de21258aa6b714eb267ef275feee7328bb7be13a19853c2bb25c5da06095a43129f393e3f5d22df2f29fc5791e3ea5d4ab1712467ce36033d8ea6b098815694787b671de03217e33df1b2799131398b420a41b49ca197918582a50faa82798693e25c850885a1a942efdb81eb17b159d0c0d582942357b7097233544d31d2adecd842c91062294fc6af60413a371bd4750cec5650a1f83e687b336aee0ed5a3e008bf939dc3654a22ff94576cf666a18d5adb55874cdf8509f5cb408864530096cfce1fa3c9a6811b35dbc9d14f33ee2b4535f50f0bacb09bd3e43f78d3297d91f9b795d03e18227b7c0fdeda619dcc649413b79ed33676e0a15b85598ce233002aaa296edcfd7e1c1602f2bdea8883dcce151807b2ae8adea51c7964bdb809fda2bc6206adbe11da4baae3d272966cfec3bf08f11a50753e93fec7f27192dccc01391ea6e025ee27c7598695337b51a3ee258674fed63243526155e795f86e10712ae459545bd10842c0fe2a84d4794f0fb9e3788c385ca6e2e4ca69b6a66f66a1feafa93992881c2d3d8b1f5f", 0x1000}], 0x2, 0x7800, 0x0, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r9, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r10, 0x8, 0x70bd2d, 0x6bda, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xfffffffffffffefd}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="c5c3442e25f30600aa773888c21c000000000002"], 0x0) 107.403479ms ago: executing program 4 (id=190): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x2c, 0x3, 0x7286) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000a40)={0x0, "5f40fb0057dae8a1923d473767f026fc"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001a40)={0x0, 0x3, 0x1000}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001e40)={0x0, "9f791d7b3d1745c339be6a50744e16f7"}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002e40)={0x14, 0x0, {0x4, @struct={0x8}, r3, 0x8, 0x7, 0x8, 0x0, 0x2, 0x98, @usage=0x4, 0xb, 0x8, [0x1, 0xfffffffffffffff7, 0x2, 0x7, 0x100000001, 0x5]}, {0x6fbe, @struct={0x3, 0x9ce}, r4, 0x67f, 0x0, 0x1, 0x10001, 0x0, 0x20, @usage=0x8, 0x2, 0x9, [0x8, 0x8, 0x4, 0x8, 0x5, 0x401]}, {0x5, @struct={0x4c7, 0x80}, r5, 0x60e, 0xeeda, 0xc, 0x73, 0x51, 0x452, @struct={0x1, 0x6}, 0x9, 0x6, [0x4, 0x7, 0x4, 0x0, 0x1000, 0x8]}, {0x4, 0xcbcd, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)={{}, {}, [{}]}, 0x2c, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r8 = socket(0x1e, 0x805, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) pwritev(r7, &(0x7f0000000980)=[{&(0x7f00000002c0)="d28c223f16f2ac5c523c82b1ca958904d7328bf3b5aa5a94ed0ef52a04dafe551c1c6287f35df6cd39b9b8df12e9ed487f2f08e7684426b430b2dede6d4d04447d62799dd2517ede93fded6d8076d4a4697b4082fc45a8df942c6e9e1f094b273eab03fcbc2992b55c4ee118a0af2f59bd53aaf729af8a3d1d5ec20a0f4ce19ac6b2d331b4949ae0f9206545a46e65a4b3e4bac8aa716d3c575e", 0x9a}, {&(0x7f0000000380)="d671881313081576be4d270f450f8e38d4849f2ffdc09e154c673a635f0771df79a9a021fc8e5339f253d835d6de05407117407bb883a9ac1a4ebe502b8aecff87c333c00f74faa6305a77f5e8e3c2aae91221e289a3c4598d67acc17b26a72817c1b39b7811168f9f39749b4a2ac2315047db50bd1ffc466edd9094e772ed9a11b65cdc1d0ce5af2adc187303434f6263e146521e275f2a71f7a47d2ec5331141a9b7a6369a45663e19e2ef04724d368eb7686518890aeef24d9eac7440882c0f", 0xc1}, {&(0x7f0000000480)="b122d3be0cb68645d7990d71d1f4993b95760bfa5d99414f3469050a7117b322ebed3a539deea5d7389e70c0b1648aa0168e60113d22f6e6f33999fd5e416ef3c63e023ca4501cd2c4d458b8342f00d6cce8cc4309b84aeb9de696c20bc4d3477af50ffb3f7bf4623920997ab9b2b0a4ca8739467ccbdacea9d8ef", 0x7b}, {&(0x7f0000000500)="9fda04cccfa9b0bdb281ff91d57c3f50c2871dcb6a45b462fe6044910e35c1b95cafd1f017a3b0876a4fc758bb599abf5e6a367277871b55a8248ffc2eb302cca0c3b58f2b039ab40408a779ce3e9d0b4eef9bc51a59ef3f95e01143909ccd34229593ec1d37584f498ea83b99aa81b009a93a66e49f58080cbc2ac2662bb5298af58757a0fd9b4fa0da2e260a1db613b53c07a5d77e19a0a3943b029ee76f2710b59e1d6a68f12ad3fa07147ceef8b996e22ad3557e7a511f57b5160cbdc5f5e2ec1ab460b28f1bb6f3d460ba10d103abe933493b48e484e4494063f36203", 0xdf}, {&(0x7f0000000600)="d9c9a4f6d6be1599ccb68746f2658127f2721fbe867c9853244330e65c54786278fb3bcee15dc5fa34ee7d5d58fa938395cc764017ed1411325752aceec864d68f33422992db714370d2c9e3ba61e859706f05630aeaeaca57383834023ae15af98aac69daf38a7f02953ca0cb434858465e3c455259052f9394795501d1cb5d63966c4bb367357ec3d4ee79afef16ac385746ab9e0510c4b45063b06c344c81ba51f583d8cda456e7ecf3b7", 0xac}, {&(0x7f00000006c0)="4714849e0fda2be3874d1bc01cd412efd248ec54025a3114a6d78a6402c8b6792eddfe47dc6095a801c03b25be98b05fcc7c703a94985c4023ca034c9b752d5bfa7625a252002dc82b335d8dc9eedb7f5c0b060747fe6bc9bce34ed4c5569d970322e5c4028f170d4a02d1c0f85da5876d142dc5bcad2b54d1", 0x79}, {&(0x7f0000000740)="e14be6f5", 0x4}, {&(0x7f0000000780)="0d79f1d743b834ceecdc9fc7ed5ac297091b9033bfd9e68b1087dbee9e31be5c774be2dcc60e2a0695d5a88da8624e7f6b45deff4c23eaf1b3f2e6b2dfabe233d02934b5c23358f18892806a1d4d241608ed0305da04c06810b8a6c458e929cedb20adb2c87a0fd20aaf330b9ee79c50faf6320855d81d70a9fd70ca9f82f431d811d981f1345316a0f68313532ed73f8838c3de348b001b5a5e2822018b9863464441f01126ea68273236eb4b0d1bfb369f2baa24513d59e5a76ea15999326010929ca4186ae6302e02c4ff23e35217223da2a008f7513e7b", 0xd9}, {&(0x7f0000000880)="188601e38520e8a2ff05be813544ec675336208d4eb52d6312145f7fc0b9b1f387b2406aac400ecc8309e7fe52c9d62dd30f43508b9c95a7ca1819eedebddf4ab021a3fde0ee9f747d003cdaee14e2499a78fb63524e09f87593c5b14c873a29b49bd46e3ef2c2775271671ad70f465f1557a71e01b286f9aff622d54fe18c13eeb21a9b561fda18160d5c1314ff810a9ae81d6bf76efb1ff6384dd9b6c4111b650e57", 0xa3}, {&(0x7f0000000940)="e11dd2ac11", 0x5}], 0xa, 0x24fd, 0xa9) connect$tipc(r8, &(0x7f0000000000)=@id, 0x10) close(r8) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000180)='\x03') 52.845805ms ago: executing program 2 (id=191): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f80d0008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB="99f3ffff0000000000000000298a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x58, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xcc, r7, 0x300, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3cc7}, {0x6, 0x11, 0xfe01}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x12}, 0x40) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e24, @private=0xa010102}, {0x2, 0x400, @rand_addr=0x64010102}, {0x2, 0x4e21, @empty}, 0x1c6, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x1fffffffff}) 20.379578ms ago: executing program 3 (id=192): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 19.541698ms ago: executing program 2 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000055cb86340000ac0176897c06f4e666d2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000880)=ANY=[], 0x2, 0x5c3, &(0x7f00000009c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000000)=""/41, 0x29) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x4, 0xe6, 0x8, 0xfff, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x40, 0x7800, 0x2, 0x4}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000400000008000000e73d000004000000", @ANYRES32=r3, @ANYBLOB="0400001000"/20, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="00000000000000000200"/21], 0x50) mknodat$null(r3, &(0x7f0000000200)='./file0\x00', 0x800, 0x103) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@dioread_lock}, {}]}, 0xfe, 0x44f, &(0x7f0000000d80)="$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") r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400000000ffffffffffffffe6", @ANYRES32=r11, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r11], 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 0s ago: executing program 4 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") (async) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff7, 0x4002011, r2, 0x0) (async) fallocate(r0, 0x3, 0x4, 0x10000) prlimit64(0x0, 0xf, &(0x7f0000000280)={0xfffffffffffffffd, 0xffffffffffffffff}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) sendto$inet6(r3, &(0x7f0000001480)="7800000018002507b9199b02ffff48000203be0402d6d8935a06022509b15c6869a92393eb253016a4160d0a0000000d0085a268d0bf46d32345653600648d040012000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160015000a00000f872e6972d8a8729b2e", 0x78, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 20.482671][ T29] audit: type=1400 audit(1730581814.321:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 27.578927][ T29] audit: type=1400 audit(1730581821.411:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.580167][ T3304] cgroup: Unknown subsys name 'net' [ 27.601792][ T29] audit: type=1400 audit(1730581821.411:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.629201][ T29] audit: type=1400 audit(1730581821.441:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.761571][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.767766][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.875642][ T29] audit: type=1400 audit(1730581821.711:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.900991][ T29] audit: type=1400 audit(1730581821.711:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.909534][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.921475][ T29] audit: type=1400 audit(1730581821.711:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.921499][ T29] audit: type=1400 audit(1730581821.711:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.970947][ T29] audit: type=1400 audit(1730581821.711:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.983065][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.995755][ T29] audit: type=1400 audit(1730581821.711:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.027835][ T29] audit: type=1400 audit(1730581821.761:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.758722][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.814147][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 29.876204][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.894146][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.901326][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.908462][ T3315] bridge_slave_0: entered allmulticast mode [ 29.914889][ T3315] bridge_slave_0: entered promiscuous mode [ 29.933129][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.940222][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.947408][ T3315] bridge_slave_1: entered allmulticast mode [ 29.953950][ T3315] bridge_slave_1: entered promiscuous mode [ 29.969608][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.983245][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 30.003808][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.033739][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.073681][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.080785][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.087893][ T3324] bridge_slave_0: entered allmulticast mode [ 30.094290][ T3324] bridge_slave_0: entered promiscuous mode [ 30.100973][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.108085][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.115316][ T3324] bridge_slave_1: entered allmulticast mode [ 30.121853][ T3324] bridge_slave_1: entered promiscuous mode [ 30.144530][ T3315] team0: Port device team_slave_0 added [ 30.155456][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.162613][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.169848][ T3320] bridge_slave_0: entered allmulticast mode [ 30.176259][ T3320] bridge_slave_0: entered promiscuous mode [ 30.184869][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.192145][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.199269][ T3320] bridge_slave_1: entered allmulticast mode [ 30.205874][ T3320] bridge_slave_1: entered promiscuous mode [ 30.215096][ T3315] team0: Port device team_slave_1 added [ 30.251833][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.278003][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.285240][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.292504][ T3318] bridge_slave_0: entered allmulticast mode [ 30.298967][ T3318] bridge_slave_0: entered promiscuous mode [ 30.305652][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.312665][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.338672][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.350751][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.365379][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.374657][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.381829][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.389031][ T3318] bridge_slave_1: entered allmulticast mode [ 30.395551][ T3318] bridge_slave_1: entered promiscuous mode [ 30.402154][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.409102][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.435029][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.455411][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.462523][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.469631][ T3314] bridge_slave_0: entered allmulticast mode [ 30.476171][ T3314] bridge_slave_0: entered promiscuous mode [ 30.483510][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.509260][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.516377][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.523724][ T3314] bridge_slave_1: entered allmulticast mode [ 30.530206][ T3314] bridge_slave_1: entered promiscuous mode [ 30.547420][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.557127][ T3324] team0: Port device team_slave_0 added [ 30.573093][ T3320] team0: Port device team_slave_0 added [ 30.579993][ T3320] team0: Port device team_slave_1 added [ 30.586778][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.596541][ T3324] team0: Port device team_slave_1 added [ 30.608582][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.645799][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.656950][ T3315] hsr_slave_0: entered promiscuous mode [ 30.663131][ T3315] hsr_slave_1: entered promiscuous mode [ 30.674891][ T3318] team0: Port device team_slave_0 added [ 30.680863][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.687831][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.713759][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.734524][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.741588][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.775361][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.786666][ T3318] team0: Port device team_slave_1 added [ 30.802498][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.809458][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.835968][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.847570][ T3314] team0: Port device team_slave_0 added [ 30.858996][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.865996][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.891996][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.912845][ T3314] team0: Port device team_slave_1 added [ 30.931504][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.938553][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.964540][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.976244][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.983257][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.009199][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.025791][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.032853][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.058783][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.084196][ T3324] hsr_slave_0: entered promiscuous mode [ 31.090150][ T3324] hsr_slave_1: entered promiscuous mode [ 31.096362][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.103958][ T3324] Cannot create hsr debugfs directory [ 31.112899][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.119869][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.146106][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.180751][ T3320] hsr_slave_0: entered promiscuous mode [ 31.186880][ T3320] hsr_slave_1: entered promiscuous mode [ 31.192740][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.200329][ T3320] Cannot create hsr debugfs directory [ 31.230313][ T3318] hsr_slave_0: entered promiscuous mode [ 31.237626][ T3318] hsr_slave_1: entered promiscuous mode [ 31.243580][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.251197][ T3318] Cannot create hsr debugfs directory [ 31.258708][ T3314] hsr_slave_0: entered promiscuous mode [ 31.264745][ T3314] hsr_slave_1: entered promiscuous mode [ 31.270876][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.278431][ T3314] Cannot create hsr debugfs directory [ 31.443994][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.461742][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.478872][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.489989][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.507326][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.516455][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.525219][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.535489][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.563361][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.582204][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.602040][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.616466][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.626257][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.634878][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.643725][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.652523][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.693646][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.703365][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.712318][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.721356][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.732401][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.756511][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.765758][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.781321][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.788493][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.809043][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.816200][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.825581][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.845820][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.852951][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.878577][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.885692][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.908885][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.928196][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.946632][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.953781][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.977748][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.984849][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.998173][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.014405][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.047317][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.059948][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.067097][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.086421][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.093538][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.115510][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.134375][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.141468][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.155035][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.167270][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.194036][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.201169][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.224740][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.235247][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.257385][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.336725][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.370280][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.428225][ T3315] veth0_vlan: entered promiscuous mode [ 32.460219][ T3315] veth1_vlan: entered promiscuous mode [ 32.508448][ T3314] veth0_vlan: entered promiscuous mode [ 32.529611][ T3314] veth1_vlan: entered promiscuous mode [ 32.542514][ T3315] veth0_macvtap: entered promiscuous mode [ 32.548831][ T3320] veth0_vlan: entered promiscuous mode [ 32.559166][ T3324] veth0_vlan: entered promiscuous mode [ 32.568398][ T3315] veth1_macvtap: entered promiscuous mode [ 32.577562][ T3320] veth1_vlan: entered promiscuous mode [ 32.589712][ T3324] veth1_vlan: entered promiscuous mode [ 32.597994][ T3318] veth0_vlan: entered promiscuous mode [ 32.607701][ T3318] veth1_vlan: entered promiscuous mode [ 32.619470][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.631799][ T3314] veth0_macvtap: entered promiscuous mode [ 32.648705][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.656387][ T3314] veth1_macvtap: entered promiscuous mode [ 32.668581][ T3320] veth0_macvtap: entered promiscuous mode [ 32.678718][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.687665][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.696471][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.705214][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.716770][ T3324] veth0_macvtap: entered promiscuous mode [ 32.723898][ T3320] veth1_macvtap: entered promiscuous mode [ 32.737548][ T3318] veth0_macvtap: entered promiscuous mode [ 32.746917][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.757478][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.768414][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.777796][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.788311][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.798875][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.806864][ T3324] veth1_macvtap: entered promiscuous mode [ 32.819022][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.829633][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.839514][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.850018][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.861210][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.870783][ T3318] veth1_macvtap: entered promiscuous mode [ 32.878929][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.889482][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.899398][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.909921][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.920937][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.932311][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.941169][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.949896][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.958624][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.969939][ T3320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.978793][ T3320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.987622][ T3320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.996364][ T3320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.017303][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.027930][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.032279][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 33.032299][ T29] audit: type=1400 audit(1730581826.851:110): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.ONe1SZ/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.037795][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.043875][ T29] audit: type=1400 audit(1730581826.851:111): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.068063][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.078507][ T29] audit: type=1400 audit(1730581826.851:112): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.ONe1SZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.100530][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.110352][ T29] audit: type=1400 audit(1730581826.851:113): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.135577][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.145980][ T29] audit: type=1400 audit(1730581826.851:114): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.ONe1SZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.175201][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.177616][ T29] audit: type=1400 audit(1730581826.851:115): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.ONe1SZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.207220][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.211582][ T29] audit: type=1400 audit(1730581826.851:116): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.239089][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.253971][ T29] audit: type=1400 audit(1730581827.091:117): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.269134][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.269153][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.322685][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.333127][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.343968][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.353424][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.353728][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.363884][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.363899][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.363917][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.363929][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.363978][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.429104][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.439571][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.451592][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.460125][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.470658][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.480467][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.490938][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.500821][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.511264][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.521146][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.531625][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.542325][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.557865][ T3318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.566739][ T3318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.575940][ T3318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.585395][ T3318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.586071][ T29] audit: type=1400 audit(1730581827.391:118): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.618559][ T29] audit: type=1400 audit(1730581827.391:119): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.650598][ T3324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.659356][ T3324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.668274][ T3324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.677062][ T3324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.789199][ T3466] loop3: detected capacity change from 0 to 764 [ 33.842604][ T3466] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 33.892079][ T3466] loop3: detected capacity change from 0 to 128 [ 33.902365][ T3473] IPv6: Can't replace route, no match found [ 33.935716][ T3466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 33.950144][ T3475] loop0: detected capacity change from 0 to 764 [ 33.975727][ T3475] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 33.994089][ T3480] loop4: detected capacity change from 0 to 512 [ 34.019697][ T3475] loop0: detected capacity change from 0 to 128 [ 34.023416][ T3483] loop1: detected capacity change from 0 to 512 [ 34.035491][ T3465] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 34.045762][ T3480] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.056492][ T3475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 34.065395][ T3483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.078579][ T3483] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.097763][ T3483] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.118667][ T3483] EXT4-fs (loop1): 1 truncate cleaned up [ 34.125826][ T3483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.126497][ T3487] loop2: detected capacity change from 0 to 764 [ 34.156849][ T3480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.170105][ T3487] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 34.174031][ T3480] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.8: corrupted inode contents [ 34.181387][ T3487] loop2: detected capacity change from 0 to 128 [ 34.201633][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 34.210884][ T3480] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz.4.8: mark_inode_dirty error [ 34.223830][ T3480] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.8: corrupted inode contents [ 34.259930][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.275799][ T3480] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 34.289586][ T3480] syz.4.8 (3480) used greatest stack depth: 10368 bytes left [ 34.300584][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.328932][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 34.337779][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 34.346691][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12'. [ 34.407318][ T3505] xt_TPROXY: Can be used only with -p tcp or -p udp [ 34.636421][ T3507] loop3: detected capacity change from 0 to 764 [ 34.643944][ T3507] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 34.657449][ T3507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 34.746870][ T3510] loop0: detected capacity change from 0 to 512 [ 34.753615][ T3510] EXT4-fs: Ignoring removed bh option [ 34.759459][ T3510] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 34.768159][ T3510] EXT4-fs (loop0): invalid journal inode [ 34.774017][ T3510] EXT4-fs (loop0): can't get journal size [ 34.781066][ T3510] EXT4-fs (loop0): 1 truncate cleaned up [ 34.787253][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.853803][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.910961][ T3516] loop0: detected capacity change from 0 to 1024 [ 34.918161][ T3516] EXT4-fs: Ignoring removed orlov option [ 34.924019][ T3516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.941988][ T3516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.974833][ T3516] capability: warning: `syz.0.18' uses deprecated v2 capabilities in a way that may be insecure [ 34.990069][ T3520] loop2: detected capacity change from 0 to 764 [ 35.005876][ T3520] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 35.016621][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.018409][ T3520] loop2: detected capacity change from 0 to 128 [ 35.034848][ T3520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 35.159431][ T3525] nfs: Unknown parameter '' [ 35.168275][ T3522] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 35.234044][ T3530] loop1: detected capacity change from 0 to 764 [ 35.245626][ T3530] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 35.270301][ T3530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 35.316616][ T3534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 35.328313][ T3534] netlink: 'syz.4.25': attribute type 1 has an invalid length. [ 35.336061][ T3534] netlink: 'syz.4.25': attribute type 2 has an invalid length. [ 35.344476][ T3538] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 35.352710][ T3538] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 35.361472][ T3538] ======================================================= [ 35.361472][ T3538] WARNING: The mand mount option has been deprecated and [ 35.361472][ T3538] and is ignored by this kernel. Remove the mand [ 35.361472][ T3538] option from the mount to silence this warning. [ 35.361472][ T3538] ======================================================= [ 35.448162][ T3544] loop4: detected capacity change from 0 to 764 [ 35.455000][ T3544] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 35.471541][ T3546] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 35.471552][ T3544] loop4: detected capacity change from 0 to 128 [ 35.486216][ T3546] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 35.497161][ T3548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1296 sclass=netlink_route_socket pid=3548 comm=syz.3.31 [ 35.623962][ C1] hrtimer: interrupt took 37081 ns [ 35.647704][ T3559] sd 0:0:1:0: device reset [ 35.703295][ T3557] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 35.731088][ T3561] bridge_slave_0: left allmulticast mode [ 35.736788][ T3561] bridge_slave_0: left promiscuous mode [ 35.742607][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.752881][ T3561] bridge_slave_1: left allmulticast mode [ 35.758551][ T3561] bridge_slave_1: left promiscuous mode [ 35.764584][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.777452][ T3561] bond0: (slave bond_slave_0): Releasing backup interface [ 35.787019][ T3565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.799574][ T3561] bond0: (slave bond_slave_1): Releasing backup interface [ 35.813695][ T3561] team0: Port device team_slave_0 removed [ 35.824933][ T3561] team0: Port device team_slave_1 removed [ 35.832578][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.840043][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.849961][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.857438][ T3561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.936217][ T3572] lo speed is unknown, defaulting to 1000 [ 35.942445][ T3572] lo speed is unknown, defaulting to 1000 [ 35.948524][ T3572] lo speed is unknown, defaulting to 1000 [ 35.956581][ T3572] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.965378][ T3572] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 35.983329][ T3572] lo speed is unknown, defaulting to 1000 [ 35.989907][ T3572] lo speed is unknown, defaulting to 1000 [ 35.999057][ T3577] qrtr: Invalid version 9 [ 35.999756][ T3572] lo speed is unknown, defaulting to 1000 [ 36.009965][ T3572] lo speed is unknown, defaulting to 1000 [ 36.016142][ T3572] lo speed is unknown, defaulting to 1000 [ 36.044448][ T3587] FAULT_INJECTION: forcing a failure. [ 36.044448][ T3587] name failslab, interval 1, probability 0, space 0, times 1 [ 36.057278][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: syz.0.45 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 36.067898][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.078049][ T3587] Call Trace: [ 36.081395][ T3587] [ 36.084329][ T3587] dump_stack_lvl+0xf2/0x150 [ 36.088942][ T3587] dump_stack+0x15/0x20 [ 36.093125][ T3587] should_fail_ex+0x223/0x230 [ 36.097860][ T3587] ? getname_flags+0x81/0x3b0 [ 36.102598][ T3587] should_failslab+0x8f/0xb0 [ 36.107207][ T3587] kmem_cache_alloc_noprof+0x4c/0x290 [ 36.112602][ T3587] getname_flags+0x81/0x3b0 [ 36.117118][ T3587] do_readlinkat+0x71/0x210 [ 36.121732][ T3587] __x64_sys_readlinkat+0x53/0x60 [ 36.126780][ T3587] x64_sys_call+0x2a35/0x2d60 [ 36.131500][ T3587] do_syscall_64+0xc9/0x1c0 [ 36.136137][ T3587] ? clear_bhb_loop+0x55/0xb0 [ 36.140826][ T3587] ? clear_bhb_loop+0x55/0xb0 [ 36.145544][ T3587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.151536][ T3587] RIP: 0033:0x7fbdc411e719 [ 36.155981][ T3587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.175722][ T3587] RSP: 002b:00007fbdc2d91038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 36.184197][ T3587] RAX: ffffffffffffffda RBX: 00007fbdc42d5f80 RCX: 00007fbdc411e719 [ 36.192185][ T3587] RDX: 00000000200002c0 RSI: 00000000200001c0 RDI: 0000000000000004 [ 36.200194][ T3587] RBP: 00007fbdc2d91090 R08: 0000000000000000 R09: 0000000000000000 [ 36.208175][ T3587] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001 [ 36.216154][ T3587] R13: 0000000000000000 R14: 00007fbdc42d5f80 R15: 00007ffdd6bd8668 [ 36.224201][ T3587] [ 36.238238][ T3588] loop3: detected capacity change from 0 to 164 [ 36.251401][ T3588] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 36.468774][ T3612] FAULT_INJECTION: forcing a failure. [ 36.468774][ T3612] name failslab, interval 1, probability 0, space 0, times 0 [ 36.481610][ T3612] CPU: 0 UID: 0 PID: 3612 Comm: syz.4.55 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 36.492166][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.502252][ T3612] Call Trace: [ 36.505566][ T3612] [ 36.508536][ T3612] dump_stack_lvl+0xf2/0x150 [ 36.513162][ T3612] dump_stack+0x15/0x20 [ 36.517418][ T3612] should_fail_ex+0x223/0x230 [ 36.522155][ T3612] ? getname_flags+0x81/0x3b0 [ 36.526855][ T3612] should_failslab+0x8f/0xb0 [ 36.531565][ T3612] kmem_cache_alloc_noprof+0x4c/0x290 [ 36.536966][ T3612] ? __fget_files+0x1d4/0x210 [ 36.541671][ T3612] getname_flags+0x81/0x3b0 [ 36.546251][ T3612] user_path_at+0x26/0x110 [ 36.550695][ T3612] __se_sys_chroot+0x4c/0x180 [ 36.555392][ T3612] __x64_sys_chroot+0x1f/0x30 [ 36.560086][ T3612] x64_sys_call+0x1754/0x2d60 [ 36.564785][ T3612] do_syscall_64+0xc9/0x1c0 [ 36.569319][ T3612] ? clear_bhb_loop+0x55/0xb0 [ 36.574021][ T3612] ? clear_bhb_loop+0x55/0xb0 [ 36.578710][ T3612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.584677][ T3612] RIP: 0033:0x7fd7171ee719 [ 36.589104][ T3612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.608779][ T3612] RSP: 002b:00007fd715e67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 36.617206][ T3612] RAX: ffffffffffffffda RBX: 00007fd7173a5f80 RCX: 00007fd7171ee719 [ 36.625363][ T3612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 36.633341][ T3612] RBP: 00007fd715e67090 R08: 0000000000000000 R09: 0000000000000000 [ 36.641321][ T3612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.649316][ T3612] R13: 0000000000000000 R14: 00007fd7173a5f80 R15: 00007ffee96c8438 [ 36.657303][ T3612] [ 36.663173][ T3613] netlink: 'syz.1.54': attribute type 1 has an invalid length. [ 36.791426][ T3600] Zero length message leads to an empty skb [ 36.961023][ T3645] FAULT_INJECTION: forcing a failure. [ 36.961023][ T3645] name failslab, interval 1, probability 0, space 0, times 0 [ 36.962061][ T3643] loop3: detected capacity change from 0 to 764 [ 36.973973][ T3645] CPU: 1 UID: 0 PID: 3645 Comm: syz.0.63 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 36.990738][ T3645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.995816][ T3643] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 37.000795][ T3645] Call Trace: [ 37.000808][ T3645] [ 37.000818][ T3645] dump_stack_lvl+0xf2/0x150 [ 37.000852][ T3645] dump_stack+0x15/0x20 [ 37.022673][ T3645] should_fail_ex+0x223/0x230 [ 37.025442][ T3643] loop3: detected capacity change from 0 to 128 [ 37.027382][ T3645] ? __inet_bhash2_update_saddr+0x158/0xd40 [ 37.039540][ T3645] should_failslab+0x8f/0xb0 [ 37.044204][ T3645] kmem_cache_alloc_noprof+0x4c/0x290 [ 37.049622][ T3645] __inet_bhash2_update_saddr+0x158/0xd40 [ 37.055409][ T3645] ? __kfree_skb+0x102/0x150 [ 37.060033][ T3645] ? tcp_write_queue_purge+0x707/0x730 [ 37.065519][ T3645] inet_bhash2_reset_saddr+0x48/0x60 [ 37.070859][ T3645] tcp_disconnect+0x50f/0xd70 [ 37.075595][ T3645] inet_shutdown+0x1b3/0x210 [ 37.080231][ T3645] __se_sys_shutdown+0xf3/0x140 [ 37.085385][ T3645] __x64_sys_shutdown+0x31/0x40 [ 37.090270][ T3645] x64_sys_call+0x2c1f/0x2d60 [ 37.094968][ T3645] do_syscall_64+0xc9/0x1c0 [ 37.099489][ T3645] ? clear_bhb_loop+0x55/0xb0 [ 37.104228][ T3645] ? clear_bhb_loop+0x55/0xb0 [ 37.108960][ T3645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.114879][ T3645] RIP: 0033:0x7fbdc411e719 [ 37.119545][ T3645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.139179][ T3645] RSP: 002b:00007fbdc2d91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 37.147612][ T3645] RAX: ffffffffffffffda RBX: 00007fbdc42d5f80 RCX: 00007fbdc411e719 [ 37.155591][ T3645] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 37.163648][ T3645] RBP: 00007fbdc2d91090 R08: 0000000000000000 R09: 0000000000000000 [ 37.171627][ T3645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.179604][ T3645] R13: 0000000000000000 R14: 00007fbdc42d5f80 R15: 00007ffdd6bd8668 [ 37.187589][ T3645] [ 37.430988][ T3685] loop4: detected capacity change from 0 to 2048 [ 37.443760][ T3685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.464473][ T3685] 9pnet_fd: Insufficient options for proto=fd [ 37.514408][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.713161][ T3724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 37.713425][ T3722] loop4: detected capacity change from 0 to 164 [ 37.719728][ T3724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.719781][ T3724] vhci_hcd vhci_hcd.0: Device attached [ 37.740027][ T3722] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 37.751555][ T3724] 0ªX¹¦À: renamed from caif0 [ 37.757875][ T3724] 0ªX¹¦À: entered allmulticast mode [ 37.763495][ T3724] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 37.780652][ T3725] vhci_hcd: connection closed [ 37.780823][ T3421] vhci_hcd: stop threads [ 37.789807][ T3421] vhci_hcd: release socket [ 37.794362][ T3421] vhci_hcd: disconnect device [ 37.929547][ T3731] netlink: 'syz.3.72': attribute type 10 has an invalid length. [ 37.938035][ T3731] geneve1: entered promiscuous mode [ 37.951194][ T3731] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 38.134468][ T29] kauditd_printk_skb: 792 callbacks suppressed [ 38.134506][ T29] audit: type=1400 audit(1730581831.971:912): avc: denied { lock } for pid=3733 comm="syz.0.73" path="socket:[4841]" dev="sockfs" ino=4841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 38.183437][ T29] audit: type=1400 audit(1730581832.021:913): avc: denied { create } for pid=3735 comm="syz.0.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.192919][ T3736] FAULT_INJECTION: forcing a failure. [ 38.192919][ T3736] name failslab, interval 1, probability 0, space 0, times 0 [ 38.215315][ T3736] CPU: 1 UID: 0 PID: 3736 Comm: syz.0.74 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 38.225913][ T3736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.236055][ T3736] Call Trace: [ 38.239385][ T3736] [ 38.242484][ T3736] dump_stack_lvl+0xf2/0x150 [ 38.247104][ T3736] dump_stack+0x15/0x20 [ 38.251282][ T3736] should_fail_ex+0x223/0x230 [ 38.255982][ T3736] ? __alloc_skb+0x10b/0x310 [ 38.260638][ T3736] should_failslab+0x8f/0xb0 [ 38.265281][ T3736] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 38.271112][ T3736] ? enqueue_timer+0xe7/0x2a0 [ 38.275806][ T3736] __alloc_skb+0x10b/0x310 [ 38.280308][ T3736] xfrm_send_policy_notify+0x17e/0x1240 [ 38.285960][ T3736] ? _raw_spin_unlock_bh+0x36/0x40 [ 38.291120][ T3736] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 38.297172][ T3736] km_policy_notify+0x66/0xb0 [ 38.301895][ T3736] pfkey_spdadd+0x8bf/0x900 [ 38.306442][ T3736] pfkey_sendmsg+0x6f9/0x970 [ 38.311132][ T3736] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 38.316341][ T3736] __sock_sendmsg+0x140/0x180 [ 38.321035][ T3736] ____sys_sendmsg+0x312/0x410 [ 38.326133][ T3736] __sys_sendmsg+0x1d9/0x270 [ 38.330745][ T3736] __x64_sys_sendmsg+0x46/0x50 [ 38.335524][ T3736] x64_sys_call+0x2689/0x2d60 [ 38.340261][ T3736] do_syscall_64+0xc9/0x1c0 [ 38.344792][ T3736] ? clear_bhb_loop+0x55/0xb0 [ 38.349480][ T3736] ? clear_bhb_loop+0x55/0xb0 [ 38.354171][ T3736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.360165][ T3736] RIP: 0033:0x7fbdc411e719 [ 38.364585][ T3736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.384280][ T3736] RSP: 002b:00007fbdc2d91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.392702][ T3736] RAX: ffffffffffffffda RBX: 00007fbdc42d5f80 RCX: 00007fbdc411e719 [ 38.400738][ T3736] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000007 [ 38.408714][ T3736] RBP: 00007fbdc2d91090 R08: 0000000000000000 R09: 0000000000000000 [ 38.416757][ T3736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.424801][ T3736] R13: 0000000000000000 R14: 00007fbdc42d5f80 R15: 00007ffdd6bd8668 [ 38.432784][ T3736] [ 38.456016][ T29] audit: type=1400 audit(1730581832.291:914): avc: denied { create } for pid=3744 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.521500][ T29] audit: type=1400 audit(1730581832.291:915): avc: denied { bind } for pid=3744 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.541415][ T29] audit: type=1400 audit(1730581832.291:916): avc: denied { connect } for pid=3744 comm="syz.2.77" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.627086][ T3750] loop1: detected capacity change from 0 to 512 [ 38.663532][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.678380][ T29] audit: type=1400 audit(1730581832.511:917): avc: denied { append } for pid=3765 comm="syz.4.85" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.703796][ T3750] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.723155][ T3768] can0: slcan on ptm0. [ 38.764699][ T3776] loop4: detected capacity change from 0 to 164 [ 38.767698][ T3774] loop2: detected capacity change from 0 to 128 [ 38.777584][ T3776] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 38.783906][ T3774] Illegal XDP return value 4294967274 on prog (id 60) dev N/A, expect packet loss! [ 38.795905][ T29] audit: type=1400 audit(1730581832.611:918): avc: denied { mount } for pid=3773 comm="syz.2.88" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.806242][ T3750] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.820760][ T3768] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 38.833107][ T3768] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 38.833223][ T3768] vhci_hcd vhci_hcd.0: Device attached [ 38.852772][ T3782] FAULT_INJECTION: forcing a failure. [ 38.852772][ T3782] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.865869][ T3782] CPU: 1 UID: 0 PID: 3782 Comm: syz.4.90 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 38.876395][ T3782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.886504][ T3782] Call Trace: [ 38.889800][ T3782] [ 38.892819][ T3782] dump_stack_lvl+0xf2/0x150 [ 38.897478][ T3782] dump_stack+0x15/0x20 [ 38.901727][ T3782] should_fail_ex+0x223/0x230 [ 38.906563][ T3782] should_fail+0xb/0x10 [ 38.910810][ T3782] should_fail_usercopy+0x1a/0x20 [ 38.915904][ T3782] _copy_to_user+0x20/0xa0 [ 38.920489][ T3782] map_get_next_key+0x27a/0x310 [ 38.925404][ T3782] __sys_bpf+0x6cb/0x7a0 [ 38.929823][ T3782] __x64_sys_bpf+0x43/0x50 [ 38.934324][ T3782] x64_sys_call+0x2625/0x2d60 [ 38.939115][ T3782] do_syscall_64+0xc9/0x1c0 [ 38.943669][ T3782] ? clear_bhb_loop+0x55/0xb0 [ 38.948390][ T3782] ? clear_bhb_loop+0x55/0xb0 [ 38.953184][ T3782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.959187][ T3782] RIP: 0033:0x7fd7171ee719 [ 38.963624][ T3782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.983755][ T3782] RSP: 002b:00007fd715e67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.992183][ T3782] RAX: ffffffffffffffda RBX: 00007fd7173a5f80 RCX: 00007fd7171ee719 [ 39.000182][ T3782] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000004 [ 39.008253][ T3782] RBP: 00007fd715e67090 R08: 0000000000000000 R09: 0000000000000000 [ 39.016403][ T3782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.024413][ T3782] R13: 0000000000000000 R14: 00007fd7173a5f80 R15: 00007ffee96c8438 [ 39.032440][ T3782] [ 39.043806][ T29] audit: type=1326 audit(1730581832.881:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.3.83" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63071be719 code=0x0 [ 39.066618][ T29] audit: type=1400 audit(1730581832.881:920): avc: denied { watch watch_reads } for pid=3773 comm="syz.2.88" path="/12/file2/file1" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 39.075592][ T3777] lo speed is unknown, defaulting to 1000 [ 39.120934][ T29] audit: type=1400 audit(1730581832.951:921): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.161034][ T3799] loop1: detected capacity change from 0 to 256 [ 39.170666][ T1037] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 39.190932][ T3799] msdos: Unknown parameter 'gi' [ 39.209207][ T3803] __nla_validate_parse: 9 callbacks suppressed [ 39.209225][ T3803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.94'. [ 39.224401][ T3803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.94'. [ 39.363922][ T3828] loop2: detected capacity change from 0 to 512 [ 39.370717][ T3828] EXT4-fs: Ignoring removed bh option [ 39.386433][ T3828] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 39.399272][ T3828] EXT4-fs (loop2): invalid journal inode [ 39.407441][ T3828] EXT4-fs (loop2): can't get journal size [ 39.414793][ T3828] EXT4-fs (loop2): 1 truncate cleaned up [ 39.421342][ T3828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.474891][ T3778] vhci_hcd: connection reset by peer [ 39.480982][ T3421] vhci_hcd: stop threads [ 39.485275][ T3421] vhci_hcd: release socket [ 39.486946][ T3838] loop0: detected capacity change from 0 to 764 [ 39.489741][ T3421] vhci_hcd: disconnect device [ 39.490837][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.496435][ T3838] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 39.520369][ T3838] loop0: detected capacity change from 0 to 128 [ 39.533456][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 39.690113][ T3845] netlink: 108 bytes leftover after parsing attributes in process `syz.2.108'. [ 39.716176][ T3847] netlink: 'syz.2.109': attribute type 1 has an invalid length. [ 39.740340][ T3850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 39.752669][ T3850] team0: Port device team_slave_1 removed [ 39.812256][ T3859] FAULT_INJECTION: forcing a failure. [ 39.812256][ T3859] name failslab, interval 1, probability 0, space 0, times 0 [ 39.824960][ T3859] CPU: 1 UID: 0 PID: 3859 Comm: syz.2.114 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 39.835630][ T3859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.845732][ T3859] Call Trace: [ 39.849016][ T3859] [ 39.851974][ T3859] dump_stack_lvl+0xf2/0x150 [ 39.856579][ T3859] dump_stack+0x15/0x20 [ 39.860800][ T3859] should_fail_ex+0x223/0x230 [ 39.865576][ T3859] ? skb_clone+0x154/0x1f0 [ 39.869996][ T3859] should_failslab+0x8f/0xb0 [ 39.874702][ T3859] kmem_cache_alloc_noprof+0x4c/0x290 [ 39.880202][ T3859] skb_clone+0x154/0x1f0 [ 39.884453][ T3859] __netlink_deliver_tap+0x2bd/0x4c0 [ 39.889852][ T3859] netlink_unicast+0x64a/0x670 [ 39.894692][ T3859] netlink_sendmsg+0x5cc/0x6e0 [ 39.899483][ T3859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 39.904848][ T3859] __sock_sendmsg+0x140/0x180 [ 39.909575][ T3859] ____sys_sendmsg+0x312/0x410 [ 39.914351][ T3859] __sys_sendmsg+0x1d9/0x270 [ 39.918972][ T3859] ? native_tss_update_io_bitmap+0x17b/0x200 [ 39.925088][ T3859] __x64_sys_sendmsg+0x46/0x50 [ 39.929885][ T3859] x64_sys_call+0x2689/0x2d60 [ 39.934579][ T3859] do_syscall_64+0xc9/0x1c0 [ 39.939087][ T3859] ? clear_bhb_loop+0x55/0xb0 [ 39.943839][ T3859] ? clear_bhb_loop+0x55/0xb0 [ 39.948522][ T3859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.954485][ T3859] RIP: 0033:0x7fba99cbe719 [ 39.958995][ T3859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.978861][ T3859] RSP: 002b:00007fba98931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 39.987341][ T3859] RAX: ffffffffffffffda RBX: 00007fba99e75f80 RCX: 00007fba99cbe719 [ 39.995324][ T3859] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 40.003306][ T3859] RBP: 00007fba98931090 R08: 0000000000000000 R09: 0000000000000000 [ 40.011323][ T3859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.019363][ T3859] R13: 0000000000000000 R14: 00007fba99e75f80 R15: 00007ffce8470f48 [ 40.027356][ T3859] [ 40.171104][ T3760] can0 (unregistered): slcan off ptm0. [ 40.356127][ T3894] FAULT_INJECTION: forcing a failure. [ 40.356127][ T3894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.369336][ T3894] CPU: 0 UID: 0 PID: 3894 Comm: syz.2.121 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 40.379966][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.390162][ T3894] Call Trace: [ 40.393455][ T3894] [ 40.396476][ T3894] dump_stack_lvl+0xf2/0x150 [ 40.401102][ T3894] dump_stack+0x15/0x20 [ 40.405282][ T3894] should_fail_ex+0x223/0x230 [ 40.410028][ T3894] should_fail+0xb/0x10 [ 40.414350][ T3894] should_fail_usercopy+0x1a/0x20 [ 40.419434][ T3894] _copy_from_user+0x1e/0xb0 [ 40.424076][ T3894] copy_msghdr_from_user+0x54/0x2a0 [ 40.429324][ T3894] __sys_sendmsg+0x171/0x270 [ 40.433989][ T3894] ? probe_sched_wakeup+0x81/0xa0 [ 40.439162][ T3894] __x64_sys_sendmsg+0x46/0x50 [ 40.443946][ T3894] x64_sys_call+0x2689/0x2d60 [ 40.448816][ T3894] do_syscall_64+0xc9/0x1c0 [ 40.453362][ T3894] ? clear_bhb_loop+0x55/0xb0 [ 40.458149][ T3894] ? clear_bhb_loop+0x55/0xb0 [ 40.462922][ T3894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.468871][ T3894] RIP: 0033:0x7fba99cbe719 [ 40.473308][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.493039][ T3894] RSP: 002b:00007fba98931038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.501503][ T3894] RAX: ffffffffffffffda RBX: 00007fba99e75f80 RCX: 00007fba99cbe719 [ 40.509498][ T3894] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000007 [ 40.517504][ T3894] RBP: 00007fba98931090 R08: 0000000000000000 R09: 0000000000000000 [ 40.525578][ T3894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.533560][ T3894] R13: 0000000000000000 R14: 00007fba99e75f80 R15: 00007ffce8470f48 [ 40.541600][ T3894] [ 40.607258][ T3924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 40.616786][ T3924] bridge_slave_1: left allmulticast mode [ 40.622637][ T3924] bridge_slave_1: left promiscuous mode [ 40.628427][ T3924] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.636782][ T3924] bridge_slave_0: left allmulticast mode [ 40.642654][ T3924] bridge_slave_0: left promiscuous mode [ 40.648706][ T3924] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.715437][ T3930] netlink: 48 bytes leftover after parsing attributes in process `syz.2.127'. [ 40.759339][ T3932] FAULT_INJECTION: forcing a failure. [ 40.759339][ T3932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.772529][ T3932] CPU: 1 UID: 0 PID: 3932 Comm: syz.0.128 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 40.783168][ T3932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.793248][ T3932] Call Trace: [ 40.796550][ T3932] [ 40.799495][ T3932] dump_stack_lvl+0xf2/0x150 [ 40.804118][ T3932] dump_stack+0x15/0x20 [ 40.808278][ T3932] should_fail_ex+0x223/0x230 [ 40.812997][ T3932] should_fail+0xb/0x10 [ 40.817304][ T3932] should_fail_usercopy+0x1a/0x20 [ 40.822331][ T3932] _copy_from_user+0x1e/0xb0 [ 40.826936][ T3932] memdup_user+0x64/0xc0 [ 40.831281][ T3932] security_setselfattr+0x8f/0x260 [ 40.836455][ T3932] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 40.842100][ T3932] x64_sys_call+0x1229/0x2d60 [ 40.846857][ T3932] do_syscall_64+0xc9/0x1c0 [ 40.851484][ T3932] ? clear_bhb_loop+0x55/0xb0 [ 40.856257][ T3932] ? clear_bhb_loop+0x55/0xb0 [ 40.860988][ T3932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.866988][ T3932] RIP: 0033:0x7fbdc411e719 [ 40.871406][ T3932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.891046][ T3932] RSP: 002b:00007fbdc2d91038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 40.899501][ T3932] RAX: ffffffffffffffda RBX: 00007fbdc42d5f80 RCX: 00007fbdc411e719 [ 40.907517][ T3932] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.915509][ T3932] RBP: 00007fbdc2d91090 R08: 0000000000000000 R09: 0000000000000000 [ 40.923546][ T3932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.931563][ T3932] R13: 0000000000000000 R14: 00007fbdc42d5f80 R15: 00007ffdd6bd8668 [ 40.939566][ T3932] [ 40.993960][ T3940] loop2: detected capacity change from 0 to 764 [ 41.000615][ T3940] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 41.010957][ T3940] loop2: detected capacity change from 0 to 128 [ 41.019339][ T3940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.131'. [ 41.055179][ T3938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.063912][ T3938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.209967][ T3954] loop4: detected capacity change from 0 to 764 [ 41.219624][ T3954] iso9660: Unknown parameter 'ÿ00000000000000000003' [ 41.248612][ T3954] loop4: detected capacity change from 0 to 128 [ 41.263446][ T3954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.135'. [ 41.283853][ T3961] tipc: Started in network mode [ 41.288851][ T3961] tipc: Node identity ac1414aa, cluster identity 4711 [ 41.295854][ T3961] tipc: New replicast peer: 100.1.1.1 [ 41.301556][ T3961] tipc: Enabled bearer , priority 10 [ 41.337855][ T3967] lo speed is unknown, defaulting to 1000 [ 41.449053][ T3971] loop1: detected capacity change from 0 to 512 [ 41.462367][ T3971] EXT4-fs: Ignoring removed bh option [ 41.468272][ T3971] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 41.476741][ T3971] EXT4-fs (loop1): invalid journal inode [ 41.482729][ T3971] EXT4-fs (loop1): can't get journal size [ 41.491562][ T3971] EXT4-fs (loop1): 1 truncate cleaned up [ 41.497665][ T3971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.527349][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.563071][ T3976] smc: net device bond0 applied user defined pnetid SYZ0 [ 41.571630][ T3976] smc: net device bond0 erased user defined pnetid SYZ0 [ 41.581693][ T3976] tipc: Started in network mode [ 41.586610][ T3976] tipc: Node identity ac1414aa, cluster identity 4711 [ 41.593455][ T2979] IPVS: starting estimator thread 0... [ 41.600243][ T3976] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.607353][ T3976] tipc: Enabled bearer , priority 10 [ 41.640202][ T3983] loop1: detected capacity change from 0 to 128 [ 41.680629][ T3979] IPVS: using max 2304 ests per chain, 115200 per kthread [ 41.701303][ T3987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.145'. [ 41.708471][ T3983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.723931][ T3983] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.755827][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.890565][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 41.920455][ T3993] loop2: detected capacity change from 0 to 512 [ 41.977372][ T3993] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.147: invalid indirect mapped block 11 (level 0) [ 41.994264][ T3993] EXT4-fs (loop2): Remounting filesystem read-only [ 42.002372][ T3993] EXT4-fs (loop2): 1 truncate cleaned up [ 42.008880][ T3993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.023293][ T3993] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 42.030564][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.031560][ T3993] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.170592][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.181165][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.199359][ T4006] loop3: detected capacity change from 0 to 512 [ 42.206837][ T4005] loop2: detected capacity change from 0 to 512 [ 42.225124][ T4006] EXT4-fs: Ignoring removed orlov option [ 42.226207][ T4005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.242651][ T4006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.254497][ T4003] bridge_slave_1: left allmulticast mode [ 42.254949][ T4008] loop1: detected capacity change from 0 to 2048 [ 42.260337][ T4003] bridge_slave_1: left promiscuous mode [ 42.272515][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.280480][ T4003] bridge_slave_0: left allmulticast mode [ 42.286262][ T4003] bridge_slave_0: left promiscuous mode [ 42.287533][ T4006] EXT4-fs (loop3): 1 orphan inode deleted [ 42.292048][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.297550][ T4006] EXT4-fs (loop3): 1 truncate cleaned up [ 42.310653][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.310818][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.318870][ T4005] EXT4-fs (loop2): 1 truncate cleaned up [ 42.332270][ T4008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.335939][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.372566][ T4008] +}[@[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.372664][ T4008] +}[@[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.384729][ T4008] +}[@[4008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.420641][ T9] tipc: Node number set to 2886997162 [ 42.438501][ T4006] batadv_slave_0: entered promiscuous mode [ 42.450580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.454112][ T4006] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 42.500390][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.516693][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.580073][ T4024] loop0: detected capacity change from 0 to 1024 [ 42.587134][ T4024] EXT4-fs: Ignoring removed oldalloc option [ 42.590651][ T3390] tipc: Node number set to 2886997162 [ 42.603810][ T4029] loop3: detected capacity change from 0 to 512 [ 42.613807][ T4029] EXT4-fs: Ignoring removed bh option [ 42.624305][ T4029] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 42.632757][ T4029] EXT4-fs (loop3): invalid journal inode [ 42.638482][ T4029] EXT4-fs (loop3): can't get journal size [ 42.650341][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.660729][ T4024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.665724][ T4034] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 42.679352][ T4034] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.687024][ T4034] vhci_hcd vhci_hcd.0: Device attached [ 42.692894][ T4029] EXT4-fs (loop3): 1 truncate cleaned up [ 42.699068][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.724510][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.730631][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 42.782327][ T4042] syz.2.161[4042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.782446][ T4042] syz.2.161[4042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.820728][ T4042] syz.2.161[4042] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.898068][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.000576][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 43.071869][ T4055] loop2: detected capacity change from 0 to 512 [ 43.097922][ T4055] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.139805][ T4055] EXT4-fs (loop2): 1 truncate cleaned up [ 43.161330][ T4055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.292338][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 43.292357][ T29] audit: type=1400 audit(1730581837.131:1233): avc: denied { write } for pid=4058 comm="syz.3.166" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.393063][ T29] audit: type=1400 audit(1730581837.161:1234): avc: denied { open } for pid=4058 comm="syz.3.166" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.422601][ T4038] vhci_hcd: connection closed [ 43.425101][ T3421] vhci_hcd: stop threads [ 43.425992][ T4062] loop0: detected capacity change from 0 to 1024 [ 43.429806][ T3421] vhci_hcd: release socket [ 43.429822][ T3421] vhci_hcd: disconnect device [ 43.443848][ T29] audit: type=1400 audit(1730581837.261:1235): avc: denied { sqpoll } for pid=4064 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 43.468824][ T29] audit: type=1400 audit(1730581837.271:1236): avc: denied { read } for pid=4063 comm="syz.3.168" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.477541][ T4062] EXT4-fs: quotafile must be on filesystem root [ 43.498332][ T3393] vhci_hcd: vhci_device speed not set [ 43.528574][ T29] audit: type=1400 audit(1730581837.361:1237): avc: denied { create } for pid=4063 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.548216][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 43.555434][ T29] audit: type=1400 audit(1730581837.361:1238): avc: denied { bind } for pid=4063 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.575096][ T29] audit: type=1400 audit(1730581837.391:1239): avc: denied { listen } for pid=4063 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.578300][ T4079] syz.1.171[4079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.594815][ T29] audit: type=1400 audit(1730581837.391:1240): avc: denied { read } for pid=4063 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.595091][ T4079] syz.1.171[4079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.606167][ T29] audit: type=1326 audit(1730581837.391:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc411e719 code=0x7ffc0000 [ 43.660065][ T29] audit: type=1326 audit(1730581837.391:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbdc411e719 code=0x7ffc0000 [ 43.668111][ T4079] syz.1.171[4079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.716487][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.716680][ T4084] capability: warning: `syz.1.173' uses 32-bit capabilities (legacy support in use) [ 43.755828][ T4084] FAULT_INJECTION: forcing a failure. [ 43.755828][ T4084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.769143][ T4084] CPU: 0 UID: 0 PID: 4084 Comm: syz.1.173 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 43.779790][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.790022][ T4084] Call Trace: [ 43.793311][ T4084] [ 43.796262][ T4084] dump_stack_lvl+0xf2/0x150 [ 43.800879][ T4084] dump_stack+0x15/0x20 [ 43.805090][ T4084] should_fail_ex+0x223/0x230 [ 43.809872][ T4084] should_fail+0xb/0x10 [ 43.814046][ T4084] should_fail_usercopy+0x1a/0x20 [ 43.819079][ T4084] _copy_to_user+0x20/0xa0 [ 43.823538][ T4084] simple_read_from_buffer+0xa0/0x110 [ 43.828954][ T4084] proc_fail_nth_read+0xf9/0x140 [ 43.833958][ T4084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 43.839575][ T4084] vfs_read+0x1a2/0x700 [ 43.843819][ T4084] ? capable+0x60/0xb0 [ 43.847901][ T4084] ? tioccons+0x5e/0x180 [ 43.852215][ T4084] ksys_read+0xeb/0x1b0 [ 43.856392][ T4084] __x64_sys_read+0x42/0x50 [ 43.860971][ T4084] x64_sys_call+0x27d3/0x2d60 [ 43.865735][ T4084] do_syscall_64+0xc9/0x1c0 [ 43.870319][ T4084] ? clear_bhb_loop+0x55/0xb0 [ 43.875121][ T4084] ? clear_bhb_loop+0x55/0xb0 [ 43.879806][ T4084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.885935][ T4084] RIP: 0033:0x7fc9e41dd15c [ 43.890410][ T4084] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 43.910039][ T4084] RSP: 002b:00007fc9e2e57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 43.918463][ T4084] RAX: ffffffffffffffda RBX: 00007fc9e4395f80 RCX: 00007fc9e41dd15c [ 43.926458][ T4084] RDX: 000000000000000f RSI: 00007fc9e2e570a0 RDI: 0000000000000005 [ 43.934435][ T4084] RBP: 00007fc9e2e57090 R08: 0000000000000000 R09: 0000000000000000 [ 43.942541][ T4084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.950527][ T4084] R13: 0000000000000000 R14: 00007fc9e4395f80 R15: 00007ffca00e74e8 [ 43.958526][ T4084] [ 43.971843][ T4086] loop2: detected capacity change from 0 to 512 [ 43.978447][ T4086] EXT4-fs: Ignoring removed bh option [ 43.985699][ T4086] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 43.995006][ T4086] EXT4-fs (loop2): invalid journal inode [ 43.999858][ T4091] loop1: detected capacity change from 0 to 1024 [ 44.000767][ T4086] EXT4-fs (loop2): can't get journal size [ 44.014049][ T4086] EXT4-fs (loop2): 1 truncate cleaned up [ 44.019579][ T4091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.020210][ T4086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.047889][ T4091] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 44.069909][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.109157][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.172005][ T4110] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.173884][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.186074][ T4110] FAULT_INJECTION: forcing a failure. [ 44.186074][ T4110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.191249][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.204289][ T4110] CPU: 1 UID: 0 PID: 4110 Comm: syz.2.183 Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 44.211798][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.222240][ T4110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.229642][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.239683][ T4110] Call Trace: [ 44.239698][ T4110] [ 44.239707][ T4110] dump_stack_lvl+0xf2/0x150 [ 44.239742][ T4110] dump_stack+0x15/0x20 [ 44.247175][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.250365][ T4110] should_fail_ex+0x223/0x230 [ 44.253333][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.257928][ T4110] should_fail+0xb/0x10 [ 44.262043][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.269355][ T4110] should_fail_usercopy+0x1a/0x20 [ 44.274077][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.281384][ T4110] _copy_from_user+0x1e/0xb0 [ 44.285550][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.292909][ T4110] get_user_ifreq+0x8c/0x160 [ 44.297972][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.297995][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.298028][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.305383][ T4110] sock_ioctl+0x576/0x640 [ 44.305415][ T4110] ? __pfx_sock_ioctl+0x10/0x10 [ 44.309999][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.317339][ T4110] __se_sys_ioctl+0xcd/0x140 [ 44.317379][ T4110] __x64_sys_ioctl+0x43/0x50 [ 44.322000][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.329319][ T4110] x64_sys_call+0x15cc/0x2d60 [ 44.336748][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.344046][ T4110] do_syscall_64+0xc9/0x1c0 [ 44.348395][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.353214][ T4110] ? clear_bhb_loop+0x55/0xb0 [ 44.353243][ T4110] ? clear_bhb_loop+0x55/0xb0 [ 44.360645][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.365179][ T4110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.369766][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.377102][ T4110] RIP: 0033:0x7fba99cbe719 [ 44.377128][ T4110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.381972][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.389460][ T4110] RSP: 002b:00007fba98931038 EFLAGS: 00000246 [ 44.394034][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.401319][ T4110] ORIG_RAX: 0000000000000010 [ 44.401331][ T4110] RAX: ffffffffffffffda RBX: 00007fba99e75f80 RCX: 00007fba99cbe719 [ 44.401374][ T4110] RDX: 0000000020000280 RSI: 00000000000089f2 RDI: 0000000000000003 [ 44.406048][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.406075][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.410737][ T4110] RBP: 00007fba98931090 R08: 0000000000000000 R09: 0000000000000000 [ 44.410757][ T4110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.410773][ T4110] R13: 0000000000000000 R14: 00007fba99e75f80 R15: 00007ffce8470f48 [ 44.410861][ T4110] [ 44.418147][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.431703][ T4108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.435976][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.456108][ T4088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.463027][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.550577][ T1037] vhci_hcd: vhci_device speed not set [ 44.556235][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.564384][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 44.601166][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.608558][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.616002][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.623416][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.630843][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.638416][ T2979] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.646834][ T4088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.648442][ T4108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.654879][ T2979] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 44.690658][ T4118] loop4: detected capacity change from 0 to 512 [ 44.710251][ T4114] lo speed is unknown, defaulting to 1000 [ 44.724215][ T4088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4088 comm=syz.0.174 [ 44.727047][ T4118] EXT4-fs: Ignoring removed bh option [ 44.799447][ T4118] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 44.841916][ T4118] EXT4-fs (loop4): invalid journal inode [ 44.856248][ T4124] loop3: detected capacity change from 0 to 1024 [ 44.880720][ T4118] EXT4-fs (loop4): can't get journal size [ 44.891379][ T4118] EXT4-fs (loop4): 1 truncate cleaned up [ 44.897441][ T4118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.910104][ T4124] EXT4-fs: Ignoring removed oldalloc option [ 44.953782][ T4124] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 44.972064][ T4124] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.994498][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.059139][ T4132] nfs: Unknown parameter '' [ 45.066369][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.126142][ T3016] ================================================================== [ 45.134276][ T3016] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 45.141524][ T3016] [ 45.143861][ T3016] write to 0xffff8881068710f0 of 8 bytes by task 3308 on cpu 0: [ 45.151769][ T3016] dentry_unlink_inode+0x65/0x260 [ 45.156823][ T3016] d_delete+0x7d/0x100 [ 45.160929][ T3016] d_delete_notify+0x34/0x100 [ 45.165646][ T3016] vfs_unlink+0x320/0x430 [ 45.170011][ T3016] do_unlinkat+0x236/0x4c0 [ 45.174466][ T3016] __x64_sys_unlink+0x2e/0x40 [ 45.179185][ T3016] x64_sys_call+0x280f/0x2d60 [ 45.182726][ T4142] loop2: detected capacity change from 0 to 164 [ 45.183921][ T3016] do_syscall_64+0xc9/0x1c0 [ 45.194795][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.200739][ T3016] [ 45.203071][ T3016] read to 0xffff8881068710f0 of 8 bytes by task 3016 on cpu 1: [ 45.210617][ T3016] step_into+0x123/0x810 [ 45.210648][ T3016] walk_component+0x169/0x230 [ 45.210674][ T3016] path_lookupat+0x10a/0x2b0 [ 45.224358][ T3016] filename_lookup+0x127/0x300 [ 45.229135][ T3016] do_readlinkat+0x89/0x210 [ 45.233656][ T3016] __x64_sys_readlink+0x47/0x60 [ 45.238526][ T3016] x64_sys_call+0x13c3/0x2d60 [ 45.243225][ T3016] do_syscall_64+0xc9/0x1c0 [ 45.247740][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.253656][ T3016] [ 45.255987][ T3016] value changed: 0xffff88811567faa0 -> 0x0000000000000000 [ 45.263095][ T3016] [ 45.265419][ T3016] Reported by Kernel Concurrency Sanitizer on: [ 45.271567][ T3016] CPU: 1 UID: 0 PID: 3016 Comm: udevd Not tainted 6.12.0-rc5-syzkaller-00299-g11066801dd4b #0 [ 45.281834][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.291901][ T3016] ================================================================== [ 45.315868][ T4143] loop4: detected capacity change from 0 to 1024 [ 45.323920][ T4140] __nla_validate_parse: 5 callbacks suppressed [ 45.323936][ T4140] netlink: 92 bytes leftover after parsing attributes in process `syz.4.194'. [ 45.600633][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 46.640582][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 47.681541][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 48.720599][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 49.760596][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 50.800577][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 51.840609][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 52.880619][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 53.920590][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 54.960585][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available