last executing test programs: 3.437457129s ago: executing program 1 (id=290): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x100010, 0xffffffffffffffff, 0xf5d56000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) read$msr(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 2.906008802s ago: executing program 1 (id=299): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xffffffff, 0x80, 0x5, 0x24f}, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001014010025bd7000fcdbdf2508", @ANYRES8=0x0, @ANYRES16=r2], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x58a5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r6, 0x0, 0x0, 0x1001f0) copy_file_range(r6, 0x0, r6, &(0x7f00000000c0)=0xc615, 0x101, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x501000, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x48001) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200480c4}, 0x48040) 2.758417944s ago: executing program 1 (id=303): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xa4, @private1}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000019200), 0x5, r2}, 0x38) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000001080103000000000000000003000007240004800800014000000001080001400000761f08000140000000ff08000140000000074400048008000240000000000800014000000003080002400000000108000240ffffff00080001400000000508fd01400000004008000140000000060800014000007fb182e32066d3416d7b53c316ff06000240001900000900010073797a310000000006000240"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000cea100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000880)={0x44000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000005c0), {0x6}, &(0x7f0000001540)=""/4096, 0x1000, &(0x7f00000007c0)=""/174, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r1}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r5}, 0x20) r8 = open$dir(&(0x7f0000000180)='./file0\x00', 0x4c0002, 0x1a9) name_to_handle_at(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@fuse_with_parent={0x18, 0x82, {{0x8, 0x8, 0x5}, {0x641, 0x81, 0x80000000}}}, &(0x7f0000000240), 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) 1.608072441s ago: executing program 1 (id=330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x71) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x44, r5, 0x1, 0xfffffffe, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r8}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x91, 0x0, 0x40, @private0, @private1, 0x1, 0x0, 0x9, 0xfff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 831.996915ms ago: executing program 3 (id=335): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x80}, 0x1, 0x7, 0xffffff80}, 0x0) 831.547195ms ago: executing program 4 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001e0000001d00000006000100fe0f000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2d6aeb9a47a204e567ce3b508d055348a5bb6954aead41346388136a4bf9ed9628cc00a400976dbd0415f8ee9cf237f135ebe4af89aef080d74d8a15ebe5d82db012d3a225e7cefd7b7e64311b75876f6a7ee9150f886de104b3cac7e273454a0a4db56c32c1414a08d390c04d0a4746630f179b596dd411fd2a892a41e6defd974c2319d18bf94a3e1f7b3cc4b50a3acf33d9d6ed3a97ef3022d5187851c05869e11249b054fb7e2c77cf5ae20d1ae8e1b73b5f7d91fb99aa5ea4be9a34067456"], 0x58}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001e0000001d00000006000100fe0f000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2d6aeb9a47a204e567ce3b508d055348a5bb6954aead41346388136a4bf9ed9628cc00a400976dbd0415f8ee9cf237f135ebe4af89aef080d74d8a15ebe5d82db012d3a225e7cefd7b7e64311b75876f6a7ee9150f886de104b3cac7e273454a0a4db56c32c1414a08d390c04d0a4746630f179b596dd411fd2a892a41e6defd974c2319d18bf94a3e1f7b3cc4b50a3acf33d9d6ed3a97ef3022d5187851c05869e11249b054fb7e2c77cf5ae20d1ae8e1b73b5f7d91fb99aa5ea4be9a34067456"], 0x58}}, 0x8000) (async) 831.220785ms ago: executing program 3 (id=337): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10007ffffffff}, 0x18) getgid() recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40006040, 0x0) 814.434995ms ago: executing program 3 (id=338): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000200)="cafdd335bc", 0x5, 0xe7c) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) 797.322105ms ago: executing program 2 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64af}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000380)=@gcm_128={{0x304}, "db748d091204268f", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f15000000fa0700f7ffffff00839d00000061002e615f00e1d21d801f68ddea05bda6c69cdd89a0fd3b1549df2d882952d514584668144fcb9f427f037c0f0d63a84086bdb6d6de65bbdfada29fa9b1d75626525657dc43c6b3ecc8cf86034001061179991d16b47e69fdfd43e3a3f4f3ac326cf670fa7695002bec14aa6c1ed86c6f95f83447a1017198809f1aac7157b3f37cead79bc0f787733065f026ab3eef13acf9513eadac"], &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000680)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000000f7}, 0x18) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0xfa, 0x40, 0x0, 0x0, 0x0, 0x20000000000000b, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x104b09, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xe, 0x0, 0x20000006}, 0x0, 0xe, r2, 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000000440)=""/179, &(0x7f0000000500), 0x0, 0x3}, 0x38) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b", 0x1}], 0x1}}], 0x1, 0x48800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000580)={r6, 0xe5, "ed3db7f57457567b0225990b985465c878dca6fa50c95f828e7e73f7dac8b8898fe321004f55adce9c0a246bbb360b87db5bea9c0258aea73b9e1722a2458bfd7afc67308fef9fe69e09e93a8c92ebd9ebf9b5fb98be07c926a50c44fd29c171fee0000000e1d6a66f109000c1f55a0c9fa89009d3556fba467dfd834a6b6b7c17f1df6e3a5d5d928d500e0f6c0709e1874cec6d238abff63857662c194566e9ce1d694b08c6a26354236aa0c7ba3b2ee92aa4afd7362f6fad2da60c005a35000000494f68f2332b0cc396a7f2679152b0cde79551fdedaafa739f766f3029b04e77fffeec"}, &(0x7f0000000400)=0xed) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000480)={r6, 0x5, 0x100}, &(0x7f00000004c0)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) socket(0xa, 0x4, 0x0) 737.990046ms ago: executing program 0 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000002090188584cefb9444a143a8a41d09d50ea03000000000000000003000001180002001400018008000100ac1414aa08000200ac1414bb137bcd58c28969c6a4e47d5180dcf64140a73aefbce5fb152c3ef97aac408d6e3da7c1a364b7ebe5890837be1b149f016321912800fd754a343df63736b53a051d73855102128220b67f9051f469861d3d3f7783cfa5c77fe93adff00969bf4216862955dbc30572744df80f9b9badc3855e37e625037b69ee5ef4d21daf8e"], 0x2c}, 0x1, 0x0, 0x0, 0x8045}, 0x4) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x5ef, &(0x7f0000000500)="$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") (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1a0, 0x0, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2d9d292aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x58, 0x2, {0x1}}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x3}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @local, @icmp_id=0x65, @port=0x4e22}}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffffff, 'veth1_vlan\x00', 'vlan0\x00', {}, {}, 0x6c, 0x1, 0x19}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0xff, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x2, 0x4}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x9, @ipv6=@local, @ipv4=@broadcast, @port=0x4e24, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x14, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async, rerun: 32) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x121) (rerun: 32) fstatfs(r4, &(0x7f0000001bc0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r9, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="21000000cb9b2519e1ff00000000100000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50) r10 = getpid() (async) setreuid(0xee00, 0x0) syz_pidfd_open(r10, 0x0) (async) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) 737.374916ms ago: executing program 1 (id=341): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESOCT, @ANYBLOB="5640db98d705796fdde565ca4bfa4c255f68588104958b8a4e27bf38d084819768d4d91260cace18b66f82bcb6f6a992525cc283dbf0eb4b12eadc39b6473d2e4409f972b56ffd0ccccca0ddfdace8fce3327b3dc9a9a199f99e2ae89042b2498e65e7c461", @ANYRES16=r4, @ANYBLOB="3c4402b4d9f6de4e53e673492738238b16192c6f74f02f5268572d7bef975a5b35795f4682002e9fecbcb1b8989a9b560407b01f89cdaaefed4451e20d8f0983330d5e6749a4fbadf82451b9e417f2839d8319093f9ae0f12b9eb945eeac04ef360f", @ANYRES8, @ANYRES32=r1, @ANYBLOB="7ff01bebaccd14c6b1c8e10e26f82d8325b5003fed1b4e56df0b4e49ab69edf97e82055f15f9efabdd87d2db74e98338de160961398c587eade593bdd58d6a7fc6c122b122ccdc8e314f41cb36d4e0ebd0c422236e03d33e8397e8825ed34487aee5d8d88c53ab345e577bd95498822c40ff7883eef22500e1f7eb1f5f44782a6d1336945902ef914cee9c84a15bf9d5a9383b96b342c38b5ec17675abe9f5ea1c2a32b25b4b0ee24626c86a162203ee04ceba44ca202fae950b0537974ab321892da5a73a5c84502150b9ee14d3bb7544406b4431f2ec9d4b", @ANYRESHEX, @ANYRESDEC=r5], &(0x7f0000000100)='GPL\x00', 0x3, 0x50, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRES64=r0], 0x2dc}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) gettid() r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000680)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 675.919586ms ago: executing program 2 (id=342): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000380)=[{0x0, 0xffff}], 0x1) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x9, 0x800}, {0x2, 0x1, 0x1800}], 0x2, 0x0) 665.744356ms ago: executing program 4 (id=343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="0000d5efabf2c15c7ce0f09676e87c000294ac102d9156be7fc664a0045acb00"/42, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r0], 0x0, 0x2006, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0) write$selinux_load(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x3ab, &(0x7f0000000bc0)="$eJzs3U9PXGUXAPAz05YB3heGhTFRY3xSN7qZAH6BEtMmRhIN7ZjqwuRWBp0wZcjMBDPEWHZu/RyNS3cmxi/Aou7duWPjsoum1zB/ygCVqh2YNv5+CdzDPM/JPXMvc3M2cA5uf393c6Nd2cg6UbyWohgRxYcRC72orzA4FnvxVIzai3fLt3978+ann324srp6fS2lGyu33ltOKc2/9fPX3/xw9ZfO/z75cf6nUuwvfH7wx/Lv+6/uv3bw+NZX9Xaqt9NWs5OydKfZ7GR3GrW0Xm9vVlL6uFHL2rVU32rXWsfWNxrN7e29yLbW52a3W7V2O2Vb3bRZ66ZOM3Va3ZR9mdW3UqVSSXOzwb1nrFfvr61lK/14+ox918ZZFGN3+czVVmslO/wMl06tVO+fY1EAwAvqeP8f/6T/3zv8NnWy/785WP1X/f+V+Bv9fzfp/8dktP8fKJzaNHOBBXEODvv/qcHnd0RJ/w8AAAAAAAAAAAAAAC+Hh3lezvO8PDzmpYgoDP6eOM/Lk66P83Xq/p/4mnR9nK+Rf9wxHdH4bqe6U+0f++srG1GPRtRiMcrx6PCRMNSPb3ywen0xIqWUCjF3914v/+qDiOql4/lLUY6Fkfzp3vOll7+U+gb588PaZkfzl6Mcrzz9/HnpWH414vA4Fe+8PZJfiXL8+kU0oxHrvVMf5X+7lNL7H62eyC/19gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw31BJQ29Ef+79TjViJnYG8/srRxsKg5TBfPz+D0/m6y9GOR49fT7/YsovnZ7Pfzlevzy59w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo9rd3c2s0ai1LioYzvzvvTI1DP46q9DfvndiaSaeda4HveDSmIovjusiPM7z/Lwu7/TF3srnCa5EnHUH88FvyfOf6/8RccaeUkRM/mq8iMGknkgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOUdDvyddCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJPU7u5uZo1GrdXu7hZjEDx5ZTzBpN8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+TPAAAA//91jwgX") r10 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0xc0821, 0x0) write$P9_RMKDIR(r10, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r11, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r11], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 596.157846ms ago: executing program 3 (id=344): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x9}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000f00)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x3c, 0x4, 0x0, 0x3, 0xf0, 0x64, 0x0, 0xa, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xf4}, @timestamp_prespec={0x44, 0x4c, 0xb4, 0x3, 0x8, [{@loopback, 0xae9}, {@empty, 0x4}, {@remote, 0xb}, {@private=0xa010102, 0x1}, {@private=0xa010101, 0x773c55ee}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x6cda}, {@multicast2, 0x58b}]}, @generic={0xe, 0x6, "6cfac4cd"}, @noop, @timestamp_addr={0x44, 0x34, 0xf4, 0x1, 0x9, [{@broadcast, 0x7ff}, {@broadcast, 0x3}, {@remote, 0xffff79b1}, {@multicast2, 0xb40}, {@rand_addr=0x64010102, 0x4}, {@private=0xa010101, 0x8001}]}, @timestamp_addr={0x44, 0x3c, 0x48, 0x1, 0xb, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1, 0x4}, {@private=0xa010102, 0x9}, {@remote, 0x8}, {@rand_addr=0x64010100, 0x7}, {@local, 0x8000}, {@loopback}]}, @timestamp={0x44, 0x14, 0xdf, 0x0, 0x0, [0x97ae, 0x7fff, 0xf, 0x6]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000e80)={'erspan0\x00', r2, 0x40, 0x7800, 0x18, 0x7, {{0x10, 0x4, 0x1, 0x3b, 0x40, 0x65, 0x0, 0x4, 0x4, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0x9e, 0x0, 0x7, [0x7ff]}, @generic={0x86, 0xc, "df58514c604d593a13a2"}, @timestamp={0x44, 0x14, 0xce, 0x0, 0xf, [0x80000001, 0x600, 0x11, 0x8a]}, @noop]}}}}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4c0000000008030000000000000000000100000906000240000100001c0004800800024000010000080001407fffffff08000140800000010900010073797a310000000005000300840000007357a9152fee0a2d3a7bdc65e668cd1c6a4cfd0a2be47726d6bf9a968638460d645903cd"], 0x4c}, 0x1, 0x0, 0x0, 0x40114}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x55, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYRES8=r5], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r9}, &(0x7f0000000500), &(0x7f0000000600)}, 0x20) sendmmsg$inet6(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x5, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r11}, 0x10) r12 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r12, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) execveat(r12, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="b40200001a0000256111a10000000000850000001c000000950000000022f55485690f12b053fd8fe3335d594be1710599d8d44d6c00b8305777536f6bb6effedab21f9ccd6193d3c18387ebd75bae6c296304c364d60e5ec211cd2e7a150487bf9e4c92044f97de2b789e55e65ec213e8921891aa6b9ae9b0ea3b367ec3f3c1866bc7546af829d2307ae6e54927716b341794846ee458cfe62efb204b78aab737ffc081ac693b5fb3ff"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000941000/0x3000)=nil, 0x3000, 0x100000e, 0x2010, 0xffffffffffffffff, 0x99003000) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 595.899357ms ago: executing program 0 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80040, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000280)={0xf, 0xfff8, 0x8000, 0xe0, 0x15, "4edb544b97400daa"}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 580.976117ms ago: executing program 2 (id=346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000480)={r0, 0xfffffffffffffffd, 0x2e7, 0x5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xd2, 0x200, 0x5, 0x10000, 0x1, 0x5, "07fae8c2d893d1df7fdc9682fd522c940653db25e5ed4bd5a15f452566cc0f728bfd1a0149a145b70d813f2f228b1d8eaeeb18a1e249053c27dc82b5b5ab134661ee0cc45f06693d5a4123640974efc8089e6423af7ce2115b361a9bad6eeb6b4d3c2ed3f077131bbf9716e1ffc506f75866ea616c50cc7d0f1c6f438ea9867eebeb2165c1f9d8f25a4e70d666f5f85ef31fad61c037e592f4918e75e7b4c657b691a9d8bd928cb2c0a11664dd39bb591a2b018a4768f3f5fde97a0204cf3b45a850534af0fc0ad5fa6be4490214a08765a0"}}, 0x1ea) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r4, 0x0, &(0x7f0000000040)) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) 564.729337ms ago: executing program 0 (id=347): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYRES64=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRES8=r5, @ANYRES32=r4, @ANYRESOCT=r4], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000004c0)={r1, 0xf, {0x0, 0x0, 0x0, 0x27b2, 0xfffffffffffffffa, 0x0, 0x5, 0x17, 0x0, "c92e05f2296c8daf51858ce90a118e5e0018445fc6ad8f60f89a91e4acde1f2d079e48fb568a22d0432c7f252c873bfef528d631e8d2500021781ff39bfaa877", "2f6bb8957af86f188986840c16ab1b15d39f66e9bd08bf94f1e3692805e75408833f6e68300776ad0303db7d084f4b7262b2d4748344b113e3f13cf5c97ddbb3", "0798929f73515f561e26740da44ba795f2df6abbbb145aa1720584931b6db0ec", [0x1ff, 0x6]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kfree\x00', r6, 0x0, 0x4000000080000000}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x4c00, 0x0) r7 = mq_open(&(0x7f00000000c0)='\x00', 0x80, 0x94, &(0x7f0000000180)={0x401, 0x1, 0x800000, 0xfffffffffffffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000014c0)=[{{&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000000ac0)=""/21, 0x15}, {&(0x7f0000000640)=""/9, 0x9}, {&(0x7f0000000740)=""/10, 0xa}], 0x4, &(0x7f00000009c0)=""/130, 0x82}, 0xff}, {{0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000d00)=""/196, 0xc4}, 0x8}, {{&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000e00)=""/149, 0x95}, {&(0x7f0000000ec0)=""/71, 0x47}], 0x2, &(0x7f0000000f80)=""/64, 0x40}, 0x10000}, {{&(0x7f0000000fc0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001100)=""/239, 0xef}, {&(0x7f0000001200)=""/133, 0x85}, {&(0x7f00000012c0)=""/176, 0xb0}, {&(0x7f0000001040)=""/89, 0x59}, {&(0x7f00000015c0)=""/102, 0x66}, {&(0x7f0000001400)}], 0x6}, 0x100}], 0x4, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r10, @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(0xffffffffffffffff, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) r12 = syz_pidfd_open(0x0, 0x0) setns(r12, 0x24020000) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 259.203369ms ago: executing program 4 (id=348): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000940)=ANY=[@ANYBLOB="61f93db69929daf7e3dc92098b66e33aa158bcf329f1a066afec21cacee75ed54485f4f7df0c85f976b74acacb6df0a0baa10a984030dcbae8955397cb9c2cc1b845f12c583218d9011f8f0b82768080d3fae0a63e179df70a17a3ec93921a278e833530d5c5dead0e40475b3102899880bc93e478978022ca32cf9c920467b35971d967668fba59ae70e06fba10db2eda81b98550786b65b06e97595c534fe255be50d55a7a8be41059cad168899a5d9e45eb8f5f36fb95d1b48e466f60bbc8a29b2f1e9173a71076b2da523f6346c9b49716c5480d9fcdf6418a43ebfdadb3262cba2d60e617bff1", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x4500}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xff, 0x0, 0x205}, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@mcast2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x0, 0x4, 0x400, 0xf44, 0x80000}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x20) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe1f) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x26, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) 245.545109ms ago: executing program 4 (id=349): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811c447", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1003, 0x5, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d0000000800000003000000b4e000006ba6bde8fe089b65c02326123d925f7be0ab2af8721538b021f6c9f810f3a20395db759c89f6e3f26a29b11f98534ada89feaed32400ddd4cbf052b990adb37fb4d8b695d26cd26a2489c124b10c343e0c17ae9fd345b81e3abe7e514e19269dede0652d7c880c904abcd449009120a0a70df68a38774c5df49a1e38000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c00)={0x184, r4, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8001}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x134, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x4}, {0x7, 0x4}, {0x3, 0x8}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0x5}, {0x7, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x6}, {0x2, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xe}, {0x2, 0xa}, {0x3, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0x4}, {0x7, 0xa}, {0x2, 0x6}, {0x1, 0x6}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x2, 0x16, 0x1b, 0x24, 0x18, 0x60, 0x2, 0x18, 0x18, 0x6, 0xb, 0x36, 0x9, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x18d3, 0x401, 0xf, 0x8, 0x1, 0x7, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x7, 0x6, 0x2, 0x5, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0xddc, 0x4, 0x32, 0x33, 0xfffc, 0x3, 0xff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xd, 0x8, 0x3, 0x0, 0x8, 0x4, 0x7fff]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x400, 0x1, 0x3, 0xfff3, 0x7, 0xd, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x1000, 0x5, 0x1, 0x200, 0x2, 0x3]}}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x4, 0x9, 0xc, 0x10, 0xa, 0x2da]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x24, 0x2, 0x3, 0x30, 0x30, 0x9, 0x36, 0x16, 0xb, 0x48, 0x1, 0x4, 0x1b, 0x60, 0xb, 0x34]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x840}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r7, 0x4, 0x0) fcntl$setstatus(r7, 0x4, 0x42400) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00'}, 0x65) timer_create(0x1, 0x0, &(0x7f0000000000)) 135.134799ms ago: executing program 3 (id=350): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000040)={[{@nogrpid}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_remove_blocks\x00', r1, 0x0, 0xc5ef}, 0x18) r2 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x963cc2, 0x140) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x5, 0xf, 0x5, 0x0, 0x14, "f042e9451f2af9b7"}) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 742.67µs ago: executing program 3 (id=351): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}}, 0x4000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000880)={0x44000000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000005c0), {0x6}, &(0x7f0000001540)=""/4096, 0x1000, &(0x7f00000007c0)=""/174, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x3, {r1}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r5}, 0x20) r8 = open$dir(&(0x7f0000000180)='./file0\x00', 0x4c0002, 0x1a9) name_to_handle_at(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@fuse_with_parent={0x18, 0x82, {{0x8, 0x8, 0x5}, {0x641, 0x81, 0x80000000}}}, &(0x7f0000000240), 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) 321.52µs ago: executing program 4 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 0s ago: executing program 4 (id=353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x71) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x44, r5, 0x1, 0xfffffffe, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r8}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x91, 0x0, 0x40, @private0, @private1, 0x1, 0x0, 0x9, 0xfff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 34.961842][ T29] audit: type=1400 audit(1761790156.473:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.985075][ T29] audit: type=1400 audit(1761790156.493:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.985918][ T3305] cgroup: Unknown subsys name 'net' [ 35.012858][ T29] audit: type=1400 audit(1761790156.533:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.145720][ T3305] cgroup: Unknown subsys name 'cpuset' [ 35.152199][ T3305] cgroup: Unknown subsys name 'rlimit' [ 35.244825][ T29] audit: type=1400 audit(1761790156.753:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.268206][ T29] audit: type=1400 audit(1761790156.763:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.288811][ T29] audit: type=1400 audit(1761790156.763:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.309351][ T29] audit: type=1400 audit(1761790156.763:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.318297][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.329666][ T29] audit: type=1400 audit(1761790156.773:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.363074][ T29] audit: type=1400 audit(1761790156.773:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.386365][ T29] audit: type=1400 audit(1761790156.863:71): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.421535][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.422794][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.469997][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.521150][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.528317][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.535488][ T3316] bridge_slave_0: entered allmulticast mode [ 37.541847][ T3316] bridge_slave_0: entered promiscuous mode [ 37.565084][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.572195][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.579457][ T3316] bridge_slave_1: entered allmulticast mode [ 37.586129][ T3316] bridge_slave_1: entered promiscuous mode [ 37.635718][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.655668][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.695568][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 37.704775][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 37.713927][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.721053][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.728388][ T3315] bridge_slave_0: entered allmulticast mode [ 37.734892][ T3315] bridge_slave_0: entered promiscuous mode [ 37.742183][ T3316] team0: Port device team_slave_0 added [ 37.759678][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.766894][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.774114][ T3315] bridge_slave_1: entered allmulticast mode [ 37.780674][ T3315] bridge_slave_1: entered promiscuous mode [ 37.787900][ T3316] team0: Port device team_slave_1 added [ 37.798795][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 37.832590][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.859041][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.866246][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.892216][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.904075][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.924168][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.931271][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.957193][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.005937][ T3315] team0: Port device team_slave_0 added [ 38.014247][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.021484][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.028842][ T3324] bridge_slave_0: entered allmulticast mode [ 38.035339][ T3324] bridge_slave_0: entered promiscuous mode [ 38.047524][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.054698][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.061913][ T3326] bridge_slave_0: entered allmulticast mode [ 38.068480][ T3326] bridge_slave_0: entered promiscuous mode [ 38.075865][ T3315] team0: Port device team_slave_1 added [ 38.086919][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.093987][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.101211][ T3324] bridge_slave_1: entered allmulticast mode [ 38.107655][ T3324] bridge_slave_1: entered promiscuous mode [ 38.118661][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.125765][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.132943][ T3326] bridge_slave_1: entered allmulticast mode [ 38.139359][ T3326] bridge_slave_1: entered promiscuous mode [ 38.175105][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.182306][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.189523][ T3320] bridge_slave_0: entered allmulticast mode [ 38.196066][ T3320] bridge_slave_0: entered promiscuous mode [ 38.209825][ T3316] hsr_slave_0: entered promiscuous mode [ 38.215991][ T3316] hsr_slave_1: entered promiscuous mode [ 38.227297][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.234350][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.260381][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.271239][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.278435][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.285812][ T3320] bridge_slave_1: entered allmulticast mode [ 38.292225][ T3320] bridge_slave_1: entered promiscuous mode [ 38.299525][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.310067][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.319590][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.326567][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.352638][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.371800][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.387663][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.424252][ T3324] team0: Port device team_slave_0 added [ 38.431660][ T3324] team0: Port device team_slave_1 added [ 38.438355][ T3326] team0: Port device team_slave_0 added [ 38.445535][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.473286][ T3326] team0: Port device team_slave_1 added [ 38.480215][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.524730][ T3315] hsr_slave_0: entered promiscuous mode [ 38.530838][ T3315] hsr_slave_1: entered promiscuous mode [ 38.536936][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.542668][ T3315] Cannot create hsr debugfs directory [ 38.548916][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.555951][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.582025][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.601179][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.608274][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.634244][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.645759][ T3320] team0: Port device team_slave_0 added [ 38.651641][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.658656][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.684688][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.696186][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.703168][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.729110][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.745324][ T3320] team0: Port device team_slave_1 added [ 38.803427][ T3324] hsr_slave_0: entered promiscuous mode [ 38.809697][ T3324] hsr_slave_1: entered promiscuous mode [ 38.815674][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 38.821490][ T3324] Cannot create hsr debugfs directory [ 38.834154][ T3326] hsr_slave_0: entered promiscuous mode [ 38.840361][ T3326] hsr_slave_1: entered promiscuous mode [ 38.846282][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 38.852015][ T3326] Cannot create hsr debugfs directory [ 38.866553][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.873602][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.899769][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.911167][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.918179][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.944174][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.061202][ T3320] hsr_slave_0: entered promiscuous mode [ 39.067383][ T3320] hsr_slave_1: entered promiscuous mode [ 39.073238][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 39.079025][ T3320] Cannot create hsr debugfs directory [ 39.136443][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.150532][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.166877][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.177911][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.217229][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.226758][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.245113][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.254721][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.288553][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.300331][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.309261][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.318405][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.360657][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.389347][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.397112][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.421393][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.430373][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.442177][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.452484][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.467711][ T1715] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.474836][ T1715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.490605][ T1715] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.497794][ T1715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.513848][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.524269][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.533695][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.543277][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.553733][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.566787][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.577481][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.597429][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.604598][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.614738][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.621822][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.638832][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.646011][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.655050][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.662134][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.780406][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.790495][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.803378][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.818291][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.825410][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.834056][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.841153][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.858032][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.869816][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.881156][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.895323][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.924638][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.931891][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.941021][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.948239][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.004598][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.101779][ T3316] veth0_vlan: entered promiscuous mode [ 40.123668][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.150404][ T3316] veth1_vlan: entered promiscuous mode [ 40.162981][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.171412][ T3315] veth0_vlan: entered promiscuous mode [ 40.206492][ T3315] veth1_vlan: entered promiscuous mode [ 40.218508][ T3316] veth0_macvtap: entered promiscuous mode [ 40.229429][ T3316] veth1_macvtap: entered promiscuous mode [ 40.238939][ T3326] veth0_vlan: entered promiscuous mode [ 40.260402][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.273068][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.285435][ T3315] veth0_macvtap: entered promiscuous mode [ 40.292740][ T3326] veth1_vlan: entered promiscuous mode [ 40.303361][ T3315] veth1_macvtap: entered promiscuous mode [ 40.328001][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.338927][ T3320] veth0_vlan: entered promiscuous mode [ 40.344612][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.354392][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.364203][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.375162][ T3324] veth0_vlan: entered promiscuous mode [ 40.385711][ T3320] veth1_vlan: entered promiscuous mode [ 40.392593][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.404051][ T3324] veth1_vlan: entered promiscuous mode [ 40.412284][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.428592][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.428673][ T29] audit: type=1400 audit(1761790161.943:81): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bB4rt6/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.440795][ T3326] veth0_macvtap: entered promiscuous mode [ 40.469722][ T29] audit: type=1400 audit(1761790161.983:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.491861][ T29] audit: type=1400 audit(1761790161.983:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bB4rt6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.517087][ T29] audit: type=1400 audit(1761790161.983:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.538964][ T29] audit: type=1400 audit(1761790161.983:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bB4rt6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.565612][ T29] audit: type=1400 audit(1761790161.983:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.bB4rt6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3872 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.593021][ T29] audit: type=1400 audit(1761790161.983:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.614508][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.615689][ T29] audit: type=1400 audit(1761790162.133:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.635616][ T3320] veth0_macvtap: entered promiscuous mode [ 40.645976][ T29] audit: type=1400 audit(1761790162.133:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3873 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.658646][ T3324] veth0_macvtap: entered promiscuous mode [ 40.688357][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.689778][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.713902][ T3320] veth1_macvtap: entered promiscuous mode [ 40.724107][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.733948][ T3326] veth1_macvtap: entered promiscuous mode [ 40.736743][ T29] audit: type=1400 audit(1761790162.253:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.755975][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.775919][ T3324] veth1_macvtap: entered promiscuous mode [ 40.785591][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.803375][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.818838][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.830157][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.841809][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.856291][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.877461][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.899509][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.929931][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.955766][ T1943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.000233][ T1943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.019247][ T1943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.079163][ T1943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.117650][ T3503] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 41.129101][ T3504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3504 comm=syz.2.3 [ 41.281204][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.300506][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.313185][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.322326][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.331245][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.540044][ T3511] mmap: syz.4.10 (3511) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.625860][ T3514] SELinux: policydb version 0 does not match my version range 15-35 [ 41.644298][ T3514] SELinux: failed to load policy [ 41.649631][ T3519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3519 comm=syz.3.11 [ 41.753361][ T3497] Set syz1 is full, maxelem 65536 reached [ 42.127662][ T3587] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 42.157753][ T3587] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.178381][ T3587] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3587 comm=syz.2.15 [ 42.488479][ T3597] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 42.605223][ T3600] bridge0: entered promiscuous mode [ 42.625118][ T3600] macvtap1: entered allmulticast mode [ 42.630613][ T3600] bridge0: entered allmulticast mode [ 42.657910][ T3603] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 42.698873][ T3604] hub 1-0:1.0: USB hub found [ 42.714163][ T3604] hub 1-0:1.0: 8 ports detected [ 42.719426][ T3600] bridge0: left allmulticast mode [ 42.724688][ T3600] bridge0: left promiscuous mode [ 42.797128][ T3609] loop4: detected capacity change from 0 to 512 [ 42.814624][ T3609] ======================================================= [ 42.814624][ T3609] WARNING: The mand mount option has been deprecated and [ 42.814624][ T3609] and is ignored by this kernel. Remove the mand [ 42.814624][ T3609] option from the mount to silence this warning. [ 42.814624][ T3609] ======================================================= [ 42.927581][ T3611] SELinux: failed to load policy [ 42.969626][ T3621] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 43.009005][ T3611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 43.022821][ T3615] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.058376][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.093731][ T3629] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 43.102746][ T3609] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.138636][ T3624] loop0: detected capacity change from 0 to 512 [ 43.170066][ T3631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.31'. [ 43.214974][ T3624] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.28: inode has both inline data and extents flags [ 43.243969][ T3624] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.28: couldn't read orphan inode 15 (err -117) [ 43.281025][ T3636] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 43.295821][ T3624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.324622][ T3627] loop3: detected capacity change from 0 to 164 [ 43.339227][ T3624] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 43.385195][ T3627] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.402308][ T3627] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.423361][ T3606] Set syz1 is full, maxelem 65536 reached [ 43.453286][ T3639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3639 comm=syz.1.33 [ 43.481904][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.528555][ T3641] loop2: detected capacity change from 0 to 1024 [ 43.556890][ T3641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.648482][ T3643] xt_hashlimit: max too large, truncated to 1048576 [ 43.683611][ T3634] Process accounting resumed [ 43.713168][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.742345][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.795580][ T3657] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 43.992867][ T3668] loop2: detected capacity change from 0 to 512 [ 44.087544][ T3670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37'. [ 44.172161][ T3668] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.42: Failed to acquire dquot type 1 [ 44.184995][ T3668] EXT4-fs (loop2): 1 truncate cleaned up [ 44.191138][ T3668] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.207080][ T3668] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.233688][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.439763][ T3685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 44.480420][ T3687] loop0: detected capacity change from 0 to 512 [ 44.487411][ T3687] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 44.506540][ T3692] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 44.546128][ T3694] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'. [ 44.583311][ T3697] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 44.705414][ T3709] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3709 comm=syz.4.54 [ 45.248086][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 45.535192][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 45.535210][ T29] audit: type=1400 audit(2000000001.810:234): avc: denied { create } for pid=3732 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.561649][ T29] audit: type=1400 audit(2000000001.810:235): avc: denied { write } for pid=3732 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 45.593737][ T3729] loop2: detected capacity change from 0 to 1024 [ 45.600507][ T3737] loop4: detected capacity change from 0 to 512 [ 45.609770][ T3737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.624267][ T3737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.704766][ T3737] EXT4-fs (loop4): 1 truncate cleaned up [ 45.713358][ T3729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.730244][ T3729] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.745550][ T3737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.774094][ T3729] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.789034][ T29] audit: type=1326 audit(2000000002.110:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f890efc9 code=0x7ffc0000 [ 45.812286][ T29] audit: type=1326 audit(2000000002.110:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f890efc9 code=0x7ffc0000 [ 45.835465][ T29] audit: type=1326 audit(2000000002.110:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f890efc9 code=0x7ffc0000 [ 45.956074][ T29] audit: type=1326 audit(2000000002.180:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f890efc9 code=0x7ffc0000 [ 45.979380][ T29] audit: type=1326 audit(2000000002.180:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa3f890f003 code=0x7ffc0000 [ 46.002475][ T29] audit: type=1326 audit(2000000002.180:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa3f890f087 code=0x7ffc0000 [ 46.026146][ T29] audit: type=1326 audit(2000000002.180:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa3f88c644d code=0x7ffc0000 [ 46.049967][ T29] audit: type=1326 audit(2000000002.180:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3735 comm="syz.4.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa3f8943709 code=0x7ffc0000 [ 46.220023][ T3750] loop1: detected capacity change from 0 to 512 [ 46.231065][ T3751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3751 comm=syz.0.66 [ 46.252044][ T3750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.281621][ T3750] EXT4-fs (loop1): 1 truncate cleaned up [ 46.294321][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.458650][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.510165][ T3757] netlink: 'syz.4.68': attribute type 1 has an invalid length. [ 46.779367][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.886919][ T3771] loop2: detected capacity change from 0 to 512 [ 46.902426][ T3771] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.71: inode #0: comm syz.2.71: iget: illegal inode # [ 46.915377][ T3773] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 46.919785][ T3771] EXT4-fs (loop2): get orphan inode failed [ 46.931475][ T3771] EXT4-fs (loop2): mount failed [ 46.938600][ T3773] SELinux: failed to load policy [ 47.002946][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.71'. [ 47.035747][ T3771] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'. [ 47.062352][ T3783] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 47.159527][ T3790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3790 comm=syz.0.77 [ 47.468068][ T3794] netlink: 'syz.4.79': attribute type 1 has an invalid length. [ 47.564073][ T3798] netlink: 108 bytes leftover after parsing attributes in process `syz.4.81'. [ 47.603562][ T3805] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20003 [ 47.622790][ T3805] x_tables: duplicate underflow at hook 2 [ 47.715183][ T3765] syz.2.71 (3765) used greatest stack depth: 7096 bytes left [ 47.767549][ T3814] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 47.781050][ T3816] loop2: detected capacity change from 0 to 1024 [ 47.788825][ T3814] SELinux: failed to load policy [ 47.796013][ T3816] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 47.844392][ T3818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.89'. [ 48.001931][ T3816] loop2: detected capacity change from 0 to 2048 [ 48.017345][ T3825] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 48.029707][ T3826] loop0: detected capacity change from 0 to 512 [ 48.048513][ T3826] ext4: Unknown parameter 'euid>00000000000000000000' [ 48.096122][ T3825] loop1: detected capacity change from 0 to 2048 [ 48.108891][ T3816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.134144][ T3825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.153547][ T3816] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.185027][ T3825] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 48.200955][ T3816] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 48.340877][ T3834] loop0: detected capacity change from 0 to 512 [ 48.367430][ T3834] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.94: bg 0: block 248: padding at end of block bitmap is not set [ 48.386937][ T3842] bridge: RTM_NEWNEIGH with invalid ether address [ 48.420576][ T3834] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.94: Failed to acquire dquot type 1 [ 48.459722][ T3834] EXT4-fs (loop0): 1 truncate cleaned up [ 48.492502][ T3834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.505110][ T3834] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.334420][ T3854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.102'. [ 49.394156][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.406861][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.475670][ T3866] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 49.512931][ T3866] SELinux: failed to load policy [ 49.547958][ T3871] loop1: detected capacity change from 0 to 1024 [ 49.583445][ T3864] loop3: detected capacity change from 0 to 8192 [ 49.610183][ T3871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.732293][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.801368][ T3884] usb usb8: usbfs: process 3884 (syz.3.111) did not claim interface 0 before use [ 49.818981][ T3885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.114'. [ 49.827896][ T3891] netlink: 'syz.4.116': attribute type 1 has an invalid length. [ 49.842368][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 49.851419][ T3893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.117'. [ 49.907871][ T3902] loop4: detected capacity change from 0 to 1024 [ 49.931172][ T3902] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 49.954095][ T3897] loop3: detected capacity change from 0 to 512 [ 49.980118][ T3897] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.120: bg 0: block 248: padding at end of block bitmap is not set [ 49.998819][ T3897] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.120: Failed to acquire dquot type 1 [ 49.999405][ T3904] loop2: detected capacity change from 0 to 512 [ 50.018509][ T3897] EXT4-fs (loop3): 1 truncate cleaned up [ 50.024921][ T3897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.037769][ T3897] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.055979][ T3904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.121: bg 0: block 248: padding at end of block bitmap is not set [ 50.076087][ T3904] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.121: Failed to acquire dquot type 1 [ 50.077813][ T3907] loop0: detected capacity change from 0 to 512 [ 50.120077][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.146074][ T3904] EXT4-fs (loop2): 1 truncate cleaned up [ 50.152618][ T3904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.165433][ T3904] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.225556][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.280700][ T3927] SELinux: failed to load policy [ 50.300814][ T3929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.128'. [ 50.336914][ T3933] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 50.374203][ T3937] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 50.487792][ T3921] netlink: 96 bytes leftover after parsing attributes in process `syz.0.125'. [ 50.587697][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 50.587715][ T29] audit: type=1400 audit(2000000006.910:458): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.615543][ T29] audit: type=1400 audit(2000000006.940:459): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.712246][ T29] audit: type=1326 audit(2000000007.030:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bb99efc9 code=0x7ffc0000 [ 50.735603][ T29] audit: type=1326 audit(2000000007.030:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bb99efc9 code=0x7ffc0000 [ 50.759156][ T29] audit: type=1326 audit(2000000007.030:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f25bb99efc9 code=0x7ffc0000 [ 50.782559][ T29] audit: type=1326 audit(2000000007.030:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bb99efc9 code=0x7ffc0000 [ 50.821268][ T29] audit: type=1400 audit(2000000007.120:464): avc: denied { name_bind } for pid=3957 comm="syz.3.137" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.843287][ T29] audit: type=1326 audit(2000000007.160:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6efd2efc9 code=0x7ffc0000 [ 50.868012][ T29] audit: type=1326 audit(2000000007.160:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6efd2efc9 code=0x7ffc0000 [ 50.891462][ T29] audit: type=1326 audit(2000000007.170:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3962 comm="syz.3.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6efd2efc9 code=0x7ffc0000 [ 50.899183][ T3965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.140'. [ 50.932193][ T3961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 50.959286][ T3961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3961 comm=syz.4.139 [ 51.049620][ T3973] SELinux: failed to load policy [ 51.056859][ T3973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 51.168640][ T3985] batman_adv: batadv0: Adding interface: vlan2 [ 51.175063][ T3985] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.200471][ T3985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.210967][ T3985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.220891][ T3985] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 51.306720][ T3996] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 51.349862][ T4000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4000 comm=syz.1.151 [ 51.916726][ T4007] SELinux: failed to load policy [ 51.923813][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 52.168111][ T4016] SELinux: failed to load policy [ 52.198584][ T4018] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 52.299411][ T4028] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 52.310512][ T4028] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.321008][ T4028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4028 comm=syz.3.165 [ 52.415330][ T4032] syz.3.167 uses obsolete (PF_INET,SOCK_PACKET) [ 52.879093][ T4055] capability: warning: `syz.2.171' uses deprecated v2 capabilities in a way that may be insecure [ 52.917230][ T4064] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 52.952447][ T4055] loop2: detected capacity change from 0 to 512 [ 52.967463][ T4055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.093268][ T4078] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 53.101802][ T4078] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 53.115169][ T4078] team0: Port device dummy0 added [ 53.123771][ T4078] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 53.149054][ T4078] team0: Port device dummy0 removed [ 53.162221][ T4078] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.279937][ T4084] netlink: 'syz.1.179': attribute type 13 has an invalid length. [ 53.395742][ T4084] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.403055][ T4084] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.487660][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.500029][ T4084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.543167][ T4086] loop3: detected capacity change from 0 to 512 [ 53.550271][ T4086] EXT4-fs: Ignoring removed nobh option [ 53.578854][ T4086] EXT4-fs (loop3): failed to initialize system zone (-117) [ 53.599179][ T4086] EXT4-fs (loop3): mount failed [ 53.623322][ T3573] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.653007][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.668694][ T3573] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.714468][ T3573] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.731552][ T3573] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.832524][ T4094] loop2: detected capacity change from 0 to 1024 [ 53.841635][ T4103] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 53.867343][ T4094] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 53.896898][ T4094] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 53.931297][ T4094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 53.968265][ T4094] System zones: 0-1, 4-36, 102-102 [ 53.974123][ T4094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.029045][ T4094] loop2: Can't mount, would change RO state [ 54.085091][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.314963][ T4135] SELinux: failed to load policy [ 54.380953][ T4136] loop0: detected capacity change from 0 to 1024 [ 54.532125][ T4141] __nla_validate_parse: 3 callbacks suppressed [ 54.532144][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 54.611574][ T4111] Set syz1 is full, maxelem 65536 reached [ 54.676758][ T4148] delete_channel: no stack [ 54.704863][ T4148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.200'. [ 54.713838][ T4145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 54.720409][ T4145] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 54.728617][ T4145] vhci_hcd vhci_hcd.0: Device attached [ 54.764983][ T4151] vhci_hcd: connection closed [ 54.768241][ T3569] vhci_hcd: stop threads [ 54.777349][ T3569] vhci_hcd: release socket [ 54.781812][ T3569] vhci_hcd: disconnect device [ 54.789777][ T4148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 54.823857][ T4162] loop0: detected capacity change from 0 to 128 [ 54.872559][ T4162] vfat: Unknown parameter '0x0000000000000004' [ 54.932664][ T4147] delete_channel: no stack [ 55.127122][ T4172] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 55.423601][ T4181] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 55.567365][ T4189] loop3: detected capacity change from 0 to 128 [ 55.666340][ T29] kauditd_printk_skb: 760 callbacks suppressed [ 55.666358][ T29] audit: type=1400 audit(2000000011.990:1228): avc: denied { execute } for pid=4192 comm="syz.3.213" path=2F6D656D66643AA126D769202864656C6574656429 dev="hugetlbfs" ino=7011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 55.762330][ T29] audit: type=1326 audit(2000000012.080:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.785757][ T29] audit: type=1326 audit(2000000012.080:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.809183][ T29] audit: type=1326 audit(2000000012.080:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.813924][ T4210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4210 comm=syz.1.214 [ 55.832557][ T29] audit: type=1326 audit(2000000012.080:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.832592][ T29] audit: type=1326 audit(2000000012.080:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.845475][ T4211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4211 comm=syz.4.215 [ 55.869233][ T29] audit: type=1326 audit(2000000012.080:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.928443][ T29] audit: type=1326 audit(2000000012.080:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.951951][ T29] audit: type=1326 audit(2000000012.080:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 55.975395][ T29] audit: type=1326 audit(2000000012.080:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 56.164222][ T4182] Set syz1 is full, maxelem 65536 reached [ 56.223660][ T4219] SELinux: failed to load policy [ 56.257130][ T4219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 56.288097][ T4226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 56.358618][ T4231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.224'. [ 56.526237][ T4239] loop0: detected capacity change from 0 to 512 [ 56.550297][ T4239] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.570189][ T4239] EXT4-fs (loop0): 1 truncate cleaned up [ 56.595973][ T4245] loop1: detected capacity change from 0 to 512 [ 56.608257][ T4239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.621648][ T4233] FAULT_INJECTION: forcing a failure. [ 56.621648][ T4233] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 56.634901][ T4233] CPU: 1 UID: 0 PID: 4233 Comm: syz.2.225 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.634933][ T4233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.634979][ T4233] Call Trace: [ 56.634988][ T4233] [ 56.634997][ T4233] __dump_stack+0x1d/0x30 [ 56.635100][ T4233] dump_stack_lvl+0xe8/0x140 [ 56.635121][ T4233] dump_stack+0x15/0x1b [ 56.635138][ T4233] should_fail_ex+0x265/0x280 [ 56.635162][ T4233] should_fail+0xb/0x20 [ 56.635190][ T4233] should_fail_usercopy+0x1a/0x20 [ 56.635217][ T4233] _copy_to_user+0x20/0xa0 [ 56.635272][ T4233] simple_read_from_buffer+0xb5/0x130 [ 56.635300][ T4233] proc_fail_nth_read+0x10e/0x150 [ 56.635334][ T4233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 56.635412][ T4233] vfs_read+0x1a8/0x770 [ 56.635490][ T4233] ? __rcu_read_unlock+0x4f/0x70 [ 56.635520][ T4233] ? __fget_files+0x184/0x1c0 [ 56.635556][ T4233] ksys_read+0xda/0x1a0 [ 56.635666][ T4233] __x64_sys_read+0x40/0x50 [ 56.635709][ T4233] x64_sys_call+0x27c0/0x3000 [ 56.635738][ T4233] do_syscall_64+0xd2/0x200 [ 56.635759][ T4233] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.635871][ T4233] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.635910][ T4233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.635936][ T4233] RIP: 0033:0x7ff11e2dd9dc [ 56.635954][ T4233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.636045][ T4233] RSP: 002b:00007ff11cd3f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.636068][ T4233] RAX: ffffffffffffffda RBX: 00007ff11e535fa0 RCX: 00007ff11e2dd9dc [ 56.636083][ T4233] RDX: 000000000000000f RSI: 00007ff11cd3f0a0 RDI: 0000000000000007 [ 56.636097][ T4233] RBP: 00007ff11cd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 56.636111][ T4233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.636163][ T4233] R13: 00007ff11e536038 R14: 00007ff11e535fa0 R15: 00007ffc192bf448 [ 56.636183][ T4233] [ 56.639200][ T4245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.851176][ T4250] geneve2: entered promiscuous mode [ 56.856476][ T4250] geneve2: entered allmulticast mode [ 56.867989][ T4245] EXT4-fs (loop1): 1 truncate cleaned up [ 56.874473][ T4245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.962325][ T4254] IPVS: nq: FWM 3 0x00000003 - no destination available [ 56.970461][ T36] IPVS: starting estimator thread 0... [ 56.981063][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.138741][ T4265] IPVS: nq: FWM 3 0x00000003 - no destination available [ 57.164594][ T4258] SELinux: failed to load policy [ 57.180911][ T4255] IPVS: using max 2256 ests per chain, 112800 per kthread [ 57.221167][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.271994][ T4268] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 57.403390][ T4269] SELinux: failed to load policy [ 57.415162][ T4269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 57.435555][ T4274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4274 comm=syz.1.239 [ 57.560718][ T4249] Set syz1 is full, maxelem 65536 reached [ 57.703117][ T4284] rdma_op ffff888137d73d80 conn xmit_rdma 0000000000000000 [ 58.373856][ T4298] loop1: detected capacity change from 0 to 4096 [ 58.408974][ T4300] loop2: detected capacity change from 0 to 2048 [ 58.431124][ T3306] udevd[3306]: symlink '../../loop2' '/dev/disk/by-diskseq/93.tmp-b7:2' failed: Read-only file system [ 58.443490][ T3306] udevd[3306]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 58.443630][ T3707] udevd[3707]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 58.468309][ T4298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.482355][ T4310] loop4: detected capacity change from 0 to 512 [ 58.484056][ T3707] udevd[3707]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 58.502353][ T4310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.518498][ T4300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.536398][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 58.538891][ T3707] udevd[3707]: symlink '../../loop1' '/dev/disk/by-diskseq/92.tmp-b7:1' failed: Read-only file system [ 58.564177][ T3707] udevd[3707]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 58.576672][ T4310] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.249: corrupted xattr block 95: invalid header [ 58.588988][ T3306] udevd[3306]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 58.606148][ T4314] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 58.617803][ T4310] EXT4-fs (loop4): Remounting filesystem read-only [ 58.624453][ T4310] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 58.637554][ T4310] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 58.668385][ T4312] lo speed is unknown, defaulting to 1000 [ 58.674398][ T4312] lo speed is unknown, defaulting to 1000 [ 58.680404][ T4312] lo speed is unknown, defaulting to 1000 [ 58.758085][ T3707] udevd[3707]: symlink '../../loop4' '/dev/disk/by-diskseq/94.tmp-b7:4' failed: Read-only file system [ 58.765365][ T4312] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.771727][ T4319] atomic_op ffff888138e70128 conn xmit_atomic 0000000000000000 [ 58.782390][ T4310] EXT4-fs (loop4): 1 orphan inode deleted [ 58.791467][ T3707] udevd[3707]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 58.797636][ T4310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.816521][ T4321] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 58.826261][ T4312] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 58.857601][ T4321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.869863][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.882331][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 58.893376][ T4312] lo speed is unknown, defaulting to 1000 [ 58.928309][ T4321] bond1 (unregistering): Released all slaves [ 58.944164][ T4312] lo speed is unknown, defaulting to 1000 [ 58.952035][ T4312] lo speed is unknown, defaulting to 1000 [ 58.958935][ T4312] lo speed is unknown, defaulting to 1000 [ 58.965558][ T4312] lo speed is unknown, defaulting to 1000 [ 59.004944][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.086600][ T4335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4335 comm=syz.0.256 [ 59.153397][ T4335] lo speed is unknown, defaulting to 1000 [ 59.271900][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.691002][ T4353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.263'. [ 59.772942][ T4357] loop2: detected capacity change from 0 to 128 [ 59.786368][ T4357] msdos: Bad value for 'gid' [ 59.791112][ T4357] msdos: Bad value for 'gid' [ 59.820577][ T4362] loop4: detected capacity change from 0 to 512 [ 59.847730][ T4362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.880131][ T4362] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.918705][ T4366] loop3: detected capacity change from 0 to 512 [ 59.981899][ T4366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.982093][ T4370] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 60.052678][ T4366] EXT4-fs (loop3): 1 truncate cleaned up [ 60.066650][ T4366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.088500][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.144943][ T4377] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.158813][ T4377] SELinux: failed to load policy [ 60.302393][ T4389] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 60.388881][ T4393] rdma_op ffff8881316c3180 conn xmit_rdma 0000000000000000 [ 60.544297][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.631150][ T4398] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 60.645075][ T4403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4403 comm=syz.2.279 [ 60.767565][ T4407] tipc: Started in network mode [ 60.772608][ T4407] tipc: Node identity ac14140f, cluster identity 4711 [ 60.840268][ T4407] tipc: New replicast peer: 255.255.255.255 [ 60.846620][ T4407] tipc: Enabled bearer , priority 10 [ 60.873552][ T4403] lo speed is unknown, defaulting to 1000 [ 60.960337][ T4413] FAULT_INJECTION: forcing a failure. [ 60.960337][ T4413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.973605][ T4413] CPU: 0 UID: 0 PID: 4413 Comm: syz.3.280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.973779][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.973795][ T4413] Call Trace: [ 60.973802][ T4413] [ 60.973811][ T4413] __dump_stack+0x1d/0x30 [ 60.973838][ T4413] dump_stack_lvl+0xe8/0x140 [ 60.973935][ T4413] dump_stack+0x15/0x1b [ 60.973955][ T4413] should_fail_ex+0x265/0x280 [ 60.973974][ T4413] should_fail+0xb/0x20 [ 60.973989][ T4413] should_fail_usercopy+0x1a/0x20 [ 60.974040][ T4413] _copy_from_user+0x1c/0xb0 [ 60.974073][ T4413] __tun_chr_ioctl+0x147/0x14c0 [ 60.974159][ T4413] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 60.974186][ T4413] tun_chr_ioctl+0x27/0x40 [ 60.974234][ T4413] __se_sys_ioctl+0xce/0x140 [ 60.974263][ T4413] __x64_sys_ioctl+0x43/0x50 [ 60.974286][ T4413] x64_sys_call+0x1816/0x3000 [ 60.974314][ T4413] do_syscall_64+0xd2/0x200 [ 60.974397][ T4413] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.974425][ T4413] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.974517][ T4413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.974601][ T4413] RIP: 0033:0x7fa6efd2efc9 [ 60.974628][ T4413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.974650][ T4413] RSP: 002b:00007fa6ee797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.974706][ T4413] RAX: ffffffffffffffda RBX: 00007fa6eff85fa0 RCX: 00007fa6efd2efc9 [ 60.974720][ T4413] RDX: 0000200000000100 RSI: 00000000400454d9 RDI: 0000000000000007 [ 60.974736][ T4413] RBP: 00007fa6ee797090 R08: 0000000000000000 R09: 0000000000000000 [ 60.974751][ T4413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.974817][ T4413] R13: 00007fa6eff86038 R14: 00007fa6eff85fa0 R15: 00007ffe4187da58 [ 60.974842][ T4413] [ 61.189080][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 61.189133][ T29] audit: type=1326 audit(2000000017.500:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f890efc9 code=0x7ffc0000 [ 61.219371][ T29] audit: type=1326 audit(2000000017.500:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fa3f890efc9 code=0x7ffc0000 [ 61.242730][ T29] audit: type=1326 audit(2000000017.500:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4414 comm="syz.4.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f890efc9 code=0x7ffc0000 [ 61.273554][ T29] audit: type=1400 audit(2000000017.590:1546): avc: denied { audit_write } for pid=4416 comm="gtp" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.294266][ T29] audit: type=1107 audit(2000000017.590:1547): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¦ôà' [ 61.349654][ T4426] loop1: detected capacity change from 0 to 512 [ 61.391080][ T4426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.403808][ T4426] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.449461][ T29] audit: type=1400 audit(2000000017.770:1548): avc: denied { read } for pid=4437 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.467568][ T4442] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 61.483704][ T4439] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 61.492385][ T4439] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 61.615941][ T4450] program syz.0.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.628257][ T29] audit: type=1326 audit(2000000017.951:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 61.668049][ T29] audit: type=1326 audit(2000000017.951:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 61.691771][ T29] audit: type=1326 audit(2000000017.951:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 61.715702][ T29] audit: type=1326 audit(2000000017.951:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4447 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ceb7efc9 code=0x7ffc0000 [ 61.729269][ T4455] sctp: [Deprecated]: syz.2.296 (pid 4455) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.729269][ T4455] Use struct sctp_sack_info instead [ 61.759409][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 61.788159][ T4454] lo speed is unknown, defaulting to 1000 [ 61.856685][ T3404] tipc: Node number set to 2886997007 [ 61.868299][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.917178][ T4461] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 61.952436][ T4463] netlink: 'syz.1.299': attribute type 6 has an invalid length. [ 62.056690][ T4473] loop0: detected capacity change from 0 to 128 [ 62.081886][ T4473] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.102647][ T4475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4475 comm=syz.3.304 [ 62.115334][ T4473] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.140114][ T4475] lo speed is unknown, defaulting to 1000 [ 62.253721][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.261221][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.304126][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.314568][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.351911][ T3574] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.362464][ T3574] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.373014][ T3574] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.389491][ T3574] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.435154][ T4483] loop2: detected capacity change from 0 to 1024 [ 62.444588][ T4483] EXT4-fs: inline encryption not supported [ 62.476118][ T4483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.518022][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.537247][ T4496] FAULT_INJECTION: forcing a failure. [ 62.537247][ T4496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.550397][ T4496] CPU: 0 UID: 0 PID: 4496 Comm: syz.4.312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.550424][ T4496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.550496][ T4496] Call Trace: [ 62.550504][ T4496] [ 62.550515][ T4496] __dump_stack+0x1d/0x30 [ 62.550543][ T4496] dump_stack_lvl+0xe8/0x140 [ 62.550631][ T4496] dump_stack+0x15/0x1b [ 62.550652][ T4496] should_fail_ex+0x265/0x280 [ 62.550676][ T4496] should_fail+0xb/0x20 [ 62.550695][ T4496] should_fail_usercopy+0x1a/0x20 [ 62.550721][ T4496] _copy_to_user+0x20/0xa0 [ 62.550802][ T4496] simple_read_from_buffer+0xb5/0x130 [ 62.550835][ T4496] proc_fail_nth_read+0x10e/0x150 [ 62.550876][ T4496] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.550928][ T4496] vfs_read+0x1a8/0x770 [ 62.550967][ T4496] ? __rcu_read_unlock+0x4f/0x70 [ 62.550993][ T4496] ? __fget_files+0x184/0x1c0 [ 62.551022][ T4496] ksys_read+0xda/0x1a0 [ 62.551071][ T4496] __x64_sys_read+0x40/0x50 [ 62.551105][ T4496] x64_sys_call+0x27c0/0x3000 [ 62.551134][ T4496] do_syscall_64+0xd2/0x200 [ 62.551178][ T4496] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.551212][ T4496] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.551242][ T4496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.551331][ T4496] RIP: 0033:0x7fa3f890d9dc [ 62.551347][ T4496] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.551413][ T4496] RSP: 002b:00007fa3f736f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.551436][ T4496] RAX: ffffffffffffffda RBX: 00007fa3f8b65fa0 RCX: 00007fa3f890d9dc [ 62.551498][ T4496] RDX: 000000000000000f RSI: 00007fa3f736f0a0 RDI: 0000000000000008 [ 62.551547][ T4496] RBP: 00007fa3f736f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.551563][ T4496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.551618][ T4496] R13: 00007fa3f8b66038 R14: 00007fa3f8b65fa0 R15: 00007ffd21375af8 [ 62.551645][ T4496] [ 62.780081][ T4500] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 62.907970][ T3539] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.937947][ T4517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.957084][ T4518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'. [ 63.003248][ T4521] tipc: Started in network mode [ 63.008321][ T4521] tipc: Node identity ac14140f, cluster identity 4711 [ 63.019691][ T4521] tipc: New replicast peer: 255.255.255.83 [ 63.025721][ T4521] tipc: Enabled bearer , priority 10 [ 63.049181][ T4517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.063422][ T4530] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 63.100492][ T4534] Zero length message leads to an empty skb [ 63.138496][ T4517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.178220][ T4531] bond1 (unregistering): Released all slaves [ 63.197591][ T4517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.237159][ T4547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4547 comm=syz.0.329 [ 63.263364][ T4547] lo speed is unknown, defaulting to 1000 [ 63.291523][ T3539] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.312717][ T3539] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.323940][ T3571] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.336776][ T3571] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.744718][ T3707] udevd[3707]: symlink '../../loop3' '/dev/disk/by-diskseq/105.tmp-b7:3' failed: Read-only file system [ 63.796874][ T3707] udevd[3707]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 63.799693][ T4550] SELinux: failed to load policy [ 63.837938][ T3707] udevd[3707]: symlink '../../loop4' '/dev/disk/by-diskseq/102.tmp-b7:4' failed: Read-only file system [ 63.868300][ T3707] udevd[3707]: symlink '../../loop3' '/dev/disk/by-diskseq/105.tmp-b7:3' failed: Read-only file system [ 63.911113][ T3707] udevd[3707]: symlink '../../loop3' '/dev/disk/by-diskseq/105.tmp-b7:3' failed: Read-only file system [ 63.955518][ T3845] printk: udevd: 109 output lines suppressed due to ratelimiting [ 63.968674][ T4567] loop3: detected capacity change from 0 to 512 [ 63.981710][ T4567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.994904][ T4567] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.125043][ T4581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.340'. [ 64.153842][ T36] tipc: Node number set to 2886997007 [ 64.166899][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.177893][ T4591] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 64.186655][ T4591] SELinux: failed to load policy [ 64.207852][ T3404] hid (null): invalid report_count 64898 [ 64.213756][ T3404] hid (null): unknown global tag 0xd [ 64.219163][ T3404] hid (null): global environment stack underflow [ 64.225587][ T3404] hid (null): unknown global tag 0xc [ 64.230924][ T3404] hid (null): invalid report_size -1749083373 [ 64.231073][ T4591] loop4: detected capacity change from 0 to 512 [ 64.237155][ T3404] hid (null): unknown global tag 0xc [ 64.237204][ T3404] hid (null): unknown global tag 0x66 [ 64.254404][ T3404] hid (null): unknown global tag 0xe [ 64.368198][ T4603] lo speed is unknown, defaulting to 1000 [ 64.420970][ T4591] FAT-fs (loop4): error, invalid access to FAT (entry 0x22000003) [ 64.428912][ T4591] FAT-fs (loop4): Filesystem has been set read-only [ 64.437254][ T4605] process 'syz.3.344' launched '/dev/fd/10' with NULL argv: empty string added [ 64.496341][ T4608] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.540852][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 64.551122][ T4611] netlink: 32 bytes leftover after parsing attributes in process `syz.4.349'. [ 64.566119][ T4611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 64.577298][ C1] hrtimer: interrupt took 22916 ns [ 64.655610][ T4614] loop3: detected capacity change from 0 to 128 [ 64.669101][ T4614] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.681785][ T4614] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.728888][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.784190][ T4619] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 64.795119][ T4590] ================================================================== [ 64.803229][ T4590] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 64.809835][ T4590] [ 64.812165][ T4590] write to 0xffff88812bf0a9f0 of 104 bytes by task 4619 on cpu 1: [ 64.819987][ T4590] __bpf_get_stackid+0x761/0x800 [ 64.824947][ T4590] bpf_get_stackid+0xe9/0x120 [ 64.829634][ T4590] bpf_get_stackid_raw_tp+0xf6/0x120 [ 64.834936][ T4590] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 64.840405][ T4590] bpf_trace_run2+0x107/0x1c0 [ 64.845114][ T4590] __traceiter_kfree+0x2e/0x50 [ 64.849897][ T4590] kfree+0x351/0x400 [ 64.853819][ T4590] bpf_prog_select_runtime+0x4d0/0x580 [ 64.859291][ T4590] bpf_prepare_filter+0xb7d/0xbd0 [ 64.864342][ T4590] bpf_prog_create_from_user+0x1e6/0x260 [ 64.869997][ T4590] do_seccomp+0x5ef/0xa40 [ 64.874349][ T4590] __x64_sys_seccomp+0x40/0x50 [ 64.879138][ T4590] x64_sys_call+0x2ad8/0x3000 [ 64.883833][ T4590] do_syscall_64+0xd2/0x200 [ 64.888363][ T4590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.894289][ T4590] [ 64.894302][ T4590] read to 0xffff88812bf0aa40 of 8 bytes by task 4590 on cpu 0: [ 64.894323][ T4590] bcmp+0x23/0x90 [ 64.907831][ T4590] __bpf_get_stackid+0x371/0x800 [ 64.912809][ T4590] bpf_get_stackid+0xe9/0x120 [ 64.917500][ T4590] bpf_get_stackid_raw_tp+0xf6/0x120 [ 64.922901][ T4590] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 64.929000][ T4590] bpf_trace_run2+0x107/0x1c0 [ 64.933699][ T4590] __traceiter_kfree+0x2e/0x50 [ 64.938481][ T4590] kfree+0x351/0x400 [ 64.942397][ T4590] ___sys_recvmsg+0x135/0x370 [ 64.947083][ T4590] do_recvmmsg+0x1ef/0x540 [ 64.951519][ T4590] __x64_sys_recvmmsg+0xe5/0x170 [ 64.956462][ T4590] x64_sys_call+0x27aa/0x3000 [ 64.961174][ T4590] do_syscall_64+0xd2/0x200 [ 64.965682][ T4590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.971585][ T4590] [ 64.973912][ T4590] value changed: 0xffffffff81000130 -> 0xffffffff81276e58 [ 64.981016][ T4590] [ 64.983359][ T4590] Reported by Kernel Concurrency Sanitizer on: [ 64.989534][ T4590] CPU: 0 UID: 0 PID: 4590 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.999184][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.009247][ T4590] ================================================================== [ 65.214281][ T3404] hid-generic 0200:0005:10000.0001: invalid report_count 64898 [ 65.221889][ T3404] hid-generic 0200:0005:10000.0001: item 0 2 1 9 parsing failed [ 65.229695][ T3404] hid-generic 0200:0005:10000.0001: probe with driver hid-generic failed with error -22 [ 65.275037][ T4622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=4622 comm=syz.3.351 [ 65.303072][ T4622] lo speed is unknown, defaulting to 1000