last executing test programs: 3.90059968s ago: executing program 3 (id=146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f0000000900)) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_stats}) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000), &(0x7f0000000300)) 3.332713165s ago: executing program 4 (id=150): r0 = semget$private(0x0, 0x4000000009, 0x0) semctl$SEM_STAT_ANY(r0, 0x1, 0x14, &(0x7f0000000180)=""/15) semop(r0, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x0, 0x8, 0x1000}, {0x1, 0x3}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x8008, &(0x7f0000000800)=ANY=[@ANYBLOB="03000000000000000b0000006e6f3dcdbe665b58aa7c6b640ed290d2226bda4175af1928e3035f709686f3eda60481f9eabaa8e6cae9d75d5f8b3fd996f2ebb88f878e8a1827fe34bdee419cf9358bb90a36e12d17763f021e755a2050f8d72ee41720a08c403829baac5a2c99457b8838a4665db448984f0e6b79c3736b6c0c8ca0ab7d1c76e725c30c680c0100ccd0b7a13e9399a4ac7545ac5e84458be06f43015f58a5c69b70bfe74c19c9fa8bc6eb2a58761cea5afd4e0e76d56ad7a125c10ac43e33c6dd44e1121d7a44738e7e8985cb6c533215c2f2c5fb52b14beb9ef1", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6e6f78617474722c6f626a5f747970653d2b002c736d61636b6673726f6f743d5c5c2c646f6e745f6d6561737572652c6673757569643d61313833566165f62d003932612d623230392d376662632d38326238613a64362c00"]) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_bp={0x0}, 0x0, 0x101, 0x0, 0x0, 0xfffffffffff7bbfe, 0x4, 0xfffd, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002a04000000000000850000000100000095"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 3.331579815s ago: executing program 0 (id=161): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x2000ee73, 0x20, 0x2, 0x2d}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000) socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f000000a280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x41, &(0x7f0000000100)={[{@lazytime}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@discard}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r7, &(0x7f00000019c0)=[{&(0x7f0000000400)=""/142, 0x8c}], 0x11, 0x90000001, 0x100) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3.103870283s ago: executing program 2 (id=152): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000140)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x8000, 0x6, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0xffffffff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0xcb0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0xfffffffa, 0xb, 0x0, 0x22, 0x7fffffff, 0x7, 0xffffff13, 0x1, 0xfffffffc, 0x10000, 0x1, 0xd, 0x2, 0x3, 0x2, 0x0, 0x2df9, 0x5, 0x2, 0x3, 0x5, 0x4, 0xfff, 0x7, 0x1, 0x5, 0x7, 0xd, 0x2, 0x67b, 0xffff, 0x1, 0x8, 0x2, 0x7, 0x7, 0x10, 0x1, 0xa3b, 0x7, 0x0, 0x7ff, 0x6, 0x2, 0x7, 0x6, 0x2, 0x81, 0x3, 0x9, 0x0, 0x8, 0x6, 0x6, 0x1000, 0x8001, 0x6, 0x9, 0x101, 0x40, 0x6, 0x3, 0x3, 0x401, 0x8000, 0x7, 0x1, 0x19f, 0x8, 0x3, 0xa158, 0x8001, 0x5, 0x3ff, 0x80, 0x8e, 0x10, 0x3ff, 0x4, 0xfffffffd, 0xaed4, 0x695e, 0x7, 0xa5d0, 0x4, 0x9, 0x37cc, 0x9, 0xc, 0x8000, 0x7, 0x400, 0xfffffff6, 0x1, 0xb, 0x3, 0xa0000000, 0x6e7, 0x1, 0xe, 0x7, 0x8001, 0xdb54, 0x3d04, 0x4, 0x6, 0x90, 0x6, 0x3, 0x1, 0x3, 0xfffffff6, 0x7ff, 0x72, 0x7, 0x10, 0x9, 0x0, 0xc810, 0x4, 0x2, 0x9, 0xb, 0xf6c, 0x1000, 0x5e, 0x3, 0x9, 0x8, 0x6, 0x3, 0x4, 0x4000000, 0xfffffffb, 0x1, 0x7, 0x1, 0x1, 0xc4, 0x81, 0xc, 0x7319, 0x1, 0x6, 0x7fff, 0x5e89f4eb, 0x8, 0x1, 0x8, 0xe, 0x7, 0x25, 0x9, 0x5, 0x0, 0x0, 0x7, 0x3, 0xd86d, 0x2, 0x8, 0x10000, 0x1, 0x80000000, 0x5f8, 0x40, 0x6, 0x3, 0xe422, 0x4, 0x4, 0x8, 0x390d, 0x7, 0x7, 0x2, 0x8, 0x13d92c0c, 0xd, 0x8, 0x5, 0x1, 0x2, 0x7, 0x4, 0x1, 0x1, 0x7, 0x1, 0xc, 0x7fffffff, 0x3, 0x3, 0x81, 0x5, 0xfff, 0xfffffffc, 0x365, 0xfffffc00, 0x401, 0xb1d, 0x5, 0xff, 0x7, 0x8, 0x1, 0x2, 0x9, 0x0, 0x80, 0x9, 0xf, 0x6, 0x3, 0x0, 0x3, 0x1, 0x3, 0x3, 0x9, 0xda85, 0x7, 0x2, 0x10, 0x6, 0x6, 0x2, 0xfff, 0x3, 0x74, 0x1, 0x9, 0x7, 0x15, 0x4, 0x0, 0x5, 0x9, 0x31, 0x5, 0x81, 0x9, 0xfffffff1, 0x80000001, 0x0, 0x5, 0x6, 0xcdb8, 0x0, 0x7, 0x4, 0x7, 0x9, 0xee3d]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) shmdt(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) ftruncate(r2, 0x2000009) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000bfa2000000000000ffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r5, 0xfffffff7, 0x1, 0x63ec}, &(0x7f00000000c0)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 2.904825669s ago: executing program 1 (id=153): r0 = io_uring_setup(0x40000382, 0x0) io_uring_enter(r0, 0x196f, 0x40002, 0xb, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r6, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r10 = syz_open_pts(r9, 0x42) r11 = dup3(r10, r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r11}}) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r8) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r12, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000085) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x9f0}}, './file0\x00'}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000580)={@mcast1}, 0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 2.895998759s ago: executing program 3 (id=154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_emit_ethernet(0x104a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000540)=@ethtool_perm_addr={0x4b, 0x2f, "43720700000000004786b89e6fb2940acfbe4c3f9725f0f2bf568d62c050880594c23d36d68dbac78c2893c6a97985"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRES8], 0xc) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGFEATURE(r6, 0x4004480d, &(0x7f00000000c0)={0xfe, "da40e9044a70415fce6641fd75ff409d746f058b7b22543213c93d6ce45aa95e13c9c6410bf4878961f81db5dd236ff681b54866d4ca438a7a151f7adcb1ef9c"}) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000130a0142000000008000000000000000090001"], 0x20}}, 0x48894) socket$nl_route(0x10, 0x3, 0x0) 2.811112346s ago: executing program 4 (id=155): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000"], 0xfc}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e1406", 0x1b}, {0x0}, {&(0x7f0000000600)="9084f1c3d5fa9e1cf6086296b34162dc239aa8ddbe422b214e767a40fd8fed49a42bb60ba7c4b90ad8d6521acfb14e519da7902895d8192a1f74cb0ebd54543b051a2183247afb5f6d3020aaa553dbbbff739137", 0x54}, {0x0}, {0x0}], 0x5}, 0x4000840) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r7, &(0x7f0000000080)='./file0\x00') readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000002c0)={0x6, &(0x7f0000000280)=[{0x2, 0x6, 0x0, 0x887}, {0x3, 0xd7, 0x4, 0xfff}, {0x3, 0x1f, 0x2, 0x3}, {0xffff, 0x0, 0x80, 0x3}, {0x800, 0xd, 0xa2, 0x2}, {0x0, 0x10, 0x8, 0x5}]}) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.739708732s ago: executing program 1 (id=156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@call={0x85, 0x0, 0x0, 0x11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa8, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) inotify_init1(0x800) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3ff, 0x8, 0x88c, 0x6, 0x1000, 0x0, 0x5}, &(0x7f0000000100)={0xb, 0x4, 0x712e, 0x0, 0x5, 0x4, 0x9, 0x80}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000300)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)='3', 0x1, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r6, 0x1, 0x62}, 0x14) 2.562408726s ago: executing program 4 (id=157): unshare(0xa000200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) semget$private(0x0, 0x4000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x8, 0x56e, 0x8004, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x7}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r5 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r4, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) 2.406070839s ago: executing program 0 (id=158): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000f140000000000000000000000700000000000000c3e0ff000000000095000000d3031a00c60280024147659c645771867cc5c6cab8c59334fbafed8792efbd94eb93445cb263fb0e5f80c4ce528e24f4345b0d223a5373b4"], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES32], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8e9f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.13634413s ago: executing program 3 (id=160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="017037267a00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x800, &(0x7f0000000440)=0x0) r6 = eventfd(0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r6, 0x0, 0x4f}]) pread64(r3, &(0x7f0000000c00)=""/4096, 0x1000, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) gettid() recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/106, 0x6a}], 0x1}, 0x5}], 0x1, 0x2, &(0x7f00000007c0)={0x77359400}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000001c00)="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", &(0x7f0000000800)="eff828e53a04b5325938246d66c49f344531b52f6ec547a49a2f50a4"}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x20010000}, 0x0, 0x0) 1.941868435s ago: executing program 2 (id=162): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b685000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x80}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@dax}, {@dioread_lock}, {@init_itable}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000), 0x4) fspick(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget$private(0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x10}}}, 0x24}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x3f57955e7be81d85, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) 1.740426191s ago: executing program 1 (id=163): r0 = io_uring_setup(0x6dc6, &(0x7f0000000080)={0x0, 0xcf51, 0x400, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xfffffec7, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x8, 0xf0bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0xf}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080) close(r1) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @val=@netkit}, 0x1c) openat(0xffffffffffffffff, 0x0, 0x2000, 0x46) getuid() getresgid(0x0, &(0x7f0000003600), 0x0) syz_open_dev$sg(&(0x7f0000003680), 0x9, 0x62481) syz_open_dev$ptys(0xc, 0x3, 0x1) getgroups(0x2, &(0x7f00000036c0)=[0xee00, 0x0]) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000003980)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r10 = getegid() accept$packet(r5, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004f00)=0x14) sendmmsg$unix(r5, &(0x7f0000004fc0)=[{{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f0000001b00), 0x0, 0x24000050}}, {{&(0x7f0000002f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003100)="5927df4b265852360de9e82e0fb97dd9566a8af109c950313ce19ab9845f73b10b695ce722f0507d06a2fa75a26f05a0a99f175fad44e25b738d2c781d329ffb7a875c6dd276c549120e019f386660bd57fa96ab110e62508d6e4713a7105c6dc561c02ffff6ac2c5c231ab641ac12cf65dfbe1e5419ddf56fcc3133089ccb86230402aa7bc13d2b62847abc6197f9ed32c8cebac8166f57fa", 0x99}, {&(0x7f0000000440)="23f94b4b76eb5fe774a57c35e59cbfb304ef88a7aa11fc91a389605c37011a5c53e17dbeb4e8bafc359ee30aeac2f70ea1f46cf516231a30c166931317631027be736c50e2864e316a4b1b40f3c7845347d572cdde39a4ea47107eaeaf90154041efb26c71dcb604674e0a9e3a2b73deb58ddcb58b3c98fe9b07ce476a20c2dc143ff358876e2b448e3ff104e7f6eb90a3c057f86baa45cf16ef20303150d18948deff1e7647c904cec3cc3ca8f25bc44c70ea77", 0xb4}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f00000038c0), 0x0, &(0x7f0000003a00)=[@rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, r1, r7, r5, r6, r6, r3]}}, @rights={{0x20, 0x1, 0x1, [r6, r8, r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r10}}}], 0x70, 0x94}}, {{0x0, 0x0, &(0x7f0000003d00), 0x0, &(0x7f0000003d40), 0x0, 0x2000c011}}], 0x4, 0x41) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.645778129s ago: executing program 4 (id=164): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002000000025bd7000fc10807f050000071900000000000000b2facb95818438250000000100000000"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) unshare(0xa000200) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 1.583680144s ago: executing program 1 (id=165): sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b", 0xa, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='netfs_sreq\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000467000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x42, 0x52, 0x4a, 0xe4}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448d4, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) epoll_create(0xfffffe00) accept4(r5, 0x0, 0x0, 0x400000000000000) 1.415804937s ago: executing program 4 (id=166): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/296, @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiefWzDVzX/eMMhdjSSMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnL060t6nbauD2mqy+O9CtZ8T+Vy7qUzrr0neHid+JfN3UlfXRF5XhS1v7/vfP/D75dLOTrn5DQ61AkzbDNUpakMc9f7j95OBjsPJtzIl8BKswQtO52vdD3Ova6a7zQN421terdjVZoWl5J4XbYdzvGCdxC3w/MinPb1BqNVeNWtv3N7nrTbrv5zPvfr1era+b9pWzP3n2/EjobXrvtddeTmHhxHHPffPrzNMS1O8bsPh7srE5LMg6qzRJUnxZUr9brtVq9Xlu717h3v1otjsyoHqORiLk/afE1M7+TN/CGCnH9/7sltVVWV5vakhn746ipQL46E5Zn8vr/7l33xH4P1/+8yl8aLr6spP5fSx9dm1T/J+RiZJIVxi2xJsx/vZ/neql9PdFDDTTQjp7NZ7vX55fh2/1Zl4qSp1C+PHVka12uTDbHqKE1ramqD7ShlkIZteSpLVehthWqL1ed5JgEcmUnrdiKHN2WUU0NNbQqI1cVbcvXprpaV1O2/h1F0a4eJ/t99YQclQfVZgmqnxA0qf7/4pM066n13xL1/xstP3/NEgOcuyi7/j+l628nGwAAAAAA8DZYyV/freS1+6uSIrW8tls977QAAAAAAMAcJa/8X4kni3HrqqwJ1//R2ecGAAAAAADmw0o+Y2dJWk7e1G8NPwk1y5sAFs4gRQAAAAAA8IaS1/+vlaQouffadVmnuv4HAAAAAABfA78/dI/9Yn6P3Sh/Wb8gKewtWX/555KCRetVb+u71p4dL7H3spiRdwD0W5eti9mNepNJSVLyyHGvWFfToOwmmFa++pe70+71bwXHEigt5H++mJbAWjF7pE91I425UU6nj/YLSpakvSy3vLZbcfz2g5ps+2Kh7271f/308W+k4GCcu48HO5UPPx48SnJ5Fc96tRfn8cmRdArTcnmhbF9cHTviC2rlXf6h21m2kn6r+fgXZO8VDnc02/h/q5tpzM3ldLq8r2xPJOMvx+OvVZJDNhx9PKrP/jQcfe34yMcdiAlZlJMsbqUxt1ZupZM8vyyL7y1I9crxY1CKn4LDfVE/nMX0fWH9a2RfTMki3hercRZ/jTc0fCYcyWL1dFmMHBEAOC+7wyqU3MR89B77x+vu65zlplf3Hx3t5cVnUfqBwwWpmL02cWIvZcVn9JVk2yopObEWLx+cZfdu5Gf0alZXyppwRq++QXWL+/rz8DuQsrRH6sp/oih6UEv6/eNBv2lV/Txe4fOJ/Ybt+kI8wrsv9n6Z3AA/9tHORztP6/XVtep71eq9uhaTYWQTag8AYIzp37EzNcJ67+Cq+tE/3k1bRyretw7eUlDRh/pYAz3SnfwrBK6P3+ryobch3Bm9ao1jL0jHY2u6M/GqLqmlaezPtks/TIOS34vKVzlaqYfbXX2rxwAAgLN2s5E1JtThWer/neS6W9LK5UPX3QfX7Mdq+fFvCJ5Uc2tntg8AAPhf4wZfWsv931lB4PU+qDUaNbu/4ZrAd35iAq+57hqv23cDZ8PurrumF/h93/HbphdoyWu6oQk3ez0/6JuWH5ieH3pbpuW1XZN99Xvoduxu33PCXtu1Q9c4frdvO33T9ELH9DZ/3PbCDTdIVg57ruO1PMfue37XhP5m4LgVY0LXPRToNd1u32t5cbNreoHXsYNt81O/vdlxTdMNncDr9f10g3lfXrflB51ksxVFp/6iQwAAvomev9x/8nAw2Hk2qZFc0U+JGTZK4zaY98UrzgAAfDWMVumJymeSEAAAAAAAAAAAAAAAAAAAAAAAGDH9I32nbCyO+7CgdDDnVxdn2o6leSd2mkbh9Vf/2wkxFw7m5Lv/cMyrcxip0kZx/lu+cJqPjc6h8YPddI9OjIkXjl20dHAsivP/7xA3nn4xYVEURdHJqy8d3YelkwZ4tFGU9Kz0BofgfM5HAM7OfwMAAP//3JZAiA==") getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='ext4\x00', 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000070000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010100f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 1.372026461s ago: executing program 2 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 1.311504126s ago: executing program 2 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000140)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x8000, 0x6, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0xffffffff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0xcb0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0xfffffffa, 0xb, 0x0, 0x22, 0x7fffffff, 0x7, 0xffffff13, 0x1, 0xfffffffc, 0x10000, 0x1, 0xd, 0x2, 0x3, 0x2, 0x0, 0x2df9, 0x5, 0x2, 0x3, 0x5, 0x4, 0xfff, 0x7, 0x1, 0x5, 0x7, 0xd, 0x2, 0x67b, 0xffff, 0x1, 0x8, 0x2, 0x7, 0x7, 0x10, 0x1, 0xa3b, 0x7, 0x0, 0x7ff, 0x6, 0x2, 0x7, 0x6, 0x2, 0x81, 0x3, 0x9, 0x0, 0x8, 0x6, 0x6, 0x1000, 0x8001, 0x6, 0x9, 0x101, 0x40, 0x6, 0x3, 0x3, 0x401, 0x8000, 0x7, 0x1, 0x19f, 0x8, 0x3, 0xa158, 0x8001, 0x5, 0x3ff, 0x80, 0x8e, 0x10, 0x3ff, 0x4, 0xfffffffd, 0xaed4, 0x695e, 0x7, 0xa5d0, 0x4, 0x9, 0x37cc, 0x9, 0xc, 0x8000, 0x7, 0x400, 0xfffffff6, 0x1, 0xb, 0x3, 0xa0000000, 0x6e7, 0x1, 0xe, 0x7, 0x8001, 0xdb54, 0x3d04, 0x4, 0x6, 0x90, 0x6, 0x3, 0x1, 0x3, 0xfffffff6, 0x7ff, 0x72, 0x7, 0x10, 0x9, 0x0, 0xc810, 0x4, 0x2, 0x9, 0xb, 0xf6c, 0x1000, 0x5e, 0x3, 0x9, 0x8, 0x6, 0x3, 0x4, 0x4000000, 0xfffffffb, 0x1, 0x7, 0x1, 0x1, 0xc4, 0x81, 0xc, 0x7319, 0x1, 0x6, 0x7fff, 0x5e89f4eb, 0x8, 0x1, 0x8, 0xe, 0x7, 0x25, 0x9, 0x5, 0x0, 0x0, 0x7, 0x3, 0xd86d, 0x2, 0x8, 0x10000, 0x1, 0x80000000, 0x5f8, 0x40, 0x6, 0x3, 0xe422, 0x4, 0x4, 0x8, 0x390d, 0x7, 0x7, 0x2, 0x8, 0x13d92c0c, 0xd, 0x8, 0x5, 0x1, 0x2, 0x7, 0x4, 0x1, 0x1, 0x7, 0x1, 0xc, 0x7fffffff, 0x3, 0x3, 0x81, 0x5, 0xfff, 0xfffffffc, 0x365, 0xfffffc00, 0x401, 0xb1d, 0x5, 0xff, 0x7, 0x8, 0x1, 0x2, 0x9, 0x0, 0x80, 0x9, 0xf, 0x6, 0x3, 0x0, 0x3, 0x1, 0x3, 0x3, 0x9, 0xda85, 0x7, 0x2, 0x10, 0x6, 0x6, 0x2, 0xfff, 0x3, 0x74, 0x1, 0x9, 0x7, 0x15, 0x4, 0x0, 0x5, 0x9, 0x31, 0x5, 0x81, 0x9, 0xfffffff1, 0x80000001, 0x0, 0x5, 0x6, 0xcdb8, 0x0, 0x7, 0x4, 0x7, 0x9, 0xee3d]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0x0) 1.300587356s ago: executing program 0 (id=169): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x3, 0x44a, [0x200000000a00, 0x0, 0x0, 0x200000000b96, 0x200000000bc6], 0x0, &(0x7f0000000300), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x9, 0x40, 0x88f5, 'wlan0\x00', 'geneve0\x00', 'virt_wifi0\x00', 'geneve1\x00', @remote, [0xff, 0xff], @random="a578547b2b96", [0xff, 0xff, 0xff, 0xff, 0xff], 0x12e, 0x12e, 0x166, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xff000000, 0xff, 0xffffffff], [0xff, 0x0, 0xff, 0xffffff00], 0x7f, 0x84, 0x17, 0x4, 0x4e20, 0x4e22, 0x4e23, 0x4e24}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xff000000, 0x9, 0x29, 0x0, 0x16, 0x4e20, 0x4e22, 0x4e20, 0x4e24}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x9, 0x2, 0x8863, 'wg1\x00', 'veth0_to_batadv\x00', 'macvlan0\x00', 'pimreg\x00', @local, [0x0, 0x0, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0xae, 0xfe, 0x14e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x0, 0x0, 0x2, 0x7, 0x7}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0xad}}}}], @common=@log={'log\x00', 0x28, {{0x2, "7090146364987c16e8875da53684e30b35fee0cf19dadb4f0adbd2a24887", 0x1}}}}, {0x5, 0x10, 0x0, 'vlan0\x00', 'veth1\x00', 'veth0\x00', 'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xd6, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 0xfffffffffffffffd}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x4c2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000000080)="dccfb93097e7a219f006890c92b8b16d99bc7c8af5ba65283ff441da68d2e7761627f96553a7c19d96bb3a1f2a525953734bc52d819da9260a5f6badc5f453de04ea87622a213c578c8afab8960b7c26d12fd94c415c9fd736cd1deacf88da374b1e048b6bc54033f776532ef69f942df2d67e0d82e19f541b95ff5452b60014404a7c41a0104e76293fb4d9fbc657bde4dc192562a43bdc4b9c1ae68aa72ceac7bedcee68929f8f35fc826cb011c062f14b6b86c1d9c6ec786850d4d575fb00a2ff81e8de8d3c4562533114", &(0x7f00000001c0)=""/179, 0x4}, 0x20) 1.183262356s ago: executing program 3 (id=170): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') getxattr(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2000000, &(0x7f0000000cc0)=ANY=[@ANYBLOB='showassoc,map=acorn,showassoc,utf8,check=relaxed,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c636865636b3d7374726963742c7569643d014ddfd7528e2abb611ab9a6f0020c71e7e4e129d3efc1207d122e24d0e5aa9f74b3e95844d340377ad31e1f1e55ff56785ca0655fe348172e188e19180ebcd1c5f60e6bfb3d4b232394a70ed43896502c1fad07eca5cc4ad532127749fa88b2dcb188a93734b11220cfed988675869e05f19923", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB=',unhide,hide,session=0x0000000000000049,sbsector=0x0000000080000001,norock,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x943, &(0x7f0000001500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004040)=@newtfilter={0x1044, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1018, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r0}, @TCA_BPF_NAME={0x1003, 0x7, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}]}}]}, 0x1044}}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500040000002020207b1a31616474abb4a4dbe248d1f8ff00000000bfa100000000000007010000f8ffffffb70200008500000070000000850000000500"/96], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsmount(r2, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101201) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) syz_usbip_server_init(0x3) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) 1.181614926s ago: executing program 0 (id=180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x5) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x1}) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="017037267a00"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) io_setup(0x800, &(0x7f0000000440)=0x0) r6 = eventfd(0x0) io_submit(r5, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r6, 0x0, 0x4f}]) pread64(r3, &(0x7f0000000c00)=""/4096, 0x1000, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) gettid() recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000540)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/106, 0x6a}], 0x1}, 0x5}], 0x1, 0x2, &(0x7f00000007c0)={0x77359400}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000001c00)="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", &(0x7f0000000800)="eff828e53a04b5325938246d66c49f344531b52f6ec547a49a2f50a4"}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x20010000}, 0x0, 0x0) 1.180567316s ago: executing program 2 (id=171): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40), 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, &(0x7f0000000040)='ext4\x00', 0x200000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000070000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010100f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 797.663037ms ago: executing program 2 (id=172): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x9a, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r5, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(0x0, 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7fffeffd) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x926}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) 723.506833ms ago: executing program 1 (id=173): r0 = syz_io_uring_setup(0x1c44, &(0x7f0000000240)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000940)={0xa, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000004c0)=""/205, 0xcd}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/55, 0x37}, {&(0x7f0000000640)=""/33, 0x21}, {&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f0000000780)=""/159, 0x9f}], &(0x7f0000000900)=[0xfff, 0x5, 0x5, 0x5, 0x6, 0x3]}, 0x20) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="c43e000000000000000700000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_io_uring_setup(0x499, &(0x7f0000000140)={0x0, 0xa064, 0x3180, 0x2, 0x25c}, &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x628, 0xc88d, 0x43, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r10}]}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@data_journal}, {@data_err_ignore}, {@dax_never}, {@oldalloc}, {@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1e}}, {@user_xattr}, {@nobh}, {@resuid={'resuid', 0x3d, r10}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[], 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0xc) openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x4d0a80, 0x28, 0x4}, 0x18) 558.424886ms ago: executing program 1 (id=174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESOCT], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @broadcast}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x81203, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xcab}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x3, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xe) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00[g\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00k\b\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff6, &(0x7f00000014c0)=""/4086}, 0x94) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000040000000c00088008000c00", @ANYRES32=r11, @ANYBLOB="1bfb70216a21ff52d4a05533b6baf7b24e144e84b8849b67d2b3104527c364c9e53bc0115b06db1486"], 0x28}}, 0x0) setuid(r11) quotactl_fd$Q_QUOTAOFF(r8, 0x1, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r12, 0xffffffffffffffff, 0x200000000000000) 512.664929ms ago: executing program 4 (id=175): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000140)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x8000, 0x6, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0xffffffff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0xcb0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x4, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0xfffffffa, 0xb, 0x0, 0x22, 0x7fffffff, 0x7, 0xffffff13, 0x1, 0xfffffffc, 0x10000, 0x1, 0xd, 0x2, 0x3, 0x2, 0x0, 0x2df9, 0x5, 0x2, 0x3, 0x5, 0x4, 0xfff, 0x7, 0x1, 0x5, 0x7, 0xd, 0x2, 0x67b, 0xffff, 0x1, 0x8, 0x2, 0x7, 0x7, 0x10, 0x1, 0xa3b, 0x7, 0x0, 0x7ff, 0x6, 0x2, 0x7, 0x6, 0x2, 0x81, 0x3, 0x9, 0x0, 0x8, 0x6, 0x6, 0x1000, 0x8001, 0x6, 0x9, 0x101, 0x40, 0x6, 0x3, 0x3, 0x401, 0x8000, 0x7, 0x1, 0x19f, 0x8, 0x3, 0xa158, 0x8001, 0x5, 0x3ff, 0x80, 0x8e, 0x10, 0x3ff, 0x4, 0xfffffffd, 0xaed4, 0x695e, 0x7, 0xa5d0, 0x4, 0x9, 0x37cc, 0x9, 0xc, 0x8000, 0x7, 0x400, 0xfffffff6, 0x1, 0xb, 0x3, 0xa0000000, 0x6e7, 0x1, 0xe, 0x7, 0x8001, 0xdb54, 0x3d04, 0x4, 0x6, 0x90, 0x6, 0x3, 0x1, 0x3, 0xfffffff6, 0x7ff, 0x72, 0x7, 0x10, 0x9, 0x0, 0xc810, 0x4, 0x2, 0x9, 0xb, 0xf6c, 0x1000, 0x5e, 0x3, 0x9, 0x8, 0x6, 0x3, 0x4, 0x4000000, 0xfffffffb, 0x1, 0x7, 0x1, 0x1, 0xc4, 0x81, 0xc, 0x7319, 0x1, 0x6, 0x7fff, 0x5e89f4eb, 0x8, 0x1, 0x8, 0xe, 0x7, 0x25, 0x9, 0x5, 0x0, 0x0, 0x7, 0x3, 0xd86d, 0x2, 0x8, 0x10000, 0x1, 0x80000000, 0x5f8, 0x40, 0x6, 0x3, 0xe422, 0x4, 0x4, 0x8, 0x390d, 0x7, 0x7, 0x2, 0x8, 0x13d92c0c, 0xd, 0x8, 0x5, 0x1, 0x2, 0x7, 0x4, 0x1, 0x1, 0x7, 0x1, 0xc, 0x7fffffff, 0x3, 0x3, 0x81, 0x5, 0xfff, 0xfffffffc, 0x365, 0xfffffc00, 0x401, 0xb1d, 0x5, 0xff, 0x7, 0x8, 0x1, 0x2, 0x9, 0x0, 0x80, 0x9, 0xf, 0x6, 0x3, 0x0, 0x3, 0x1, 0x3, 0x3, 0x9, 0xda85, 0x7, 0x2, 0x10, 0x6, 0x6, 0x2, 0xfff, 0x3, 0x74, 0x1, 0x9, 0x7, 0x15, 0x4, 0x0, 0x5, 0x9, 0x31, 0x5, 0x81, 0x9, 0xfffffff1, 0x80000001, 0x0, 0x5, 0x6, 0xcdb8, 0x0, 0x7, 0x4, 0x7, 0x9, 0xee3d]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$igmp(0x2, 0x3, 0x2) close_range(0xffffffffffffffff, r1, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) shmdt(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) ftruncate(r2, 0x2000009) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000bfa2000000000000ffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r6, 0xfffffff7, 0x1, 0x63ec}, &(0x7f00000000c0)=0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 383.65424ms ago: executing program 3 (id=176): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000002000000025bd7000fc10807f050000071900000000000000b2facb95818438250000000100000000"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) unshare(0xa000200) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 296.990667ms ago: executing program 3 (id=177): r0 = io_uring_setup(0x6dc6, &(0x7f0000000080)={0x0, 0xcf51, 0x400, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r3, 0x0, 0x30) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xfffffec7, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x8, 0xf0bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x0, 0x13, 0xf}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000011}, 0x40080) close(r1) r5 = socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @val=@netkit}, 0x1c) openat(0xffffffffffffffff, 0x0, 0x2000, 0x46) getuid() getresgid(0x0, &(0x7f0000003600), 0x0) syz_open_dev$sg(&(0x7f0000003680), 0x9, 0x62481) syz_open_dev$ptys(0xc, 0x3, 0x1) getgroups(0x2, &(0x7f00000036c0)=[0xee00, 0x0]) r7 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000003980)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r10 = getegid() accept$packet(r5, &(0x7f0000004ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004f00)=0x14) sendmmsg$unix(r5, &(0x7f0000004fc0)=[{{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001780)=[{0x0}], 0x1, &(0x7f0000001b00), 0x0, 0x24000050}}, {{&(0x7f0000002f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003100)="5927df4b265852360de9e82e0fb97dd9566a8af109c950313ce19ab9845f73b10b695ce722f0507d06a2fa75a26f05a0a99f175fad44e25b738d2c781d329ffb7a875c6dd276c549120e019f386660bd57fa96ab110e62508d6e4713a7105c6dc561c02ffff6ac2c5c231ab641ac12cf65dfbe1e5419ddf56fcc3133089ccb86230402aa7bc13d2b62847abc6197f9ed32c8cebac8166f57fa", 0x99}, {&(0x7f0000000440)="23f94b4b76eb5fe774a57c35e59cbfb304ef88a7aa11fc91a389605c37011a5c53e17dbeb4e8bafc359ee30aeac2f70ea1f46cf516231a30c166931317631027be736c50e2864e316a4b1b40f3c7845347d572cdde39a4ea47107eaeaf90154041efb26c71dcb604674e0a9e3a2b73deb58ddcb58b3c98fe9b07ce476a20c2dc143ff358876e2b448e3ff104e7f6eb90a3c057f86baa45cf16ef20303150d18948deff1e7647c904cec3cc3ca8f25bc44c70ea77", 0xb4}], 0x3, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f00000038c0), 0x0, &(0x7f0000003a00)=[@rights={{0x30, 0x1, 0x1, [r5, 0xffffffffffffffff, r1, r7, r5, r6, r6, r3]}}, @rights={{0x20, 0x1, 0x1, [r6, r8, r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r10}}}], 0x70, 0x94}}, {{0x0, 0x0, &(0x7f0000003d00), 0x0, &(0x7f0000003d40), 0x0, 0x2000c011}}], 0x4, 0x41) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 219.359323ms ago: executing program 0 (id=178): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b685000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2, 0x0, 0x80}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@dax}, {@dioread_lock}, {@init_itable}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, 0x0, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000), 0x4) fspick(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget$private(0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x10}}}, 0x24}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x3f57955e7be81d85, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) 0s ago: executing program 0 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.244' (ED25519) to the list of known hosts. [ 33.465666][ T29] audit: type=1400 audit(1756189606.239:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.466856][ T3293] cgroup: Unknown subsys name 'net' [ 33.488408][ T29] audit: type=1400 audit(1756189606.239:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.515799][ T29] audit: type=1400 audit(1756189606.269:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.693648][ T3293] cgroup: Unknown subsys name 'cpuset' [ 33.699969][ T3293] cgroup: Unknown subsys name 'rlimit' [ 33.890975][ T29] audit: type=1400 audit(1756189606.659:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.916705][ T29] audit: type=1400 audit(1756189606.659:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.937359][ T29] audit: type=1400 audit(1756189606.659:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.941845][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.957721][ T29] audit: type=1400 audit(1756189606.669:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.986596][ T29] audit: type=1400 audit(1756189606.669:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.011795][ T29] audit: type=1400 audit(1756189606.669:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.035135][ T29] audit: type=1400 audit(1756189606.739:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.036163][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.912686][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.949289][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.993294][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.006428][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 36.077727][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.084902][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.092008][ T3310] bridge_slave_0: entered allmulticast mode [ 36.098557][ T3310] bridge_slave_0: entered promiscuous mode [ 36.105256][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.112293][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.119722][ T3310] bridge_slave_1: entered allmulticast mode [ 36.126120][ T3310] bridge_slave_1: entered promiscuous mode [ 36.134581][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.141741][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.148967][ T3304] bridge_slave_0: entered allmulticast mode [ 36.155498][ T3304] bridge_slave_0: entered promiscuous mode [ 36.163775][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.170851][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.177961][ T3304] bridge_slave_1: entered allmulticast mode [ 36.184505][ T3304] bridge_slave_1: entered promiscuous mode [ 36.201038][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 36.235096][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.249791][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.258982][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.266291][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.273586][ T3307] bridge_slave_0: entered allmulticast mode [ 36.279905][ T3307] bridge_slave_0: entered promiscuous mode [ 36.300191][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.310234][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.319414][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.326549][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.333749][ T3307] bridge_slave_1: entered allmulticast mode [ 36.340108][ T3307] bridge_slave_1: entered promiscuous mode [ 36.367803][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.374917][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.382058][ T3302] bridge_slave_0: entered allmulticast mode [ 36.388431][ T3302] bridge_slave_0: entered promiscuous mode [ 36.412573][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.419765][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.426966][ T3302] bridge_slave_1: entered allmulticast mode [ 36.433530][ T3302] bridge_slave_1: entered promiscuous mode [ 36.442624][ T3304] team0: Port device team_slave_0 added [ 36.449027][ T3310] team0: Port device team_slave_0 added [ 36.455659][ T3310] team0: Port device team_slave_1 added [ 36.462515][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.482667][ T3304] team0: Port device team_slave_1 added [ 36.494039][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.532688][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.541855][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.548938][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.556151][ T3312] bridge_slave_0: entered allmulticast mode [ 36.562515][ T3312] bridge_slave_0: entered promiscuous mode [ 36.574541][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.581496][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.607432][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.618700][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.625721][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.651817][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.663380][ T3307] team0: Port device team_slave_0 added [ 36.670175][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.680096][ T3307] team0: Port device team_slave_1 added [ 36.685921][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.693087][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.700235][ T3312] bridge_slave_1: entered allmulticast mode [ 36.706948][ T3312] bridge_slave_1: entered promiscuous mode [ 36.717845][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.724824][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.750762][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.764058][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.771076][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.797010][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.831972][ T3302] team0: Port device team_slave_0 added [ 36.843425][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.863250][ T3302] team0: Port device team_slave_1 added [ 36.870858][ T3310] hsr_slave_0: entered promiscuous mode [ 36.876895][ T3310] hsr_slave_1: entered promiscuous mode [ 36.883155][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.890207][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.916339][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.928172][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.937496][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.944508][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.970444][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.017924][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.024996][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.050900][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.062589][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.069577][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.095563][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.107382][ T3312] team0: Port device team_slave_0 added [ 37.113991][ T3312] team0: Port device team_slave_1 added [ 37.149974][ T3304] hsr_slave_0: entered promiscuous mode [ 37.156193][ T3304] hsr_slave_1: entered promiscuous mode [ 37.162007][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 37.167766][ T3304] Cannot create hsr debugfs directory [ 37.187101][ T3307] hsr_slave_0: entered promiscuous mode [ 37.193280][ T3307] hsr_slave_1: entered promiscuous mode [ 37.199139][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 37.205005][ T3307] Cannot create hsr debugfs directory [ 37.230538][ T3302] hsr_slave_0: entered promiscuous mode [ 37.237591][ T3302] hsr_slave_1: entered promiscuous mode [ 37.243458][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 37.249191][ T3302] Cannot create hsr debugfs directory [ 37.257487][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.264486][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.290429][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.316532][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.323612][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.349642][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.417892][ T3312] hsr_slave_0: entered promiscuous mode [ 37.423984][ T3312] hsr_slave_1: entered promiscuous mode [ 37.429797][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 37.435570][ T3312] Cannot create hsr debugfs directory [ 37.565232][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.582952][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.600916][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.610321][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.630738][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.644326][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.660512][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.669630][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.689360][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.703103][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.713900][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.729951][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.757130][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.770033][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.779437][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.791580][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.844251][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.853597][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.873034][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.883201][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.896233][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.921999][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.932503][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.941138][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.953699][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.960858][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.977653][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.984732][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.997826][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.011880][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.018969][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.031605][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.045859][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.052983][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.066382][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.079544][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.090004][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.107200][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.114334][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.124555][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.131652][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.150419][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.169443][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.176679][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.195758][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.202844][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.232120][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.248156][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.260838][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.271280][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.326990][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.359099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.366200][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.394182][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.401362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.418254][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.436159][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.460197][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.487761][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.531294][ T3310] veth0_vlan: entered promiscuous mode [ 38.554026][ T3310] veth1_vlan: entered promiscuous mode [ 38.594609][ T3310] veth0_macvtap: entered promiscuous mode [ 38.613944][ T3310] veth1_macvtap: entered promiscuous mode [ 38.635744][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.654486][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.665043][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.687433][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.716452][ T3307] veth0_vlan: entered promiscuous mode [ 38.723995][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.733481][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.742421][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.752919][ T3304] veth0_vlan: entered promiscuous mode [ 38.762708][ T3307] veth1_vlan: entered promiscuous mode [ 38.778475][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.778492][ T29] audit: type=1400 audit(1756189611.549:81): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DfsE3B/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.779114][ T3304] veth1_vlan: entered promiscuous mode [ 38.797798][ T29] audit: type=1400 audit(1756189611.569:82): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.816811][ T3312] veth0_vlan: entered promiscuous mode [ 38.836381][ T29] audit: type=1400 audit(1756189611.569:83): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DfsE3B/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.848423][ T3312] veth1_vlan: entered promiscuous mode [ 38.867038][ T29] audit: type=1400 audit(1756189611.569:84): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.894109][ T29] audit: type=1400 audit(1756189611.569:85): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DfsE3B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.919441][ T3307] veth0_macvtap: entered promiscuous mode [ 38.920811][ T29] audit: type=1400 audit(1756189611.569:86): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.DfsE3B/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.938075][ T3304] veth0_macvtap: entered promiscuous mode [ 38.954086][ T29] audit: type=1400 audit(1756189611.569:87): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.989694][ T3312] veth0_macvtap: entered promiscuous mode [ 38.995655][ T29] audit: type=1400 audit(1756189611.609:88): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.000466][ T3312] veth1_macvtap: entered promiscuous mode [ 39.018456][ T29] audit: type=1400 audit(1756189611.609:89): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=4710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.036246][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.054113][ T3307] veth1_macvtap: entered promiscuous mode [ 39.061597][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.075308][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.089082][ T3304] veth1_macvtap: entered promiscuous mode [ 39.100677][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.123210][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.132882][ T29] audit: type=1400 audit(1756189611.879:90): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.161815][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.176284][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.197266][ T3472] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4'. [ 39.199159][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.218254][ T3302] veth0_vlan: entered promiscuous mode [ 39.224025][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.247012][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.274527][ T3302] veth1_vlan: entered promiscuous mode [ 39.292119][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.314614][ T3302] veth0_macvtap: entered promiscuous mode [ 39.325208][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.348201][ T3302] veth1_macvtap: entered promiscuous mode [ 39.371414][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.403273][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.438673][ T3482] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.464982][ T3478] loop4: detected capacity change from 0 to 2048 [ 39.471616][ T3484] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.487314][ T3484] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32 [ 39.506961][ T3476] IPVS: Error joining to the multicast group [ 39.524385][ T3484] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 39.524385][ T3484] program +}[@ not setting count and/or reply_len properly [ 39.534197][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.550730][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.561980][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.563455][ T3478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 39.584859][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.620831][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.686919][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.723304][ T3491] loop2: detected capacity change from 0 to 512 [ 39.748703][ T3491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.761292][ T3491] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.868190][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.893560][ T3478] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.971124][ T3478] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 39.983577][ T3478] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.983577][ T3478] [ 39.993247][ T3478] EXT4-fs (loop4): Total free blocks count 0 [ 39.999361][ T3478] EXT4-fs (loop4): Free/Dirty block details [ 40.005286][ T3478] EXT4-fs (loop4): free_blocks=2415919104 [ 40.011047][ T3478] EXT4-fs (loop4): dirty_blocks=16 [ 40.016262][ T3478] EXT4-fs (loop4): Block reservation details [ 40.022254][ T3478] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 40.074175][ T3484] loop0: detected capacity change from 0 to 8192 [ 40.082032][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.115541][ T3443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.135034][ T3443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.165713][ T3443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.281369][ T3476] syz.3.6 (3476) used greatest stack depth: 10176 bytes left [ 40.290138][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.369647][ T3500] loop0: detected capacity change from 0 to 1024 [ 40.376625][ T3500] ======================================================= [ 40.376625][ T3500] WARNING: The mand mount option has been deprecated and [ 40.376625][ T3500] and is ignored by this kernel. Remove the mand [ 40.376625][ T3500] option from the mount to silence this warning. [ 40.376625][ T3500] ======================================================= [ 40.415675][ T3500] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.427371][ T3500] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 40.436083][ T3500] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.443521][ T3500] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 40.458247][ T3500] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 40.466732][ T3500] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.7: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.480539][ T3500] EXT4-fs (loop0): 1 orphan inode deleted [ 40.487088][ T3500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.510679][ T3500] EXT4-fs error (device loop0): ext4_lookup:1787: inode #15: comm syz.0.7: iget: bad extended attribute block 6 [ 40.812426][ T3478] syz.4.5 (3478) used greatest stack depth: 9864 bytes left [ 40.892746][ C0] hrtimer: interrupt took 43306 ns [ 40.953811][ T3503] mmap: syz.2.8 (3503) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.052953][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.072454][ T3443] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.147811][ T3513] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9'. [ 41.201716][ T3482] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.296661][ T3517] loop0: detected capacity change from 0 to 164 [ 41.363883][ T3523] Unsupported NM flag settings (8) [ 41.487657][ T3529] netlink: 'syz.0.14': attribute type 21 has an invalid length. [ 41.497148][ T3529] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14'. [ 41.546909][ T3531] loop4: detected capacity change from 0 to 736 [ 41.574516][ T3531] rock: directory entry would overflow storage [ 41.580788][ T3531] rock: sig=0x3b10, size=4, remaining=3 [ 41.600289][ T3531] netlink: 'syz.4.15': attribute type 27 has an invalid length. [ 41.637724][ T3531] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.645193][ T3531] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.684744][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.695730][ T3531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.699107][ T3534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16'. [ 41.712488][ T3534] unsupported nlmsg_type 40 [ 41.726466][ T3534] loop0: detected capacity change from 0 to 512 [ 41.738452][ T3534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.750925][ T3537] syz_tun: entered allmulticast mode [ 41.756892][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.766750][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.777845][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.791129][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.801712][ T3534] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.813579][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.832533][ T3534] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 41.865327][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.876723][ T3530] syz_tun: left allmulticast mode [ 41.905272][ T3541] Falling back ldisc for ttyS3. [ 41.940102][ T3545] netlink: 'syz.4.19': attribute type 21 has an invalid length. [ 41.980265][ T3550] loop0: detected capacity change from 0 to 2364 [ 41.989628][ T3550] Zero length message leads to an empty skb [ 42.034164][ T3550] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 42.040800][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.048464][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.055551][ T3550] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 42.062165][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 42.069800][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.076644][ T3550] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 42.083263][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.090916][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.101469][ T3550] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 42.108220][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.115837][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.122592][ T3550] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 42.129221][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.136879][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.146651][ T3557] vhci_hcd: connection closed [ 42.149207][ T3559] vhci_hcd: connection closed [ 42.152855][ T3555] vhci_hcd: connection closed [ 42.154090][ T3561] vhci_hcd: connection closed [ 42.158762][ T3553] vhci_hcd: connection closed [ 42.168192][ T3545] loop4: detected capacity change from 0 to 512 [ 42.168256][ T31] vhci_hcd: stop threads [ 42.183608][ T31] vhci_hcd: release socket [ 42.188053][ T31] vhci_hcd: disconnect device [ 42.196297][ T31] vhci_hcd: stop threads [ 42.200591][ T31] vhci_hcd: release socket [ 42.205039][ T31] vhci_hcd: disconnect device [ 42.213270][ T3545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.217997][ T31] vhci_hcd: stop threads [ 42.229796][ T31] vhci_hcd: release socket [ 42.234286][ T31] vhci_hcd: disconnect device [ 42.239987][ T31] vhci_hcd: stop threads [ 42.244306][ T31] vhci_hcd: release socket [ 42.248777][ T31] vhci_hcd: disconnect device [ 42.254430][ T31] vhci_hcd: stop threads [ 42.258757][ T31] vhci_hcd: release socket [ 42.263206][ T31] vhci_hcd: disconnect device [ 42.274868][ T3565] loop1: detected capacity change from 0 to 1024 [ 42.293043][ T3410] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 42.294629][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.300467][ T3410] usb 1-1: enqueue for inactive port 0 [ 42.318994][ T3410] usb 1-1: enqueue for inactive port 0 [ 42.324840][ T3410] usb 1-1: enqueue for inactive port 0 [ 42.336343][ T3565] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.21: Allocating blocks 449-513 which overlap fs metadata [ 42.365088][ T3565] EXT4-fs (loop1): pa ffff888106a9b070: logic 48, phys. 177, len 21 [ 42.373216][ T3565] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 42.393239][ T3410] vhci_hcd: vhci_device speed not set [ 42.400951][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.428778][ T3570] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 42.504133][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 42.558897][ T3575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 42.601993][ T3577] loop1: detected capacity change from 0 to 512 [ 42.625255][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.637938][ T3577] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.660368][ T3577] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 42.668107][ T3577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.24'. [ 42.711299][ T3584] netlink: 'syz.1.24': attribute type 39 has an invalid length. [ 42.754609][ T3586] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.807911][ T3588] loop0: detected capacity change from 0 to 1024 [ 42.819979][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.836161][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.851134][ T3590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 42.854979][ T3588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.878924][ T3588] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.935896][ T3596] loop1: detected capacity change from 0 to 512 [ 42.938023][ T3596] EXT4-fs: Ignoring removed nobh option [ 42.956559][ T3596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.970605][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.29: corrupted inode contents [ 42.970853][ T3596] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.29: mark_inode_dirty error [ 42.971223][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.29: corrupted inode contents [ 42.971366][ T3596] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.29: mark_inode_dirty error [ 42.973995][ T3596] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.29: Failed to acquire dquot type 0 [ 43.048283][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.29: corrupted inode contents [ 43.048471][ T3596] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.29: mark_inode_dirty error [ 43.048588][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.29: corrupted inode contents [ 43.048970][ T3596] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.29: mark_inode_dirty error [ 43.095607][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.29: corrupted inode contents [ 43.109825][ T3596] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 43.118722][ T3596] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.29: corrupted inode contents [ 43.125361][ T3482] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.142152][ T3596] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.29: mark_inode_dirty error [ 43.154422][ T3596] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 43.154946][ T3596] EXT4-fs (loop1): 1 truncate cleaned up [ 43.178943][ T3596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.179213][ T3596] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.202232][ T3482] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.275300][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.292960][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.307085][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.315712][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.366675][ T3616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3616 comm=syz.2.34 [ 43.379081][ T3616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3616 comm=syz.2.34 [ 43.400349][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 43.409686][ T3616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1540 sclass=netlink_audit_socket pid=3616 comm=syz.2.34 [ 43.527296][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.735679][ T3596] syz.1.29 (3596) used greatest stack depth: 9760 bytes left [ 43.829908][ T3626] loop0: detected capacity change from 0 to 512 [ 43.836960][ T3626] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.843527][ T3626] ext4: Unknown parameter 'obj_type' [ 43.981198][ T3625] loop2: detected capacity change from 0 to 1024 [ 44.077294][ T3625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.127171][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.174931][ T3625] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.36: Allocating blocks 385-513 which overlap fs metadata [ 44.251783][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 44.251800][ T29] audit: type=1400 audit(1756189617.019:835): avc: denied { create } for pid=3624 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.298127][ T3624] EXT4-fs (loop2): pa ffff888106a72150: logic 16, phys. 129, len 24 [ 44.306672][ T3624] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 44.331701][ T29] audit: type=1400 audit(1756189617.069:836): avc: denied { create } for pid=3634 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.351180][ T29] audit: type=1400 audit(1756189617.069:837): avc: denied { ioctl } for pid=3624 comm="syz.2.36" path="/6/file0/file1" dev="loop2" ino=15 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.384476][ T3636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.37'. [ 44.394139][ T29] audit: type=1400 audit(1756189617.129:838): avc: denied { write } for pid=3634 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.416043][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.489636][ T3638] loop4: detected capacity change from 0 to 512 [ 44.496819][ T3638] msdos: Bad value for 'time_offset' [ 44.507913][ T3638] sctp: [Deprecated]: syz.4.38 (pid 3638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 44.507913][ T3638] Use struct sctp_sack_info instead [ 44.539857][ T3638] loop4: detected capacity change from 0 to 1024 [ 44.850039][ T29] audit: type=1400 audit(1756189617.319:839): avc: denied { mounton } for pid=3631 comm="syz.4.38" path="/7/file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.897591][ T3643] netlink: 84 bytes leftover after parsing attributes in process `syz.3.42'. [ 44.906492][ T3643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 44.915387][ T3643] netlink: 84 bytes leftover after parsing attributes in process `syz.3.42'. [ 44.937684][ T29] audit: type=1400 audit(1756189617.709:840): avc: denied { mount } for pid=3644 comm="syz.1.43" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.962528][ T29] audit: type=1400 audit(1756189617.709:841): avc: denied { accept } for pid=3644 comm="syz.1.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 44.986591][ T3647] loop2: detected capacity change from 0 to 8192 [ 44.994945][ T3643] netlink: 84 bytes leftover after parsing attributes in process `syz.3.42'. [ 45.003996][ T3643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 45.012971][ T3643] netlink: 84 bytes leftover after parsing attributes in process `syz.3.42'. [ 45.025286][ T3647] loop2: p1 p2 p3 p4[DM] [ 45.035327][ T3647] loop2: p1 size 835331 extends beyond EOD, truncated [ 45.045332][ T3390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 45.053845][ T3390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.093006][ T29] audit: type=1400 audit(1756189617.819:842): avc: denied { read write } for pid=3642 comm="syz.3.42" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.116388][ T29] audit: type=1400 audit(1756189617.819:843): avc: denied { open } for pid=3642 comm="syz.3.42" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.143425][ T29] audit: type=1400 audit(1756189617.909:844): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.166327][ T3647] loop2: p2 size 16777223 extends beyond EOD, truncated [ 45.169767][ T3654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 45.176085][ T3647] loop2: p3 start 1052673 is beyond EOD, truncated [ 45.188872][ T3647] loop2: p4 size 262144 extends beyond EOD, truncated [ 45.208990][ T3643] netlink: 84 bytes leftover after parsing attributes in process `syz.3.42'. [ 45.217956][ T3643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.42'. [ 45.256592][ T2993] loop2: p1 p2 p3 p4[DM] [ 45.261970][ T2993] loop2: p1 size 835331 extends beyond EOD, truncated [ 45.284290][ T2993] loop2: p2 size 16777223 extends beyond EOD, truncated [ 45.294059][ T2993] loop2: p3 start 1052673 is beyond EOD, truncated [ 45.300622][ T2993] loop2: p4 size 262144 extends beyond EOD, truncated [ 45.317795][ T3664] loop1: detected capacity change from 0 to 128 [ 45.330550][ T3664] netlink: 'syz.1.45': attribute type 11 has an invalid length. [ 45.404585][ T3658] syz.1.45 (3658): attempted to duplicate a private mapping with mremap. This is not supported. [ 45.517686][ T1036] Process accounting resumed [ 45.530616][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.539111][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 45.553462][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 45.581997][ T3674] loop0: detected capacity change from 0 to 512 [ 45.611932][ T3674] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.623526][ T3674] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.644443][ T3674] EXT4-fs (loop0): 1 truncate cleaned up [ 45.650617][ T3674] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.787749][ T3647] netlink: 'syz.2.40': attribute type 27 has an invalid length. [ 45.902581][ T3687] loop3: detected capacity change from 0 to 128 [ 46.338932][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.348869][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.495334][ T3676] Set syz1 is full, maxelem 65536 reached [ 46.534154][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.568356][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.581401][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.610014][ T272] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.619351][ T272] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.639427][ T272] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.652236][ T272] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.672408][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.681628][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.766309][ T3707] sg_write: data in/out 8156/14 bytes for SCSI command 0x0-- guessing data in; [ 46.766309][ T3707] program syz.4.55 not setting count and/or reply_len properly [ 46.808958][ T3711] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 46.919397][ T3715] loop4: detected capacity change from 0 to 4096 [ 46.946430][ T3723] loop1: detected capacity change from 0 to 1024 [ 46.952052][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.966359][ T3723] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.976746][ T3723] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 47.057702][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.301260][ T3737] loop2: detected capacity change from 0 to 512 [ 47.308527][ T3737] EXT4-fs: Ignoring removed bh option [ 47.314093][ T3737] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.323390][ T3737] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 47.343800][ T3737] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 47.360757][ T3737] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.367716][ T3741] loop4: detected capacity change from 0 to 512 [ 47.374556][ T3737] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.62: Failed to acquire dquot type 1 [ 47.391093][ T3737] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.62: Invalid block bitmap block 0 in block_group 0 [ 47.405274][ T3737] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.62: Invalid block bitmap block 0 in block_group 0 [ 47.419235][ T3737] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.62: Invalid block bitmap block 0 in block_group 0 [ 47.424589][ T3741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.445581][ T3741] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.499561][ T3745] loop1: detected capacity change from 0 to 1024 [ 47.499924][ T3737] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.62: Invalid block bitmap block 0 in block_group 0 [ 47.539635][ T3737] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.62: Failed to acquire dquot type 1 [ 47.543607][ T3745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.551505][ T3737] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.62: Failed to acquire dquot type 1 [ 47.576618][ T3737] EXT4-fs (loop2): 1 orphan inode deleted [ 47.659928][ T3745] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 47.672421][ T3745] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.672421][ T3745] [ 47.682232][ T3745] EXT4-fs (loop1): Total free blocks count 0 [ 47.688269][ T3745] EXT4-fs (loop1): Free/Dirty block details [ 47.694209][ T3745] EXT4-fs (loop1): free_blocks=0 [ 47.699165][ T3745] EXT4-fs (loop1): dirty_blocks=0 [ 47.704246][ T3745] EXT4-fs (loop1): Block reservation details [ 47.710256][ T3745] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 47.713359][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.846549][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.858104][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.878303][ T3762] netlink: 'syz.1.69': attribute type 21 has an invalid length. [ 47.959117][ T3770] tmpfs: Unknown parameter 'quota' [ 47.969596][ T3770] lo speed is unknown, defaulting to 1000 [ 47.975584][ T3770] lo speed is unknown, defaulting to 1000 [ 47.981826][ T3770] lo speed is unknown, defaulting to 1000 [ 47.988358][ T3770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.996591][ T3770] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 48.009145][ T3770] lo speed is unknown, defaulting to 1000 [ 48.015738][ T3770] lo speed is unknown, defaulting to 1000 [ 48.022092][ T3770] lo speed is unknown, defaulting to 1000 [ 48.028992][ T3770] lo speed is unknown, defaulting to 1000 [ 48.035480][ T3770] lo speed is unknown, defaulting to 1000 [ 48.105379][ T3762] loop1: detected capacity change from 0 to 512 [ 48.162402][ T3762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.285225][ T3737] syz.2.62 (3737) used greatest stack depth: 9072 bytes left [ 48.313117][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.399701][ T3764] tipc: Started in network mode [ 48.404671][ T3764] tipc: Node identity a2be2b7df3d8, cluster identity 4711 [ 48.411898][ T3764] tipc: Enabled bearer , priority 0 [ 48.444320][ T3764] tipc: Disabling bearer [ 48.484625][ T3779] loop2: detected capacity change from 0 to 512 [ 48.498535][ T3779] EXT4-fs: quotafile must be on filesystem root [ 48.599103][ T3782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.606624][ T3782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.646628][ T3782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.654099][ T3782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.696709][ T3774] wireguard0: entered promiscuous mode [ 48.702239][ T3774] wireguard0: entered allmulticast mode [ 48.720163][ T3789] wireguard0: entered promiscuous mode [ 48.725800][ T3789] wireguard0: entered allmulticast mode [ 48.764724][ T3794] loop4: detected capacity change from 0 to 512 [ 48.772600][ T3794] EXT4-fs: Ignoring removed oldalloc option [ 48.778625][ T3794] EXT4-fs: Ignoring removed bh option [ 48.870505][ T3798] netlink: 'syz.0.76': attribute type 3 has an invalid length. [ 49.001985][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.099193][ T3801] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 49.225546][ T3805] loop3: detected capacity change from 0 to 1024 [ 49.328666][ T3794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 49.333110][ T3805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.337276][ T3794] System zones: 1-12 [ 49.352704][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 49.358937][ T29] audit: type=1326 audit(1756189622.119:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38067fd550 code=0x7ffc0000 [ 49.382251][ T29] audit: type=1326 audit(1756189622.119:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f38067fd937 code=0x7ffc0000 [ 49.405427][ T29] audit: type=1326 audit(1756189622.119:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38067fd550 code=0x7ffc0000 [ 49.428694][ T29] audit: type=1326 audit(1756189622.119:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 49.452021][ T29] audit: type=1326 audit(1756189622.119:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 49.479715][ T3794] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.74: corrupted in-inode xattr: e_value size too large [ 49.489404][ T3805] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 49.505960][ T3805] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.505960][ T3805] [ 49.515752][ T3805] EXT4-fs (loop3): Total free blocks count 0 [ 49.521760][ T3805] EXT4-fs (loop3): Free/Dirty block details [ 49.527769][ T3805] EXT4-fs (loop3): free_blocks=0 [ 49.528366][ T29] audit: type=1326 audit(1756189622.249:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 49.532840][ T3805] EXT4-fs (loop3): dirty_blocks=0 [ 49.556076][ T29] audit: type=1326 audit(1756189622.249:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 49.561111][ T3805] EXT4-fs (loop3): Block reservation details [ 49.584486][ T29] audit: type=1326 audit(1756189622.249:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 49.590389][ T3805] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 49.613624][ T29] audit: type=1326 audit(1756189622.249:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 49.642749][ T29] audit: type=1326 audit(1756189622.249:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3803 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 49.673768][ T3794] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.74: couldn't read orphan inode 15 (err -117) [ 49.687661][ T3794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.715201][ T3794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.745751][ T3818] loop2: detected capacity change from 0 to 164 [ 49.756241][ T3818] rock: directory entry would overflow storage [ 49.762899][ T3818] rock: sig=0x66, size=4, remaining=3 [ 49.768598][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.770939][ T3818] rock: directory entry would overflow storage [ 49.783983][ T3818] rock: sig=0x66, size=4, remaining=3 [ 49.822672][ T3824] __nla_validate_parse: 19 callbacks suppressed [ 49.822689][ T3824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'. [ 49.938381][ T3818] rock: directory entry would overflow storage [ 49.944823][ T3818] rock: sig=0x66, size=4, remaining=3 [ 49.957242][ T3838] loop3: detected capacity change from 0 to 1024 [ 49.987902][ T3838] EXT4-fs: dax option not supported [ 50.009741][ T3843] loop4: detected capacity change from 0 to 164 [ 50.017259][ T3846] batman_adv: batadv0: Adding interface: dummy0 [ 50.023602][ T3846] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.071069][ T3818] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.090574][ T3843] rock: directory entry would overflow storage [ 50.096809][ T3843] rock: sig=0x66, size=4, remaining=3 [ 50.122488][ T3846] batman_adv: batadv0: Interface activated: dummy0 [ 50.153935][ T3843] rock: directory entry would overflow storage [ 50.160144][ T3843] rock: sig=0x66, size=4, remaining=3 [ 50.183988][ T3852] batadv0: mtu less than device minimum [ 50.190117][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.200903][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.211871][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.222678][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.233415][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.244286][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.255110][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.265905][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.276605][ T3852] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 50.311256][ T3868] netlink: 'syz.0.88': attribute type 21 has an invalid length. [ 50.484029][ T3869] rock: directory entry would overflow storage [ 50.490244][ T3869] rock: sig=0x66, size=4, remaining=3 [ 50.496055][ T3869] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.520684][ T3888] IPVS: Error joining to the multicast group [ 50.533789][ T3868] loop0: detected capacity change from 0 to 512 [ 50.546576][ T3868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.731848][ T3894] netlink: 88 bytes leftover after parsing attributes in process `syz.1.89'. [ 51.098819][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.136691][ T3905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3905 comm=syz.0.92 [ 51.149078][ T3905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3905 comm=syz.0.92 [ 51.172759][ T3906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'. [ 51.173719][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.92'. [ 51.181659][ T3906] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'. [ 51.203952][ T3905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1540 sclass=netlink_audit_socket pid=3905 comm=syz.0.92 [ 51.222282][ T3906] loop4: detected capacity change from 0 to 1024 [ 51.263849][ T3906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.313805][ T3896] wireguard0: entered promiscuous mode [ 51.319354][ T3896] wireguard0: entered allmulticast mode [ 51.424234][ T3906] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 51.436688][ T3906] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.436688][ T3906] [ 51.446624][ T3906] EXT4-fs (loop4): Total free blocks count 0 [ 51.452646][ T3906] EXT4-fs (loop4): Free/Dirty block details [ 51.458733][ T3906] EXT4-fs (loop4): free_blocks=0 [ 51.463885][ T3906] EXT4-fs (loop4): dirty_blocks=0 [ 51.468966][ T3906] EXT4-fs (loop4): Block reservation details [ 51.475101][ T3906] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 51.542497][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.671535][ T3914] tipc: Started in network mode [ 51.676544][ T3914] tipc: Node identity c2ef705daa33, cluster identity 4711 [ 51.683837][ T3914] tipc: Enabled bearer , priority 0 [ 51.693428][ T3914] tipc: Disabling bearer [ 51.710583][ T3920] lo speed is unknown, defaulting to 1000 [ 52.167722][ T3934] wireguard0: entered promiscuous mode [ 52.173379][ T3934] wireguard0: entered allmulticast mode [ 52.217954][ T3938] loop3: detected capacity change from 0 to 512 [ 52.228647][ T3938] EXT4-fs: Ignoring removed oldalloc option [ 52.234720][ T3938] EXT4-fs: Ignoring removed bh option [ 52.255378][ T3938] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 52.271817][ T3938] System zones: 1-12 [ 52.367049][ T3938] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.100: corrupted in-inode xattr: e_value size too large [ 52.383010][ T3938] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.100: couldn't read orphan inode 15 (err -117) [ 52.403722][ T3938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.419522][ T3938] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.577893][ T3947] netlink: 'syz.3.103': attribute type 21 has an invalid length. [ 52.698121][ T3949] IPVS: Error joining to the multicast group [ 52.920932][ T3947] loop3: detected capacity change from 0 to 512 [ 52.965911][ T3947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.096298][ T3961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3961 comm=syz.4.105 [ 53.108818][ T3961] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3961 comm=syz.4.105 [ 53.134510][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 53.148723][ T3964] loop0: detected capacity change from 0 to 1024 [ 53.155644][ T3964] EXT4-fs: dax option not supported [ 53.192570][ T3968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1540 sclass=netlink_audit_socket pid=3968 comm=syz.4.105 [ 53.292621][ T3973] loop0: detected capacity change from 0 to 164 [ 53.326394][ T3973] rock: directory entry would overflow storage [ 53.332637][ T3973] rock: sig=0x66, size=4, remaining=3 [ 53.344284][ T3973] rock: directory entry would overflow storage [ 53.350552][ T3973] rock: sig=0x66, size=4, remaining=3 [ 53.357795][ T3976] loop4: detected capacity change from 0 to 164 [ 53.367097][ T3976] rock: directory entry would overflow storage [ 53.373440][ T3976] rock: sig=0x66, size=4, remaining=3 [ 53.396100][ T3977] /dev/sg0: Can't lookup blockdev [ 53.420051][ T3978] rock: directory entry would overflow storage [ 53.425359][ T3976] rock: directory entry would overflow storage [ 53.426326][ T3978] rock: sig=0x66, size=4, remaining=3 [ 53.432443][ T3976] rock: sig=0x66, size=4, remaining=3 [ 53.448400][ T3978] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.633260][ T3981] rock: directory entry would overflow storage [ 53.639446][ T3981] rock: sig=0x66, size=4, remaining=3 [ 53.646061][ T3981] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.678078][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.939732][ T3988] loop3: detected capacity change from 0 to 512 [ 53.946678][ T3988] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.953237][ T3988] ext4: Unknown parameter 'obj_type' [ 53.979021][ T3988] lo speed is unknown, defaulting to 1000 [ 54.199367][ T3990] netlink: 84 bytes leftover after parsing attributes in process `syz.2.112'. [ 54.208329][ T3990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 54.217329][ T3990] netlink: 84 bytes leftover after parsing attributes in process `syz.2.112'. [ 54.329683][ T3410] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.339153][ T3990] netlink: 84 bytes leftover after parsing attributes in process `syz.2.112'. [ 54.362091][ T3410] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.384554][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 54.384637][ T29] audit: type=1400 audit(1756189627.159:1692): avc: denied { ioctl } for pid=3991 comm="syz.1.111" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.496460][ T29] audit: type=1400 audit(1756189627.259:1693): avc: denied { write } for pid=3989 comm="syz.2.112" name="hidraw0" dev="devtmpfs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.660688][ T29] audit: type=1400 audit(1756189627.429:1694): avc: denied { append } for pid=4008 comm="+}[@" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.711817][ T3998] wireguard0: entered promiscuous mode [ 54.717401][ T3998] wireguard0: entered allmulticast mode [ 54.776742][ T29] audit: type=1400 audit(1756189627.549:1695): avc: denied { mount } for pid=4011 comm="syz.2.117" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 54.803734][ T4012] loop2: detected capacity change from 0 to 2364 [ 54.827923][ T29] audit: type=1400 audit(1756189627.599:1696): avc: denied { create } for pid=4011 comm="syz.2.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.832576][ T4012] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 54.854333][ T4012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.861933][ T4012] vhci_hcd vhci_hcd.0: Device attached [ 54.877310][ T4012] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 54.883952][ T4012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.884919][ T4017] __nla_validate_parse: 5 callbacks suppressed [ 54.884935][ T4017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.118'. [ 54.891504][ T4012] vhci_hcd vhci_hcd.0: Device attached [ 54.908084][ T29] audit: type=1326 audit(1756189627.679:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 54.916564][ T4012] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 54.942109][ T4012] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 54.945484][ T29] audit: type=1326 audit(1756189627.679:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.3.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38067febe9 code=0x7ffc0000 [ 54.949763][ T4012] vhci_hcd vhci_hcd.0: Device attached [ 54.960989][ T4012] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(17) [ 54.985150][ T4012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.992918][ T4012] vhci_hcd vhci_hcd.0: Device attached [ 55.003836][ T4012] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 55.010522][ T4012] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.018252][ T4012] vhci_hcd vhci_hcd.0: Device attached [ 55.024594][ T4026] vhci_hcd: connection closed [ 55.024622][ T4022] vhci_hcd: connection closed [ 55.024651][ T4018] vhci_hcd: connection closed [ 55.029344][ T4020] vhci_hcd: connection closed [ 55.031922][ T4024] vhci_hcd: connection closed [ 55.043838][ T3443] vhci_hcd: stop threads [ 55.052868][ T3443] vhci_hcd: release socket [ 55.057356][ T3443] vhci_hcd: disconnect device [ 55.065009][ T3443] vhci_hcd: stop threads [ 55.069331][ T3443] vhci_hcd: release socket [ 55.073824][ T3443] vhci_hcd: disconnect device [ 55.078810][ T3443] vhci_hcd: stop threads [ 55.083177][ T3443] vhci_hcd: release socket [ 55.087685][ T3443] vhci_hcd: disconnect device [ 55.112244][ T3443] vhci_hcd: stop threads [ 55.116604][ T3443] vhci_hcd: release socket [ 55.121159][ T3443] vhci_hcd: disconnect device [ 55.122781][ T3390] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 55.135124][ T3390] usb 5-1: enqueue for inactive port 0 [ 55.141774][ T3390] usb 5-1: enqueue for inactive port 0 [ 55.146503][ T3443] vhci_hcd: stop threads [ 55.151599][ T3443] vhci_hcd: release socket [ 55.156156][ T3443] vhci_hcd: disconnect device [ 55.157277][ T3390] usb 5-1: enqueue for inactive port 0 [ 55.168960][ T4031] batman_adv: batadv0: Interface deactivated: dummy0 [ 55.175893][ T4031] batman_adv: batadv0: Removing interface: dummy0 [ 55.219828][ T4034] netlink: 'syz.4.122': attribute type 21 has an invalid length. [ 55.239138][ T4035] loop0: detected capacity change from 0 to 1024 [ 55.246285][ T4035] EXT4-fs: dax option not supported [ 55.294209][ T4042] loop0: detected capacity change from 0 to 164 [ 55.316936][ T4042] rock: directory entry would overflow storage [ 55.323217][ T4042] rock: sig=0x66, size=4, remaining=3 [ 55.334073][ T3390] vhci_hcd: vhci_device speed not set [ 55.371030][ T4042] rock: directory entry would overflow storage [ 55.377328][ T4042] rock: sig=0x66, size=4, remaining=3 [ 55.544317][ T4045] lo speed is unknown, defaulting to 1000 [ 55.877136][ T4034] loop4: detected capacity change from 0 to 512 [ 55.900413][ T4034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.927692][ T4049] rock: directory entry would overflow storage [ 55.934021][ T4049] rock: sig=0x66, size=4, remaining=3 [ 55.958080][ T29] audit: type=1400 audit(1756189628.719:1699): avc: denied { bind } for pid=4033 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.977638][ T29] audit: type=1400 audit(1756189628.719:1700): avc: denied { setopt } for pid=4033 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.997377][ T29] audit: type=1400 audit(1756189628.719:1701): avc: denied { write } for pid=4033 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.060855][ T4049] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.166661][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.373911][ T4060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.382901][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.391865][ T4060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.697816][ T4060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.706891][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.715909][ T4060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.729422][ T4071] loop2: detected capacity change from 0 to 164 [ 56.739842][ T4071] rock: directory entry would overflow storage [ 56.746160][ T4071] rock: sig=0x66, size=4, remaining=3 [ 56.753761][ T4071] rock: directory entry would overflow storage [ 56.759932][ T4071] rock: sig=0x66, size=4, remaining=3 [ 56.774380][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 56.845565][ T4060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.854542][ T4060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.863505][ T4060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.129'. [ 56.984999][ T4071] rock: directory entry would overflow storage [ 56.991231][ T4071] rock: sig=0x66, size=4, remaining=3 [ 57.004672][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.060622][ T4084] loop4: detected capacity change from 0 to 512 [ 57.067543][ T4084] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.074062][ T4084] ext4: Unknown parameter 'obj_type' [ 57.119920][ T4084] lo speed is unknown, defaulting to 1000 [ 57.347835][ T4071] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 57.427561][ T4085] fido_id[4085]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.089083][ T4054] net_ratelimit: 10 callbacks suppressed [ 58.089102][ T4054] Set syz1 is full, maxelem 65536 reached [ 58.166587][ T4100] lo speed is unknown, defaulting to 1000 [ 58.432091][ T4113] loop3: detected capacity change from 0 to 8192 [ 58.466333][ T4113] loop3: p1 p2 p3 p4[DM] [ 58.471601][ T4113] loop3: p1 size 835331 extends beyond EOD, truncated [ 58.484642][ T4113] loop3: p2 size 16777223 extends beyond EOD, truncated [ 58.494196][ T4113] loop3: p3 start 1052673 is beyond EOD, truncated [ 58.500764][ T4113] loop3: p4 size 262144 extends beyond EOD, truncated [ 58.768944][ T4127] loop4: detected capacity change from 0 to 512 [ 58.779406][ T4127] EXT4-fs: Ignoring removed bh option [ 58.785082][ T4127] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.799255][ T4127] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 58.813055][ T4127] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 58.821424][ T4127] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.829074][ T4127] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.142: Failed to acquire dquot type 1 [ 58.841034][ T4127] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.142: Invalid block bitmap block 0 in block_group 0 [ 58.855892][ T4127] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.142: Invalid block bitmap block 0 in block_group 0 [ 58.869766][ T4127] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.142: Invalid block bitmap block 0 in block_group 0 [ 58.884947][ T4127] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.142: Failed to acquire dquot type 1 [ 58.904383][ T4127] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.142: Failed to acquire dquot type 1 [ 58.916026][ T4127] EXT4-fs (loop4): 1 orphan inode deleted [ 58.922414][ T4127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.018741][ T4137] lo speed is unknown, defaulting to 1000 [ 59.124767][ T4113] netlink: 'syz.3.138': attribute type 27 has an invalid length. [ 59.269486][ T4141] loop0: detected capacity change from 0 to 164 [ 59.338463][ T4141] rock: directory entry would overflow storage [ 59.344807][ T4141] rock: sig=0x66, size=4, remaining=3 [ 59.363361][ T4141] rock: directory entry would overflow storage [ 59.369598][ T4141] rock: sig=0x66, size=4, remaining=3 [ 59.409814][ T4113] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.417137][ T4113] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.431107][ T4143] rock: directory entry would overflow storage [ 59.437344][ T4143] rock: sig=0x66, size=4, remaining=3 [ 59.443296][ T4143] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 59.485433][ T4113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.496223][ T4113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.547708][ T272] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.573407][ T31] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.584266][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 59.584281][ T29] audit: type=1400 audit(1756189632.359:1753): avc: denied { mount } for pid=4151 comm="syz.3.146" name="/" dev="ramfs" ino=6975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.626871][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.705919][ T29] audit: type=1400 audit(1756189632.479:1754): avc: denied { create } for pid=4156 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.725818][ T29] audit: type=1400 audit(1756189632.479:1755): avc: denied { bind } for pid=4156 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.727241][ T272] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.745117][ T29] audit: type=1400 audit(1756189632.479:1756): avc: denied { listen } for pid=4156 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.767515][ T4164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.772816][ T29] audit: type=1400 audit(1756189632.479:1757): avc: denied { create } for pid=4156 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 59.772872][ T29] audit: type=1400 audit(1756189632.479:1758): avc: denied { accept } for pid=4156 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.780737][ T29] audit: type=1400 audit(1756189632.529:1759): avc: denied { write } for pid=4156 comm="syz.0.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 59.919232][ T4164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.986483][ T4165] 9pnet_fd: Insufficient options for proto=fd [ 59.993713][ T272] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.081647][ T4169] /dev/sg0: Can't lookup blockdev [ 60.277432][ T4174] loop0: detected capacity change from 0 to 512 [ 60.303931][ T4174] EXT4-fs: Ignoring removed bh option [ 60.309491][ T4174] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.331536][ T4174] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 60.370813][ T4175] __nla_validate_parse: 5 callbacks suppressed [ 60.370831][ T4175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'. [ 60.398226][ T4174] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 60.421553][ T4174] EXT4-fs (loop0): orphan cleanup on readonly fs [ 60.438655][ T4174] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 60.448491][ T4174] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 60.530353][ T4174] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.161: Failed to acquire dquot type 1 [ 60.573591][ T4174] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.161: Invalid block bitmap block 0 in block_group 0 [ 60.591498][ T4183] netlink: 'syz.1.153': attribute type 3 has an invalid length. [ 60.593801][ T2956] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 60.625562][ T2956] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.636516][ T4174] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.161: Invalid block bitmap block 0 in block_group 0 [ 60.650502][ T29] audit: type=1400 audit(1756189633.389:1760): avc: denied { read } for pid=3032 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 60.710840][ T4188] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 60.710840][ T4174] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.161: Invalid block bitmap block 0 in block_group 0 [ 60.713566][ T4174] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.161: Failed to acquire dquot type 1 [ 60.773173][ T4188] netlink: 14 bytes leftover after parsing attributes in process `syz.4.155'. [ 60.782136][ T4174] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.161: Failed to acquire dquot type 1 [ 60.813030][ T4174] EXT4-fs (loop0): 1 orphan inode deleted [ 60.823163][ T4174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.045151][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.358120][ T4210] capability: warning: `syz.3.160' uses deprecated v2 capabilities in a way that may be insecure [ 61.453162][ T4212] sit0: entered allmulticast mode [ 61.517488][ T4216] sit0: entered promiscuous mode [ 61.531398][ T4214] loop2: detected capacity change from 0 to 2048 [ 61.540658][ T4214] EXT4-fs: dax option not supported [ 61.626800][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 61.961115][ T4279] batman_adv: batadv0: Adding interface: dummy0 [ 61.967479][ T4279] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.992893][ T4279] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 62.071066][ T4288] loop4: detected capacity change from 0 to 164 [ 62.082526][ T4288] rock: directory entry would overflow storage [ 62.088846][ T4288] rock: sig=0x66, size=4, remaining=3 [ 62.110280][ T4288] rock: directory entry would overflow storage [ 62.116552][ T4288] rock: sig=0x66, size=4, remaining=3 [ 62.172741][ T4294] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 62.275977][ T4298] rock: directory entry would overflow storage [ 62.282300][ T4298] rock: sig=0x66, size=4, remaining=3 [ 62.303511][ T4298] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 62.321244][ T4301] loop3: detected capacity change from 0 to 2364 [ 62.357777][ T4301] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 62.364525][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.372095][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 62.379642][ T4301] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 62.386284][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 62.393896][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 62.401594][ T4301] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 62.408313][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 62.416064][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 62.434211][ T4301] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 62.440866][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.448524][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 62.496997][ T4301] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 62.503655][ T4301] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 62.511425][ T4301] vhci_hcd vhci_hcd.0: Device attached [ 62.517832][ T4316] vhci_hcd: connection closed [ 62.518131][ T4313] vhci_hcd: connection closed [ 62.523167][ T4234] vhci_hcd: stop threads [ 62.532184][ T4234] vhci_hcd: release socket [ 62.536663][ T4234] vhci_hcd: disconnect device [ 62.542584][ T4306] vhci_hcd: connection closed [ 62.545131][ T4311] vhci_hcd: connection closed [ 62.550026][ T4234] vhci_hcd: stop threads [ 62.553712][ T4308] vhci_hcd: connection closed [ 62.554874][ T4234] vhci_hcd: release socket [ 62.568167][ T4234] vhci_hcd: disconnect device [ 62.581304][ T4234] vhci_hcd: stop threads [ 62.585800][ T4234] vhci_hcd: release socket [ 62.590358][ T4234] vhci_hcd: disconnect device [ 62.614940][ T4234] vhci_hcd: stop threads [ 62.619245][ T4234] vhci_hcd: release socket [ 62.623003][ T3390] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 62.623939][ T4234] vhci_hcd: disconnect device [ 62.630969][ T3390] usb 7-1: enqueue for inactive port 0 [ 62.644135][ T3390] usb 7-1: enqueue for inactive port 0 [ 62.652895][ T3390] usb 7-1: enqueue for inactive port 0 [ 62.663692][ T4234] vhci_hcd: stop threads [ 62.667973][ T4234] vhci_hcd: release socket [ 62.670915][ T4319] loop2: detected capacity change from 0 to 512 [ 62.672607][ T4234] vhci_hcd: disconnect device [ 62.687959][ T4319] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.701598][ T4319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.722930][ T3390] vhci_hcd: vhci_device speed not set [ 62.734033][ T4319] EXT4-fs (loop2): 1 truncate cleaned up [ 62.746052][ T4319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.906934][ T4328] veth1_to_bond: entered allmulticast mode [ 62.927999][ T4328] veth1_to_bond: left allmulticast mode [ 63.080155][ T4337] batman_adv: batadv0: Adding interface: dummy0 [ 63.086531][ T4337] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.111861][ T4337] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 63.260371][ T4344] loop0: detected capacity change from 0 to 2048 [ 63.269126][ T4344] EXT4-fs: dax option not supported [ 63.281467][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.178'. [ 63.536695][ T4319] ================================================================== [ 63.544852][ T4319] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 63.552785][ T4319] [ 63.555134][ T4319] write to 0xffff888106bbe9a4 of 4 bytes by task 4326 on cpu 0: [ 63.562773][ T4319] xas_set_mark+0x12b/0x140 [ 63.567293][ T4319] __folio_start_writeback+0x1dd/0x440 [ 63.572866][ T4319] ext4_bio_write_folio+0x5ad/0x9f0 [ 63.578101][ T4319] mpage_process_page_bufs+0x4a1/0x620 [ 63.583569][ T4319] mpage_prepare_extent_to_map+0x786/0xc00 [ 63.589407][ T4319] ext4_do_writepages+0xa05/0x2750 [ 63.594540][ T4319] ext4_writepages+0x176/0x300 [ 63.599370][ T4319] do_writepages+0x1c3/0x310 [ 63.603980][ T4319] file_write_and_wait_range+0x156/0x2c0 [ 63.609637][ T4319] generic_buffers_fsync_noflush+0x45/0x120 [ 63.615534][ T4319] ext4_sync_file+0x1ab/0x690 [ 63.620236][ T4319] vfs_fsync_range+0x10d/0x130 [ 63.625008][ T4319] ext4_buffered_write_iter+0x34f/0x3c0 [ 63.630580][ T4319] ext4_file_write_iter+0xdbf/0xf00 [ 63.635802][ T4319] iter_file_splice_write+0x663/0xa60 [ 63.641207][ T4319] direct_splice_actor+0x153/0x2a0 [ 63.646325][ T4319] splice_direct_to_actor+0x30f/0x680 [ 63.651707][ T4319] do_splice_direct+0xda/0x150 [ 63.656467][ T4319] do_sendfile+0x380/0x650 [ 63.660893][ T4319] __x64_sys_sendfile64+0x105/0x150 [ 63.666114][ T4319] x64_sys_call+0x2bb0/0x2ff0 [ 63.670804][ T4319] do_syscall_64+0xd2/0x200 [ 63.675322][ T4319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.681225][ T4319] [ 63.683555][ T4319] read to 0xffff888106bbe9a4 of 4 bytes by task 4319 on cpu 1: [ 63.691113][ T4319] __writeback_single_inode+0x1f9/0x7c0 [ 63.696683][ T4319] writeback_single_inode+0x167/0x3e0 [ 63.702131][ T4319] sync_inode_metadata+0x5b/0x90 [ 63.707092][ T4319] generic_buffers_fsync_noflush+0xd9/0x120 [ 63.713007][ T4319] ext4_sync_file+0x1ab/0x690 [ 63.717717][ T4319] vfs_fsync_range+0x10d/0x130 [ 63.722504][ T4319] ext4_buffered_write_iter+0x34f/0x3c0 [ 63.728099][ T4319] ext4_file_write_iter+0xdbf/0xf00 [ 63.733370][ T4319] iter_file_splice_write+0x663/0xa60 [ 63.738762][ T4319] direct_splice_actor+0x153/0x2a0 [ 63.743881][ T4319] splice_direct_to_actor+0x30f/0x680 [ 63.749271][ T4319] do_splice_direct+0xda/0x150 [ 63.754040][ T4319] do_sendfile+0x380/0x650 [ 63.758483][ T4319] __x64_sys_sendfile64+0x105/0x150 [ 63.763705][ T4319] x64_sys_call+0x2bb0/0x2ff0 [ 63.768402][ T4319] do_syscall_64+0xd2/0x200 [ 63.773018][ T4319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.778980][ T4319] [ 63.781307][ T4319] value changed: 0x0a000021 -> 0x04000021 [ 63.787044][ T4319] [ 63.789376][ T4319] Reported by Kernel Concurrency Sanitizer on: [ 63.795545][ T4319] CPU: 1 UID: 0 PID: 4319 Comm: syz.2.172 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.805195][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.815275][ T4319] ================================================================== [ 63.903342][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.