last executing test programs: 3.885205043s ago: executing program 4 (id=135): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) 3.824839228s ago: executing program 4 (id=137): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000f900b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8, 0x7, 0x9, 0x7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) utimes(&(0x7f0000000640)='./file0\x00', 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x1ff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffa6, &(0x7f00000003c0)=[{&(0x7f0000000640)="d80000001a00810e4e81f782db4cb9040a1d0800fe007c05e8fe55a10a0015000200142603600e12080002007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efbe600a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd2}, {&(0x7f0000000cc0)="14a3546ac510", 0x6}], 0x2}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) sendto$inet(r2, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 2.829279272s ago: executing program 0 (id=154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xd9}}}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20"], 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f00000005c0)) sendmmsg(r3, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) dup2(r3, r2) 2.743671209s ago: executing program 0 (id=156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074641008000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x40000) 2.701428473s ago: executing program 0 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xfffff399, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) 2.056572497s ago: executing program 0 (id=169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x400) socket$inet_dccp(0x2, 0x6, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 2.055835567s ago: executing program 4 (id=170): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x8882, &(0x7f0000000680)={[{@uid={'uid', 0x3d, r0}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2c63616368653d6c6f6f73652c6bb8261d05a885864be08204c10ce23ad344ba1116ddaec34a66a86faacf4180ef98d88c17c408bcc80826aa98b8a6d12ed6adfc60c68d289917f3e5f6224acad31a8409b07e0118888fe592ae63f8b540851187312650148e219833f2a5121e222c"]) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r2, 0x0, 0x80000000) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12018000b63c3420f30c7593481c0102030109022400010000000009040000023883c80009050f0000040000000905080000020000003f68985c584cc4b30ba44603dc7809e2202197b5c71cc408622d3632"], 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r6, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00'], 0x60}, 0x20000810) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) write$selinux_context(r4, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone(0x1008380, &(0x7f0000000540)="6f62361406fedc39f462e728db0bf8da07109c05f711246bcec9a9ebd70fda4331018ae862f923c2caa161b33b5125c6fa22b1c4fd09f97d4bec4cc2ab46b66fd8bc6e0adcdc610084f4ca8d68f8b69e39813610d5766573f0bf9b165f7add68e563cea9f318dab1baf43c9ab912a0ce63363cedf59df45ed43b899c3c24def4a4414d9f8c131c3d2fda9f690b1deef8", 0x90, &(0x7f0000000600), &(0x7f0000000640), &(0x7f00000006c0)="55bf507902cdb1473037fc96b027f5b976cf1404d192da5343") bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r1, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) 1.943806897s ago: executing program 0 (id=177): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x17, &(0x7f0000000680)=ANY=[], 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) 1.78306984s ago: executing program 0 (id=182): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000f900b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) utimes(&(0x7f0000000640)='./file0\x00', 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x1ff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffa6, &(0x7f00000003c0)=[{&(0x7f0000000640)="d80000001a00810e4e81f782db4cb9040a1d0800fe007c05e8fe55a10a0015000200142603600e12080002007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efbe600a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd2}, {&(0x7f0000000cc0)="14a3546ac510", 0x6}], 0x2}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) sendto$inet(r3, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 1.31635216s ago: executing program 4 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000001000000000000007ba08ee53652b8a2c6cd0285ba592ed8a77f677ae0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000a509ce864ce18b1153a9b55c6bdf1111d12800cac32b9d44bafa4e0000279a71", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioperm(0x0, 0xfffc, 0x8005) mremap(&(0x7f0000ce3000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000fc0000/0x3000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x6d, r6, 0x301, 0x0, 0x25dfdbfc, {{0x32}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}]]}, 0x1c}}, 0x800) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x1e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) io_setup(0x5, &(0x7f0000000000)) io_setup(0x31cd, &(0x7f0000000040)=0x0) io_setup(0x6, &(0x7f0000000080)) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @empty}}}], 0x20}, 0x0) unshare(0x22020400) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000100000000000000ffff000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b412100008000000dc533d0001000000bf91000000000000b702000002000000850000008500ecffb60000000000000095000000000000000303654bcdbefbcc2ee381646887ad47cae261d9fe47472f95dee84b6d4fdca12764ce3f6d98210816ced1241c258415fcce405862e303eb6ed5"], &(0x7f0000000180)='GPL\x00', 0x0, 0xe4, &(0x7f0000001540)=""/228, 0x40f00, 0x0, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000001640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x7, 0xff, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000016c0)=[r9], &(0x7f0000001700)=[{0x0, 0x1, 0xc, 0x5}, {0x2, 0x5, 0x0, 0x5}, {0x4, 0x4, 0x4, 0x9}], 0x10, 0x4, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r8], &(0x7f0000001740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r11, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x42010600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) socket(0x28, 0x5, 0x0) 1.052852762s ago: executing program 1 (id=196): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000008500000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) timer_create(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r5) 933.391552ms ago: executing program 4 (id=200): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100ff00000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x22}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007"], 0x18}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250400000005000a0001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) r6 = socket(0x2, 0x3, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002280)={{0x1, 0x1, 0x18, r6, {0x1, 0x1}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$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") r7 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f00000000c0)={r6, r7}) write$P9_RREADDIR(r7, &(0x7f0000000500), 0xbf) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r9 = open(&(0x7f0000000040)='./bus\x00', 0x864c42, 0x0) fallocate(r9, 0x0, 0x0, 0x10001) openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) sendfile(r7, r7, &(0x7f0000000240), 0x7f06) 921.840743ms ago: executing program 1 (id=202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000001200)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80, 0x0, 0x2, 0x100, 0xa6a, 0x4, 0x3, 0x0, 0x7}}}}]}, 0x58}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) epoll_pwait2(r11, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f00000000c0), &(0x7f0000000240)={[0xa8]}, 0x8) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{r7, r8/1000+60000}, {r9, r10/1000+10000}}) r12 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, 0x0, 0x0) r13 = semget$private(0x0, 0x4000000009, 0x208) semop(r13, &(0x7f0000000000)=[{0x0, 0xfffb}, {0x1, 0x0, 0x800}], 0x2) semop(r13, &(0x7f0000001400)=[{0x0, 0x200}], 0x1) 915.474634ms ago: executing program 2 (id=203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$eJzs3c9vG1kdAPDvTOImm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7ZkLhRFDuOYmdpQiXS/wGJSpzgT+CAxAGpJ+7c4MalHJAKVKAGiYPRjCdpSOMkbRMb7M9HGs28eeP5vldr3nO/SfwCGFlXI2IvIq5ExMcRMVOcT4ot3u9u2XWPH91Z3n90ZzmJTuejvyV5fXYujrwm83Jxz8mI+N63I36YPB23tbO7vlSv17aKcqXd2Ky0dnZvrDWWVmurtY1qdWF+Ye7dm+9UL6yvbzR+9fBbax98/7e/+eKD3+9948dZs6aLuqP9uEjdrpcO42TGI+KDywg2AGNFf64MuiE8lzQiPhURb+bP/0yM5e/m+ZzwWAMA/wc6nZnozBwtAwDDLs1zYElaLnIB05Gm5XI3h/d6TKX1Zqt9/VZze2OlmyubjVJ6a61emytyhbNRSrLyfH78pFw9Vr4ZEa9FxE8nXsrL5eXz5xkAgIv18rH5/58T3fkfABhyk2ddsNifdgAA/XPm/A8ADB3zPwCMHvM/AIwe8z8AjB7zPwCMnmL+Hxt0OwCAvvjuhx9mW2e/+P7rlU92ttebn9xYqbXWy43t5fJyc2uzvNpsrtZr5eVm46z71ZvNzfm3Y/t2pV1rtSutnd3FRnN7o72Yf6/3Yq3Ul14BAKd57Y37f0wiYu+9l/ItjqzlYK6G4ZYOugHAwMj5w+jyLdwwuvwfHzhrLc+evyJ87zmCdX7yHC8CLtq1z8n/w6iS/4fRJf8Po0v+H0ZXp5P0WvM/PbwEABgqcvxAX3/+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAENiOt+StFysBT4daVouR7wSEbNRSm6t1WtzEfFqRPxhojSRlecH3WgA4AWlf0mK9b+uzbw1fbz2SvKviXwfET/6+Uc/u73Ubm/NZ+f/fni+fa84Xx1E+wGAsxzM0wfz+IHHj+4sH2z9bM/Db3YXF83i7hdbt2Y8xvP9ZJQiYuofSVHuyj6vjF1A/L27EfHZk/qf5LmR2WLl0+Pxs9iv9DV++l/x07yuu8/+LT79DDHPWusVRsX9bPx5/6TnL42r+X7yxMWPJ/MR6sUdjH/7T41/6eH4N9Zj/Lt63hhv/+47PevuRnx+/KT4yWH8pEf8t84Z/09f+NKbveo6v4i4FifHPxqr0m5sVlo7uzfWGkurtdXaRrW6ML8w9+7Nd6qVPEddOchUP+2v711/9bT+T/WIP3lG/796aq87EwdHv/z3xz/48inxv/6Vk9//10+Jn82JXzs1/hNLU7/uuXx3Fn+l2/+7z/r+Xz9n/Ad/3l0556UAQB+0dnbXl+r12taFHpTigm945CC5pDY7GPKD7PP4i97nM0XK7H+gO5d9MOiRCbhsTx76QbcEAAAAAAAAAAAAAADo5dL/nCgddA8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYZv8JAAD//wqryik=") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x400) socket$inet_dccp(0x2, 0x6, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 845.136059ms ago: executing program 1 (id=205): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x5) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1e0) sendfile(r0, r1, 0x0, 0xe065) 723.64267ms ago: executing program 1 (id=206): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063113000000000008510000042000000850000000800000085000000c00000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, 0x0) 709.633241ms ago: executing program 1 (id=207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074641008000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x40000) 687.025723ms ago: executing program 2 (id=209): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tp={0xa, 0x1, {0xffff0000, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x26) sendmsg$netlink(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008}, 0x0) 663.020275ms ago: executing program 1 (id=210): r0 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r0, &(0x7f0000000300)=""/79, 0x4f, 0x2040, &(0x7f0000000380)=@llc={0x1a, 0x8, 0x7, 0x4, 0x9, 0x2}, 0x80) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xda, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x261b1abde7fc3daa, 0x0, 0x3, 0x2c, 0x0, {0x2b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @empty, @multicast2]}, @cipso={0x86, 0x54, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x7, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x4}]}}, "a815a23d"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ftruncate(0xffffffffffffffff, 0xc17a) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x40, 0x1800}], 0x1, 0x0) unshare(0x60400) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000840)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f00000002c0)={[], [{@measure}, {@fsmagic={'fsmagic', 0x3d, 0x5c9992c}}, {@hash}, {@flag='mand'}, {@smackfsfloor={'smackfsfloor', 0x3d, ':*'}}, {@seclabel}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 527.640556ms ago: executing program 2 (id=213): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000008500000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) timer_create(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) close(r5) 526.916296ms ago: executing program 3 (id=214): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 514.314137ms ago: executing program 3 (id=215): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) (fail_nth: 4) 499.967159ms ago: executing program 2 (id=216): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000000), 0x20000000000000a4, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x4, &(0x7f0000000200)={0x0, 0x38, 0x0, @thr={&(0x7f0000000b00)="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", &(0x7f0000000040)="0afe6c8944ce3303e1d38b16db97349eb591fbfbd004840bd97131666b329c59062f41e62cd3292f590a47c7929eace68d98a56116a48cfd53b49e63d5db078ce5dec2eb605285a88b96e005edcdda39a49fe27bc830d59bab38e396f8d1b57370e6a24554189b99fd6d1a853a413c96b0ed"}}, &(0x7f0000000280)) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) r7 = openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.log\x00', 0x4e800, 0xa) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000400)={0x10, 0x3, 0x9d, 0x20927380, 0x5, "d0705dffb69a22c029dbcead836a29ea1c67a0", 0x1, 0x5}) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8, r2}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) 172.500996ms ago: executing program 2 (id=217): ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x5) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1e0) sendfile(r0, r1, 0x0, 0xe065) 140.705729ms ago: executing program 3 (id=218): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063113000000000008510000042000000850000000800000085000000c00000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 104.186331ms ago: executing program 2 (id=219): socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f00000010c0)="aabf75aa76c3ada74bf44ac8955581057e1778604df77693559ffad6cc78741642e0f21c507a79c29daba641a268ce55abe36b0fa2268a6fffbb8016b62549418cd3f951d1850854ec210ea8034faf1626e616a36c6bc0c9b4372b0e28213019e3db182fd0858a17e87ff7a5dddc89594225d78441a533082ed3e8047f12269778c40721cacf71f32543874a345938224419dce2fd44b7a62c1d0d98a0cf23c2fc16894ba549a2edfb7e300f14c30f64429d25ea9b26b9fbf839fb039e46bc8dcf12d7ce62c8cbc9f0d5ffff56a577edd86949d10e6e37e31297ce4e5585bc3d3ac00acbeec51d8164359204a918b4d1de4514705d55e2105084aece8a83f28fb3e46eb4f24b966af622fcf31c4cb601f5a2b82d42a2172ad0b1939c585891940b81aa9c5c6cdb0676b998025ea4ac0fc18aa24fd5d562b1dd4f23e3ac63f0233fb4465c5e5a96599ecc0fd8dd7e7d48a8b96db03630613905fd610ceec2eb9b6962645bd959cb08493806bb6d0ccb067a048c7ec34cc3ab4aec1b8e4253de22949b0c9a9d1dec77d903d6018eafd0e81dc7090ea108057e631003da3104c2eb839bc8428be6a497a051b03b80c02d8f8efc20330853a81ba6e36c41fcbc63e2345075a99164f8108452c298a49da500c16ecd20fca9577814e657a767c5f310d0c8a71b134a995e40c7924ec6ffe956ab10ff39e3a07b28af2a668df944869bffd39494fa0150a7a46491659c0afb122c91a50d08bd50e014bc4c1f7c9ff3fd2d1d813cd0cbf1b3e5d10ed2ae103de7dfa77e76ff55f41f1e1804e4f06bd013ce28511e3469817b0154e58378345928071d63e474e4d8ac2d50c5f7626fc769b2e1c3b2534fec20a8440fd333e2220de76c21ddf83c0e6156f12dbef610a98a0500aaafc0278ceb32591a8c27d7f05cbb1718da94a95df19f72b8072ae01be8d19a3e34ae4cb059cecc5fd95cb1d9116ba62bf1b8926a919a9d88491e8516a5070cd5b74fc46d26e36c5742aaca351dc5c98f97f06e9d7cbc9c318b00a0e73829acaba560cbf0c67c4e60321eeac2e56d355ca483868e76a7e0397a5009a8c83825be2fbbb4fd48e1a0682fab5997ca24046008d5d48740b614bba2c4f48ccc6777ee90ab07b0e6181f52d64f24ec0ad43b2125d2464d55e977d6b7eb62e11c2cf418dccbe16644a3cc008f68e3fa83f73cdd4369cbd3789efe4802d02f364ecac04aa6868b0fa95ec1ed1d50f403d2ea5c7e201e2e5563d940466d77e0f1e3988abcf6b25aeeebb079d4da21e633e83e4b5c090957812ab84232f70ba420981628c74f0bf5e363ef017fa6c9157b844b36f6188e7955f992d587cde528b85315f825ee3d7c3db57db62bca9dfca8ab4014a672d43c3c462aba6de5f17ab252e5ced731a0f5ed018cbf766290c28b6ad4f1ef378c056291172c8ae0f24b7a50e28e6964f72ca1345a13223637b4ebdc19aecf4f93b4c4819ba4380ccd51595938f2255cb22d4d9b270ebb2367b8045d950e9201da4466f1adaa6d19d6387b971ad37505c64e6ffd7f4f04cffb72fde1f0c08912de1c890ba83532839963f527149d4ae501baabe834eb9dc4a2c42c646c4cfc1b735a0c60acdf8a54cc200733282169a8ec10e23b34e713f47eb5c8d18b1700bb4ca77a0c04b55ec546f1f90211906a90738bd3827e9ec5aa2b64cc28b67a0d3b33e4a210b3b4f9e115907f2e660ee849677a99fd3ea2a8bbaf07369fc036d51d2b4bdd94a6ab7421db4686aeabebc3679960286ea0444694bde2d76e69fda96bdbfde78d7345c7a143abab5d0412269d833c5e315d7705e691cc5ce6f70d7f22f762bd3cd2e25d40bc4e5af3e9ee651e1400daa8edf2e6e3d7026f1e22c88a15cb4fa909375999bcc34ef12d0a40b3f3cdcb0be3400edd8c04991ee8cd7778f88b54c517deb9c955d8a43a3606aeef44c6db656bab1164dddc312d1a2b74a520b988fb62fcf08de1b82e9093db5adca8222340257fffb5da79b82adb6f49473cef3a65cbb20a9ffe5760d1f4c6a3f3cc9db3eb1dd9eb44c6a84074f13feed4d45b47037280c7a096da61b397e8002093c6428d00d2a0d249d518636a8ae42f0778bddd723e8410209ca1ebce297d2d88781a378d0e7b8695080f2ec5f907f5cdbf1a8ae0b0d23b5239dd7bed96304cb561be61d68ff3ec90b6bf30f693fa2bb416d935f107e445eb0f492071df1cfcbc9e34173bf3feadfa3d64f99b078f603a5a504704625bd8d85e8a5454edfaf92b0ab95036c8aebc297f4fb8c51ff97740f82f5c220fcaeed0d77ee9007636dc70252d891f2a00ef010ac48153e5d5fd83f88b5c0010e41d312f368a660c50d1574d07242270b814f59abc8c25a26e5cb6ed8915eed0ed188c13f45045afe44e0d8a5e37e51bb7da9b715541c2b54fb5d2e827be94530b6fdd299d67898e89d3d68e0730375d9e8b425b06c61fe3e41b93eed3a239df5df59e6add4c8b8cf48c1b175bf912fc5a51798ed5647377e52a38792ff2263c426c40cc8602113f5664986858939d097f767d67b706053268a36c7f9903cf148a88d4012136ed96057c43922fafd67393afa0f4f245e9e1a8b53a27087bc8bde767208841c412a487cbf7fa9a83bee749a8f095bb35f8bd519766d428f246c47b8f50ffd52aacbdd84696fb7c5761b99a15b0809c3465e10ef658d3d2e26a5b018740ab4f64b76a414bf41184d3334af3f7c7f5349e55ad2e96669da6f6105b7c0a74d8448bea966656612982f86c55fcad791c2532dc1dbd27ddda624f75159ee40cb33fab8b4770a4947cad4d936aa5b7e94c0e57b793fe33aa8d5e896a2c28eb804471eb9aa17abf8c3eb72ef8223995376e5795b9bcd5d3307b557d27ab1cfa50d0eea759391ad9f6d62d1b1000278633e90cfbf3502e2a39f3b05b051ed1200d57c96a9eed32883733c22604a1b45dd2aa1a85a0777b3484bc500d2215f8a3d03c96de14125ed53db3413f08d7396dfd2897708a0cac7c98b61525646fb984fb2a7237238fee9e4cc7938ac8d5b7672007be062040b703fbadd4b249689edf00c0cabda644fd0ab2f608e91e5d59af827d0f48ffbffaa2854f62cbd895a6ccd0267f88f343a727c27156f72cd80a3834f327fd500a8fde965a59de1a7c1fea7d519b0e33535499970307eb6ea0158de51677c1ff711d6e288d070a4ea34fc3e9188398bdc4e4cf8bf79482acdae43ce11a01fd113c0fd67679c8cc1cc81051214a62a8da68a123e1bbda8d624262f795c1252f690e89d0abdefdecb0630b97635d87748581da0101c8fbe09362bc5d62685e8f8a81d24e1c25066460e4fea9fc3d8767112c6b084f9c17491f7d667132a5a00a55f93c974f6da6687b4b437a3a842aa9b0e07144e5f04ab32fe3e637ecb23078698b325b1de6ca629e535e8b69423dab9d25bcfb962b5dab26dc183ed4f305b39f4ef93832bb72d1a705c57937c34222ed878af19c20d220b2213e96618b5b784644da0dfceb639cbba8685a38091dd4ba285026d912b2ba97b592d06a1a8600f04149ac6c69e5714670275639357b2f2b40bc1180ac613a54429a17b81eb7d845ec5b4a6d31eea4de29e4591425a6ec94789370fff872352118768a6e477c3fc5978f7ffd430a50a201276faad56db177dab31e4d592c9156551bf4e472b43f0783b5848f5f51650dbc4e3da1d454f93004415f8dd454ff87997a351853d24123e6ff9c84a4193ef53c77b742204cf94370d3336d7c88b768a3d2766346801efade0baa37964c4fd10003f48fb51ccf669c185940b8e6387fc01e80e87a6bd219c5fd2437eb74fa7aa8e172c2a2cf33cc2e990323a8b14636906ca639c0d4c37f0735e227d48f752b72720f8961f60f3e14722b4cd3adc5fb233595929035d82d45ee4cfca3745303cea020aad4487e7bee26e34260e2783ad0fb0e6a3d38a6aa1ced141dbbc3291a7de961184c3c22f7f6235629cb59d68db14103f4db0956af921a312782052e79f0b88e0d8621966c229449dbac54637a34a519050d670b7203eb53407c24e2fe3ff2f82f57a3d266363fdab8d955a070c897eb9c807afcaca9c50ae0575e327c8158330c786750b608cd407e116b68391a743b36d3eabb05a0d4df0c723376dfb28e5d665cee44a75038ea309094446db302fcac6ebeebd8098f21a9dccf3058fc2790b28e1b752713029473a491dd76c6eb5bac47cc78e3aca0dde814f265751977a492ebf14c2c0b3a90000d9ff2137ed0fe79cc9fa2ac64d06dc1773058ebd83b746a8696e8777b3f267eb71545fb099419576d166b6b0279187f6233032b5c0e9170f699b1edeef6fa10081e5fe4c3e64499226a10dd1f474a2f3c7d136e4243116e0f620a46f1dcc69d90677675ea180fc7420150c2acdfa5c9880e8fb8bdcfbcd223c440515e5f35c0726ac8c027244b0d54fe8f66dec9b0dab14b8ac2893f2159e3fdb9c2443944072462afd57da8c7dde2e619c790bbec8dd73dfcbf8e366820a88829c28856596f6cc498849b00cbff3bb1e775ab92977804e494cb062d3815ff40ff0fbf092ba54ef50e269474ded2d2da15b998e63502f02d48461a9862bef3c7eb72c2b84a157e604236761d6b334708c0b3c91fa51ee0196ef6662e0134fd937cc5c5be1126a8b0b0190a5824eed558afae75a07612f3b290eddc7b57bb26a1e29a04059cc131a86a949702475244b918b822d11dcfa07d49d257d270a59032a8244f4b931ddd017836a4d8d6a2a3e78f4f343dd96a12e46b45150ac2e310c07c3fe88f2106ac01485fb3cb39fa0aca6e5c3e727cf1839b8546aa893d984977f5858a35f37b3488d83c048c33fd6339ac4cdc7560c60d53dc9f8e0bb54dff79523b5bd99699e23bb83165a83c7688b4fa2daedb96d6934ec3d876943023a20d181eb4864b71cda5555d63f2c9b88ffceda8d4c9ea83038072907ec881573a23901d87d965476e596663ba56cf36a9afcc8b47a1c5bc48f540f4c5d483c8228caf11ebb34f35b3248622f863da6ff3e96c8655e667edf5d908ad409b0bb20a4b80c2b109141ba4d02957d937289e889f858f3ae2eeb0b3961e840b06f55d3c95334391e623f3b2d22b6e9390c7a2554c3c4532df0df4bd0d0b4e36ed517218425c388b5e0b8e5bbc917f58df74d92f6230fa7b2c7eb8010f833ab02ca46e443b3093bbb75d533883850fe380482dee2260035a5414ccd4652ff947f71a8016fa425f6d7f9d29a313f12e83c8c7b89dd3f84f503bff1a01a31fa771f37500227a603ac805588ce49b9e405c0feafdc2a285213274f7e76561fcbc5868de9c844bacb649be31e219d10ee5b355ef3846a6633d53ea21d973673d856b18f59a237677bed37255e1a1113181e079dcf590d4be7909015ba4832b541a48f08d503178dab0f2f82b8f818bb5e304ff9d211f6edd8d200418a9e60c0449ed1644ef3cf61c667311474884f76d11f6cd95a1766fdd3b0444af4298d1b244dd89f7f6a48a49d0c1f8a4cb05e3b6bbfe4ff7a9960718b4e739d4ab056daf441046bbf030ea89d2dd16308355c2412ca444c4a7b59780e9ab74da2f7107230259b5d71b9d94b292ac7ea46060f24231727e9bf357b89d2aeebdb4db020d26d59ac9ddd17b81e4b9cb8f248f3c085020efd1a6403a1c852ba82543ca09d51fa5c6a2b9743a5becfc16b7fe2cdae1958494956c6bcf81aee662959aa742e0de61c252e3fbee94a5dd8f", 0xff55}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4491263", 0x78}, {&(0x7f0000000dc0)="ddbf2011806e6720f319cf7328576c5012720676d84a00000000e9db12cfcf678d019c76b79320582d67d9d9e571b973616e6040781ec3f1b435b3f02989f94c0f97948d7eb40fa30d34ab7b60e54947269ebf42004d943feb7c6aaf40e305797c4d8ee50225934e0000000000002b84d3910adadd7baf16836512e01c6600bf3dba330f622a890b81cfe7e3f5198eaa479f8fb43b6cb29da01738d3c731118d05cc82b7018f2fb6b312aad5a940880f1c43ecb052624e41d8cbc7a05194ce7de7c588ea428b45847c723836ced51013b9e9c15813cdc50c07b5fceb3f16ff584cb3e676a5ebf4113730733e88e1f9fa3fc220dc2ee0233d330baca3677f75dab3d312f76067a9407f9c6c6af5e281bb728297e9bf53dca225c39b187f1b9b1c8a8f47be99061f8492d61b1d9164fbc3330a033b0aec34cb8e8b14b7dec5dbd7433a3e0b7b8094989b69943a14df82f603326dc70985f2e024e35e0ed3440d72a190623829558df3b4c69f80", 0x16c}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r6, &(0x7f0000001400)="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", 0x200) sendfile(r6, r7, 0x0, 0xe065) ioctl$TCFLSH(r4, 0x540b, 0x2) 48.341076ms ago: executing program 4 (id=220): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x400) socket$inet_dccp(0x2, 0x6, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 37.959817ms ago: executing program 3 (id=221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074641008000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x40000) 13.922459ms ago: executing program 3 (id=222): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40440, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={0x0, r0}, 0x18) mount(&(0x7f0000000380), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 0s ago: executing program 3 (id=223): unshare(0x20020000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000140)={[{@nobh}, {@nodioread_nolock}]}, 0x1, 0x7a3, &(0x7f0000000880)="$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") rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1841010, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x1f9) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r1, &(0x7f0000000540)="9538", 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000008c0)=[{0x16}]}) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): [ 18.424759][ T29] audit: type=1400 audit(1729092276.196:81): avc: denied { read } for pid=2951 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 23.043189][ T29] audit: type=1400 audit(1729092280.806:82): avc: denied { mounton } for pid=3256 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.044229][ T3256] cgroup: Unknown subsys name 'net' [ 23.065883][ T29] audit: type=1400 audit(1729092280.816:83): avc: denied { mount } for pid=3256 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.093209][ T29] audit: type=1400 audit(1729092280.836:84): avc: denied { unmount } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.233926][ T3256] cgroup: Unknown subsys name 'cpuset' [ 23.239834][ T3256] cgroup: Unknown subsys name 'rlimit' [ 23.366494][ T29] audit: type=1400 audit(1729092281.136:85): avc: denied { setattr } for pid=3256 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.389704][ T29] audit: type=1400 audit(1729092281.136:86): avc: denied { create } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.410177][ T29] audit: type=1400 audit(1729092281.136:87): avc: denied { write } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.430513][ T29] audit: type=1400 audit(1729092281.136:88): avc: denied { read } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.450793][ T29] audit: type=1400 audit(1729092281.136:89): avc: denied { mounton } for pid=3256 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.475671][ T29] audit: type=1400 audit(1729092281.136:90): avc: denied { mount } for pid=3256 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.486453][ T3259] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.507586][ T29] audit: type=1400 audit(1729092281.276:91): avc: denied { relabelto } for pid=3259 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.555977][ T3256] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.659694][ T3272] chnl_net:caif_netlink_parms(): no params data found [ 24.672502][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 24.685690][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 24.728230][ T3276] chnl_net:caif_netlink_parms(): no params data found [ 24.763374][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.770417][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.777625][ T3272] bridge_slave_0: entered allmulticast mode [ 24.783912][ T3272] bridge_slave_0: entered promiscuous mode [ 24.803269][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.810341][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.817484][ T3272] bridge_slave_1: entered allmulticast mode [ 24.823848][ T3272] bridge_slave_1: entered promiscuous mode [ 24.856171][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.868037][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.885280][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 24.903460][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.910495][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.917724][ T3266] bridge_slave_0: entered allmulticast mode [ 24.924000][ T3266] bridge_slave_0: entered promiscuous mode [ 24.930246][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.937300][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.944398][ T3269] bridge_slave_0: entered allmulticast mode [ 24.950661][ T3269] bridge_slave_0: entered promiscuous mode [ 24.959511][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.966595][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.973720][ T3269] bridge_slave_1: entered allmulticast mode [ 24.979993][ T3269] bridge_slave_1: entered promiscuous mode [ 24.994092][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.001126][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.008309][ T3266] bridge_slave_1: entered allmulticast mode [ 25.014735][ T3266] bridge_slave_1: entered promiscuous mode [ 25.031019][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.038078][ T3276] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.045253][ T3276] bridge_slave_0: entered allmulticast mode [ 25.051518][ T3276] bridge_slave_0: entered promiscuous mode [ 25.058293][ T3272] team0: Port device team_slave_0 added [ 25.075325][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.082439][ T3276] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.090295][ T3276] bridge_slave_1: entered allmulticast mode [ 25.096600][ T3276] bridge_slave_1: entered promiscuous mode [ 25.103189][ T3272] team0: Port device team_slave_1 added [ 25.115781][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.125796][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.145450][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.159242][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.173103][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.180137][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.206027][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.227317][ T3269] team0: Port device team_slave_0 added [ 25.238179][ T3276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.251018][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.257999][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.283959][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.302036][ T3269] team0: Port device team_slave_1 added [ 25.312597][ T3276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.326876][ T3266] team0: Port device team_slave_0 added [ 25.333150][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.340231][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.347385][ T3267] bridge_slave_0: entered allmulticast mode [ 25.353712][ T3267] bridge_slave_0: entered promiscuous mode [ 25.368886][ T3276] team0: Port device team_slave_0 added [ 25.375043][ T3266] team0: Port device team_slave_1 added [ 25.381225][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.388326][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.395387][ T3267] bridge_slave_1: entered allmulticast mode [ 25.401670][ T3267] bridge_slave_1: entered promiscuous mode [ 25.407963][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.414993][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.440901][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.452099][ T3276] team0: Port device team_slave_1 added [ 25.470631][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.477590][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.503517][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.536620][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.543590][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.569530][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.582002][ T3272] hsr_slave_0: entered promiscuous mode [ 25.588128][ T3272] hsr_slave_1: entered promiscuous mode [ 25.600038][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.609332][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.616351][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.642319][ T3276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.653788][ T3276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.660775][ T3276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.686662][ T3276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.697471][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.704440][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.730380][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.750741][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.775752][ T3269] hsr_slave_0: entered promiscuous mode [ 25.781628][ T3269] hsr_slave_1: entered promiscuous mode [ 25.787571][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.795123][ T3269] Cannot create hsr debugfs directory [ 25.823029][ T3267] team0: Port device team_slave_0 added [ 25.842384][ T3267] team0: Port device team_slave_1 added [ 25.867829][ T3266] hsr_slave_0: entered promiscuous mode [ 25.873757][ T3266] hsr_slave_1: entered promiscuous mode [ 25.879520][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.887071][ T3266] Cannot create hsr debugfs directory [ 25.897398][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.904374][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.930291][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.945589][ T3276] hsr_slave_0: entered promiscuous mode [ 25.951543][ T3276] hsr_slave_1: entered promiscuous mode [ 25.957439][ T3276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.965618][ T3276] Cannot create hsr debugfs directory [ 25.976228][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.983173][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.009122][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.061654][ T3267] hsr_slave_0: entered promiscuous mode [ 26.068325][ T3267] hsr_slave_1: entered promiscuous mode [ 26.074214][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.081744][ T3267] Cannot create hsr debugfs directory [ 26.153610][ T3272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.172119][ T3272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.187953][ T3272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.202257][ T3272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.232342][ T3269] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.242796][ T3269] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.251966][ T3269] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.264199][ T3269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.286142][ T3276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.296564][ T3276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.306334][ T3276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.315431][ T3276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.346732][ T3266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.369084][ T3267] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.380271][ T3267] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.388513][ T3266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.397835][ T3266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.410297][ T3267] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.419165][ T3267] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.427437][ T3266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.470837][ T3276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.481016][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.494573][ T3276] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.508786][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.515854][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.529859][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.543438][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.550471][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.560790][ T3272] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.576320][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.586681][ T1678] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.593729][ T1678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.602134][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.609226][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.634394][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.641506][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.672650][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.690484][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.697612][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.715599][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.745095][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.762149][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.769214][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.778307][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.785459][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.801024][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.818094][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.843163][ T3276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.852254][ T1678] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.859322][ T1678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.870437][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.877591][ T1678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.906007][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.916932][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.018202][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.031245][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.064305][ T3269] veth0_vlan: entered promiscuous mode [ 27.082935][ T3272] veth0_vlan: entered promiscuous mode [ 27.092991][ T3276] veth0_vlan: entered promiscuous mode [ 27.111344][ T3269] veth1_vlan: entered promiscuous mode [ 27.124095][ T3272] veth1_vlan: entered promiscuous mode [ 27.130626][ T3276] veth1_vlan: entered promiscuous mode [ 27.165273][ T3276] veth0_macvtap: entered promiscuous mode [ 27.176962][ T3276] veth1_macvtap: entered promiscuous mode [ 27.184468][ T3266] veth0_vlan: entered promiscuous mode [ 27.199188][ T3267] veth0_vlan: entered promiscuous mode [ 27.205311][ T3266] veth1_vlan: entered promiscuous mode [ 27.216933][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.227850][ T3272] veth0_macvtap: entered promiscuous mode [ 27.234930][ T3272] veth1_macvtap: entered promiscuous mode [ 27.241568][ T3276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.252831][ T3267] veth1_vlan: entered promiscuous mode [ 27.262438][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.273022][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.284846][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.293930][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.304382][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.314746][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.327014][ T3269] veth0_macvtap: entered promiscuous mode [ 27.334548][ T3272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.343272][ T3272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.352014][ T3272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.360723][ T3272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.370929][ T3276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.379657][ T3276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.388410][ T3276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.397136][ T3276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.410985][ T3266] veth0_macvtap: entered promiscuous mode [ 27.418109][ T3269] veth1_macvtap: entered promiscuous mode [ 27.430129][ T3266] veth1_macvtap: entered promiscuous mode [ 27.440426][ T3267] veth0_macvtap: entered promiscuous mode [ 27.448940][ T3267] veth1_macvtap: entered promiscuous mode [ 27.459120][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.469576][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.479473][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.489900][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.500343][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.517580][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.528015][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.537813][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.548232][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.558052][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.568462][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.579674][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.588950][ T3276] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.601770][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.613938][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.623771][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.634234][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.645280][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.652786][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.663281][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.673143][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.683600][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.693587][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.704012][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.713916][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.724324][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.734798][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.745564][ T3269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.754307][ T3269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.762999][ T3269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.771711][ T3269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.775325][ T3407] loop3: detected capacity change from 0 to 164 [ 27.815577][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.826084][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.835916][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.846374][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.856317][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.866788][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.878587][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.886762][ T3266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.895480][ T3266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.904206][ T3266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.912928][ T3266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.926172][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.936618][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.946425][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.956923][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.966802][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.977268][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.987067][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.997512][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.010073][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.012382][ T3408] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 28.018239][ T3267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.033562][ T3267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.042308][ T3267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.051031][ T3267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.088249][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 28.088261][ T29] audit: type=1400 audit(1729092285.856:132): avc: denied { create } for pid=3414 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 28.118117][ T29] audit: type=1400 audit(1729092285.856:133): avc: denied { prog_run } for pid=3406 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.152529][ T29] audit: type=1400 audit(1729092285.916:134): avc: denied { write } for pid=3414 comm="syz.4.5" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.154951][ T3415] loop4: detected capacity change from 0 to 256 [ 28.221898][ T29] audit: type=1400 audit(1729092285.916:135): avc: denied { open } for pid=3414 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.244802][ T29] audit: type=1400 audit(1729092285.916:136): avc: denied { ioctl } for pid=3414 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.288023][ T3421] loop0: detected capacity change from 0 to 164 [ 28.302491][ T3423] loop1: detected capacity change from 0 to 164 [ 28.379197][ T3427] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 28.388747][ T29] audit: type=1400 audit(1729092286.036:137): avc: denied { mount } for pid=3414 comm="syz.4.5" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.410398][ T29] audit: type=1400 audit(1729092286.056:138): avc: denied { write } for pid=3406 comm="syz.3.4" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.430527][ T29] audit: type=1400 audit(1729092286.056:139): avc: denied { connect } for pid=3406 comm="syz.3.4" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.450851][ T29] audit: type=1400 audit(1729092286.056:140): avc: denied { name_connect } for pid=3406 comm="syz.3.4" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 28.472627][ T29] audit: type=1400 audit(1729092286.066:141): avc: denied { create } for pid=3419 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.499390][ T3432] loop2: detected capacity change from 0 to 256 [ 28.522407][ T3431] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 28.735529][ T3434] loop4: detected capacity change from 0 to 256 [ 28.755522][ T3436] loop2: detected capacity change from 0 to 164 [ 28.836802][ T3437] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 29.010561][ T3439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 29.176586][ T3445] loop4: detected capacity change from 0 to 512 [ 29.223846][ T3445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.273461][ T3445] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.534793][ T3456] loop1: detected capacity change from 0 to 512 [ 29.548626][ T3456] ======================================================= [ 29.548626][ T3456] WARNING: The mand mount option has been deprecated and [ 29.548626][ T3456] and is ignored by this kernel. Remove the mand [ 29.548626][ T3456] option from the mount to silence this warning. [ 29.548626][ T3456] ======================================================= [ 29.599932][ T3456] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.606823][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.642763][ T3456] EXT4-fs error (device loop1): __ext4_iget:4952: inode #11: block 1: comm syz.1.13: invalid block [ 29.660694][ T3466] capability: warning: `syz.4.15' uses deprecated v2 capabilities in a way that may be insecure [ 29.675550][ T3456] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.13: couldn't read orphan inode 11 (err -117) [ 29.691058][ T3466] Zero length message leads to an empty skb [ 29.697964][ T3456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.749623][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.771601][ T3471] loop4: detected capacity change from 0 to 256 [ 29.856410][ T3480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 29.870630][ T3483] loop0: detected capacity change from 0 to 256 [ 29.968825][ T3489] dccp_close: ABORT with 20 bytes unread [ 29.995436][ T3494] random: crng reseeded on system resumption [ 30.034819][ T3500] loop2: detected capacity change from 0 to 512 [ 30.041470][ T3500] EXT4-fs: Ignoring removed oldalloc option [ 30.061722][ T3500] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.074947][ T3500] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.109115][ T3500] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 30.128112][ T3506] netlink: 268 bytes leftover after parsing attributes in process `syz.1.33'. [ 30.137076][ T3506] unsupported nla_type 65024 [ 30.146792][ T3500] EXT4-fs (loop2): 1 truncate cleaned up [ 30.156315][ T3500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.157212][ T3509] loop4: detected capacity change from 0 to 256 [ 30.171858][ T3500] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 30.212467][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.268617][ T3518] 9pnet_fd: Insufficient options for proto=fd [ 30.287052][ T3518] loop4: detected capacity change from 0 to 512 [ 30.287247][ T3516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.37'. [ 30.293577][ T3518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.310976][ T3518] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 30.316919][ T3494] loop0: detected capacity change from 0 to 164 [ 30.319071][ T3518] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 30.333916][ T3518] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 30.343617][ T3518] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 30.352450][ T3494] Unable to read rock-ridge attributes [ 30.354404][ T3518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 30.369173][ T3494] Unable to read rock-ridge attributes [ 30.377739][ T3518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 30.418474][ T3526] loop2: detected capacity change from 0 to 256 [ 30.427347][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.456867][ T3529] loop4: detected capacity change from 0 to 256 [ 30.497361][ T3511] syz.1.35[3511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.541938][ T3538] loop2: detected capacity change from 0 to 256 [ 30.561882][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.45'. [ 30.585248][ T3545] netlink: 20 bytes leftover after parsing attributes in process `syz.2.49'. [ 30.614726][ T3551] 9pnet_fd: Insufficient options for proto=fd [ 30.623658][ T3551] loop2: detected capacity change from 0 to 512 [ 30.630164][ T3551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.630607][ T3541] FAULT_INJECTION: forcing a failure. [ 30.630607][ T3541] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.649910][ T3541] CPU: 1 UID: 0 PID: 3541 Comm: syz.4.48 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 30.660497][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 30.670544][ T3541] Call Trace: [ 30.673847][ T3541] [ 30.676764][ T3541] dump_stack_lvl+0xf2/0x150 [ 30.681389][ T3541] dump_stack+0x15/0x20 [ 30.685603][ T3541] should_fail_ex+0x223/0x230 [ 30.690276][ T3541] should_fail+0xb/0x10 [ 30.694471][ T3541] should_fail_usercopy+0x1a/0x20 [ 30.699513][ T3541] fpu__restore_sig+0x11a/0xaf0 [ 30.704451][ T3541] restore_sigcontext+0x1b5/0x220 [ 30.709475][ T3541] __do_sys_rt_sigreturn+0xe5/0x150 [ 30.714712][ T3541] x64_sys_call+0x28e1/0x2d60 [ 30.719381][ T3541] do_syscall_64+0xc9/0x1c0 [ 30.723873][ T3541] ? clear_bhb_loop+0x55/0xb0 [ 30.728604][ T3541] ? clear_bhb_loop+0x55/0xb0 [ 30.733297][ T3541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.739196][ T3541] RIP: 0033:0x7f1a9970dff7 [ 30.743605][ T3541] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 30.763241][ T3541] RSP: 002b:00007f1a98387038 EFLAGS: 00000246 [ 30.769369][ T3541] RAX: 0000000000000001 RBX: 00007f1a998c5f80 RCX: 00007f1a9970dff9 [ 30.777338][ T3541] RDX: 0000000000000008 RSI: 0000000020000040 RDI: 0000000000000007 [ 30.785313][ T3541] RBP: 00007f1a98387090 R08: 0000000000000000 R09: 0000000000000000 [ 30.793275][ T3541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 30.801234][ T3541] R13: 0000000000000000 R14: 00007f1a998c5f80 R15: 00007ffc4536eeb8 [ 30.809215][ T3541] [ 30.821792][ T3551] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 30.829749][ T3551] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 30.838011][ T3551] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 30.847527][ T3551] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 30.857407][ T3558] loop3: detected capacity change from 0 to 2048 [ 30.857474][ T3551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 30.891273][ T3551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.51'. [ 30.924589][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.937662][ T3558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.086404][ T3558] FAULT_INJECTION: forcing a failure. [ 31.086404][ T3558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.099496][ T3558] CPU: 0 UID: 0 PID: 3558 Comm: syz.3.54 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 31.109997][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 31.120054][ T3558] Call Trace: [ 31.123354][ T3558] [ 31.126288][ T3558] dump_stack_lvl+0xf2/0x150 [ 31.130904][ T3558] dump_stack+0x15/0x20 [ 31.135047][ T3558] should_fail_ex+0x223/0x230 [ 31.139766][ T3558] should_fail+0xb/0x10 [ 31.143971][ T3558] should_fail_usercopy+0x1a/0x20 [ 31.148991][ T3558] copy_fpstate_to_sigframe+0x5d7/0x770 [ 31.154565][ T3558] ? copy_fpstate_to_sigframe+0xe3/0x770 [ 31.160308][ T3558] ? fpu__alloc_mathframe+0x95/0xd0 [ 31.165562][ T3558] get_sigframe+0x2f3/0x430 [ 31.170055][ T3558] x64_setup_rt_frame+0xa7/0x570 [ 31.174983][ T3558] arch_do_signal_or_restart+0x287/0x4b0 [ 31.180610][ T3558] syscall_exit_to_user_mode+0x59/0x130 [ 31.186152][ T3558] do_syscall_64+0xd6/0x1c0 [ 31.190715][ T3558] ? clear_bhb_loop+0x55/0xb0 [ 31.195393][ T3558] ? clear_bhb_loop+0x55/0xb0 [ 31.200145][ T3558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.206039][ T3558] RIP: 0033:0x7f945077dff9 [ 31.210441][ T3558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.230096][ T3558] RSP: 002b:00007f944f3f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 31.238560][ T3558] RAX: ffffffffffffffea RBX: 00007f9450935f80 RCX: 00007f945077dff9 [ 31.246548][ T3558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 31.254579][ T3558] RBP: 00007f944f3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 31.262595][ T3558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.270555][ T3558] R13: 0000000000000000 R14: 00007f9450935f80 R15: 00007ffcfd391948 [ 31.278535][ T3558] [ 31.287080][ T3583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.61'. [ 31.301139][ T3276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.339548][ T3591] loop4: detected capacity change from 0 to 256 [ 31.350622][ T3590] loop1: detected capacity change from 0 to 164 [ 31.361034][ T3587] netlink: 'syz.2.63': attribute type 3 has an invalid length. [ 31.398619][ T3595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.68'. [ 31.417995][ T3593] 9pnet_fd: Insufficient options for proto=fd [ 31.429883][ T3593] loop0: detected capacity change from 0 to 512 [ 31.437567][ T3593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.442833][ T3598] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 31.452837][ T3593] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 31.460808][ T3593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 31.469965][ T3593] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 31.479494][ T3593] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 31.488599][ T3593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 31.531122][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.585092][ T3611] loop4: detected capacity change from 0 to 256 [ 31.651200][ T3624] 9pnet_virtio: no channels available for device [ 31.659413][ T3622] loop2: detected capacity change from 0 to 2048 [ 31.666307][ T3622] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.686942][ T3622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.700121][ T3622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.715626][ T3622] vlan2: entered promiscuous mode [ 31.720833][ T3622] batadv0: entered promiscuous mode [ 31.727350][ T3622] team0: Port device vlan2 added [ 31.734457][ T3622] program syz.2.76 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.754674][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.454801][ T3633] loop4: detected capacity change from 0 to 164 [ 47.462656][ T29] kauditd_printk_skb: 1803 callbacks suppressed [ 47.462670][ T29] audit: type=1400 audit(1729092305.226:1945): avc: denied { write } for pid=3628 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.468991][ T3629] loop0: detected capacity change from 0 to 2048 [ 47.512571][ T3629] EXT4-fs: dax option not supported [ 47.523729][ T29] audit: type=1400 audit(1729092305.286:1946): avc: denied { execute } for pid=3627 comm="syz.0.78" path="/17/bus" dev="tmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.550851][ T3629] loop0: detected capacity change from 0 to 512 [ 47.557654][ T3629] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.584917][ T3629] EXT4-fs (loop0): 1 orphan inode deleted [ 47.590656][ T3629] EXT4-fs (loop0): 1 truncate cleaned up [ 47.602754][ T3643] syz.2.80 uses obsolete (PF_INET,SOCK_PACKET) [ 47.613662][ T3629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.623248][ T3641] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 47.633970][ T3629] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.648611][ T3648] __nla_validate_parse: 2 callbacks suppressed [ 47.648622][ T3648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 47.667343][ T3648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.676391][ T29] audit: type=1400 audit(1729092305.436:1947): avc: denied { read write } for pid=3647 comm="syz.1.85" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.699773][ T29] audit: type=1400 audit(1729092305.436:1948): avc: denied { open } for pid=3647 comm="syz.1.85" path="/dev/raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.723076][ T29] audit: type=1400 audit(1729092305.436:1949): avc: denied { ioctl } for pid=3647 comm="syz.1.85" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.747763][ T29] audit: type=1400 audit(1729092305.446:1950): avc: denied { ioctl } for pid=3627 comm="syz.0.78" path="socket:[3930]" dev="sockfs" ino=3930 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 47.779203][ T3648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.787354][ T29] audit: type=1400 audit(1729092305.486:1951): avc: denied { create } for pid=3637 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 47.857754][ T29] audit: type=1326 audit(1729092305.626:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e1e9dff9 code=0x7ffc0000 [ 47.881004][ T29] audit: type=1326 audit(1729092305.626:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83e1e9dff9 code=0x7ffc0000 [ 47.908699][ T29] audit: type=1326 audit(1729092305.626:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f83e1e9dff9 code=0x7ffc0000 [ 47.909945][ T3654] loop0: detected capacity change from 0 to 128 [ 47.979559][ T3654] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.001805][ T3654] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.117587][ T3654] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.305858][ T3668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 48.529037][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 48.625219][ T3671] loop0: detected capacity change from 0 to 512 [ 48.649057][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.663996][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.668994][ T3671] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 48.680814][ T3671] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 48.691239][ T3671] EXT4-fs (loop0): 1 truncate cleaned up [ 48.697415][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.709819][ T3686] loop1: detected capacity change from 0 to 164 [ 48.721791][ T3671] syz.0.91[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.721958][ T3671] syz.0.91[3671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.802304][ T3692] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 48.833012][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.863632][ T3698] loop2: detected capacity change from 0 to 256 [ 48.873183][ T3702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.100'. [ 48.879426][ T3691] loop4: detected capacity change from 0 to 8192 [ 49.040289][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 49.218616][ T3733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.114'. [ 49.359277][ T3740] loop4: detected capacity change from 0 to 256 [ 49.379283][ T3723] loop2: detected capacity change from 0 to 512 [ 49.403540][ T3723] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 49.412234][ T3723] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 49.422072][ T3723] EXT4-fs (loop2): 1 truncate cleaned up [ 49.428959][ T3723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.454136][ T3723] syz.2.111[3723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.478808][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 49.533184][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.630690][ T3751] loop3: detected capacity change from 0 to 8192 [ 49.712778][ T3758] loop3: detected capacity change from 0 to 164 [ 49.750142][ T3762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.126'. [ 49.782241][ T3766] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.798044][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 49.812513][ T3769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.822508][ T3769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.846977][ T3773] loop4: detected capacity change from 0 to 256 [ 50.062930][ T3789] loop4: detected capacity change from 0 to 164 [ 50.171397][ T3793] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.221329][ T3795] loop1: detected capacity change from 0 to 512 [ 50.256869][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.280612][ T3795] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.344467][ T3266] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.356826][ T3799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.140'. [ 50.412963][ T3803] loop1: detected capacity change from 0 to 256 [ 50.497762][ T3805] lo speed is unknown, defaulting to 1000 [ 50.533169][ T3805] lo speed is unknown, defaulting to 1000 [ 50.550651][ T3805] lo speed is unknown, defaulting to 1000 [ 50.575253][ T1678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.596824][ T1678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.651287][ T3805] infiniband syz1: set active [ 50.656039][ T3805] infiniband syz1: added lo [ 50.660563][ T3357] lo speed is unknown, defaulting to 1000 [ 50.710360][ T3805] RDS/IB: syz1: added [ 50.733465][ T3805] smc: adding ib device syz1 with port count 1 [ 50.739676][ T3805] smc: ib device syz1 port 1 has pnetid [ 50.745636][ T3344] lo speed is unknown, defaulting to 1000 [ 50.751637][ T3805] lo speed is unknown, defaulting to 1000 [ 50.785134][ T3805] lo speed is unknown, defaulting to 1000 [ 50.816652][ T3805] lo speed is unknown, defaulting to 1000 [ 50.851815][ T3805] lo speed is unknown, defaulting to 1000 [ 50.883006][ T3805] lo speed is unknown, defaulting to 1000 [ 50.988605][ T3805] syz.0.142 (3805) used greatest stack depth: 10816 bytes left [ 51.017649][ T3831] loop3: detected capacity change from 0 to 512 [ 51.056226][ T3835] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.094965][ T3831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.143389][ T3831] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.205905][ T3842] lo speed is unknown, defaulting to 1000 [ 51.218777][ T3276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.279979][ T3847] loop1: detected capacity change from 0 to 256 [ 51.433825][ T3861] mmap: syz.2.163 (3861) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.686068][ T3868] loop3: detected capacity change from 0 to 128 [ 51.693996][ T3862] rdma_rxe: rxe_newlink: failed to add lo [ 51.756332][ T3868] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.777646][ T3868] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.826961][ T3877] loop0: detected capacity change from 0 to 512 [ 51.871230][ T3877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.884196][ T3868] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.893423][ T3877] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.896405][ T3892] loop1: detected capacity change from 0 to 256 [ 51.915113][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.925048][ T3269] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.934286][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.020686][ T3902] lo speed is unknown, defaulting to 1000 [ 52.092388][ T3908] loop0: detected capacity change from 0 to 164 [ 52.156060][ T3905] capability: warning: `syz.3.181' uses 32-bit capabilities (legacy support in use) [ 52.174893][ T3912] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.272644][ T3916] loop1: detected capacity change from 0 to 512 [ 52.289399][ T3916] EXT4-fs: Ignoring removed bh option [ 52.294859][ T3916] EXT4-fs: Ignoring removed i_version option [ 52.304907][ T3916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.317416][ T3920] loop3: detected capacity change from 0 to 512 [ 52.324410][ T3918] program syz.2.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.344977][ T3916] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.359870][ T3916] EXT4-fs (loop1): mount failed [ 52.368603][ T3920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.391551][ T3920] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.443237][ T3934] loop1: detected capacity change from 0 to 256 [ 52.451684][ T3926] loop2: detected capacity change from 0 to 128 [ 52.462140][ T3276] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.475448][ T29] kauditd_printk_skb: 2813 callbacks suppressed [ 52.475460][ T29] audit: type=1400 audit(1729092310.246:4767): avc: denied { unmount } for pid=3272 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 52.504276][ T29] audit: type=1326 audit(1729092310.246:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f86b111cc8a code=0x7ffc0000 [ 52.527540][ T29] audit: type=1326 audit(1729092310.246:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f86b111cc8a code=0x7ffc0000 [ 52.550935][ T29] audit: type=1326 audit(1729092310.246:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f86b111c897 code=0x7ffc0000 [ 52.552812][ T3926] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.574383][ T29] audit: type=1326 audit(1729092310.246:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f86b111f79a code=0x7ffc0000 [ 52.601499][ T3936] syzkaller0: entered promiscuous mode [ 52.615036][ T3936] syzkaller0: entered allmulticast mode [ 52.615172][ T3926] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.654485][ T29] audit: type=1326 audit(1729092310.426:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86b111c990 code=0x7ffc0000 [ 52.677905][ T29] audit: type=1326 audit(1729092310.426:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f86b111cd77 code=0x7ffc0000 [ 52.701179][ T29] audit: type=1326 audit(1729092310.426:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f86b111c990 code=0x7ffc0000 [ 52.724650][ T29] audit: type=1326 audit(1729092310.426:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3925 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86b111dff9 code=0x7ffc0000 [ 52.750009][ T29] audit: type=1400 audit(1729092310.466:4776): avc: denied { create } for pid=3935 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.817741][ T3926] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.868279][ T3954] loop3: detected capacity change from 0 to 2048 [ 52.880275][ T3954] EXT4-fs: dax option not supported [ 52.895231][ T3954] loop3: detected capacity change from 0 to 128 [ 52.901848][ T3954] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 52.913922][ T3954] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 52.960520][ T3965] loop2: detected capacity change from 0 to 512 [ 53.000804][ T3965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.023997][ T3968] loop3: detected capacity change from 0 to 256 [ 53.042701][ T3972] loop1: detected capacity change from 0 to 256 [ 53.101913][ T3958] loop4: detected capacity change from 0 to 8192 [ 53.108922][ T3965] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.184594][ T3267] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.293574][ T3981] loop1: detected capacity change from 0 to 128 [ 53.372850][ T3998] FAULT_INJECTION: forcing a failure. [ 53.372850][ T3998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.385910][ T3998] CPU: 0 UID: 0 PID: 3998 Comm: syz.3.215 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 53.396686][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.406742][ T3998] Call Trace: [ 53.410013][ T3998] [ 53.412936][ T3998] dump_stack_lvl+0xf2/0x150 [ 53.417524][ T3998] dump_stack+0x15/0x20 [ 53.421676][ T3998] should_fail_ex+0x223/0x230 [ 53.426444][ T3998] should_fail+0xb/0x10 [ 53.430724][ T3998] should_fail_usercopy+0x1a/0x20 [ 53.435767][ T3998] _copy_from_iter+0xd3/0xd20 [ 53.440601][ T3998] ? should_fail_ex+0xd7/0x230 [ 53.445408][ T3998] ? qrtr_tun_write_iter+0x8b/0x130 [ 53.450631][ T3998] ? __virt_addr_valid+0x1ed/0x250 [ 53.455734][ T3998] ? __check_object_size+0x364/0x520 [ 53.461032][ T3998] qrtr_tun_write_iter+0xae/0x130 [ 53.466072][ T3998] aio_write+0x2f7/0x420 [ 53.470360][ T3998] io_submit_one+0xb0c/0x1230 [ 53.475162][ T3998] __se_sys_io_submit+0xf5/0x280 [ 53.480174][ T3998] __x64_sys_io_submit+0x43/0x50 [ 53.485111][ T3998] x64_sys_call+0x1ebc/0x2d60 [ 53.489783][ T3998] do_syscall_64+0xc9/0x1c0 [ 53.494274][ T3998] ? clear_bhb_loop+0x55/0xb0 [ 53.498952][ T3998] ? clear_bhb_loop+0x55/0xb0 [ 53.503711][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.509647][ T3998] RIP: 0033:0x7f945077dff9 [ 53.514058][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.533726][ T3998] RSP: 002b:00007f944f3f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 53.542183][ T3998] RAX: ffffffffffffffda RBX: 00007f9450935f80 RCX: 00007f945077dff9 [ 53.550144][ T3998] RDX: 0000000020000180 RSI: 0000000000000001 RDI: 00007f945146f000 [ 53.558199][ T3998] RBP: 00007f944f3f7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.566169][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.574157][ T3998] R13: 0000000000000000 R14: 00007f9450935f80 R15: 00007ffcfd391948 [ 53.582121][ T3998] [ 53.588843][ T3981] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.601092][ T3981] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.675295][ T3981] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.746781][ T4004] loop2: detected capacity change from 0 to 256 [ 53.787478][ T4008] loop2: detected capacity change from 0 to 256 [ 53.837648][ T4010] loop4: detected capacity change from 0 to 512 [ 53.882250][ T4017] loop3: detected capacity change from 0 to 2048 [ 53.889562][ T4017] EXT4-fs: Ignoring removed nobh option [ 53.931992][ T3357] ================================================================== [ 53.938063][ T4010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.940072][ T3357] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 53.955264][ T4010] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.960563][ T3357] [ 53.960570][ T3357] read-write to 0xffff8881004c11f0 of 8 bytes by task 3981 on cpu 0: [ 53.960585][ T3357] __filemap_remove_folio+0x1c5/0x2c0 [ 53.960608][ T3357] __remove_mapping+0x33f/0x470 [ 53.991462][ T3357] remove_mapping+0x22/0x90 [ 53.995965][ T3357] mapping_try_invalidate+0x266/0x3f0 [ 54.001325][ T3357] invalidate_mapping_pages+0x27/0x40 [ 54.006684][ T3357] invalidate_bdev+0x58/0x70 [ 54.011268][ T3357] ext4_put_super+0x571/0x840 [ 54.015935][ T3357] generic_shutdown_super+0xe5/0x220 [ 54.021210][ T3357] kill_block_super+0x2a/0x70 [ 54.025888][ T3357] ext4_kill_sb+0x44/0x80 [ 54.030204][ T3357] deactivate_locked_super+0x7d/0x1c0 [ 54.035572][ T3357] deactivate_super+0x9f/0xb0 [ 54.040245][ T3357] cleanup_mnt+0x268/0x2e0 [ 54.044648][ T3357] __cleanup_mnt+0x19/0x20 [ 54.049049][ T3357] task_work_run+0x13a/0x1a0 [ 54.053633][ T3357] do_exit+0x5dd/0x17f0 [ 54.057780][ T3357] do_group_exit+0x102/0x150 [ 54.062361][ T3357] get_signal+0xf2a/0x1070 [ 54.066786][ T3357] arch_do_signal_or_restart+0x95/0x4b0 [ 54.072321][ T3357] syscall_exit_to_user_mode+0x59/0x130 [ 54.077864][ T3357] do_syscall_64+0xd6/0x1c0 [ 54.082354][ T3357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.088258][ T3357] [ 54.090567][ T3357] read to 0xffff8881004c11f0 of 8 bytes by task 3357 on cpu 1: [ 54.098093][ T3357] nr_blockdev_pages+0x7c/0xd0 [ 54.102848][ T3357] si_meminfo+0x87/0xd0 [ 54.106992][ T3357] update_defense_level+0x49/0x5b0 [ 54.112097][ T3357] defense_work_handler+0x1f/0x80 [ 54.117115][ T3357] process_scheduled_works+0x483/0x9a0 [ 54.122568][ T3357] worker_thread+0x51d/0x6f0 [ 54.127144][ T3357] kthread+0x1d1/0x210 [ 54.131198][ T3357] ret_from_fork+0x4b/0x60 [ 54.135609][ T3357] ret_from_fork_asm+0x1a/0x30 [ 54.140364][ T3357] [ 54.142669][ T3357] value changed: 0x0000000000000006 -> 0x0000000000000001 [ 54.149755][ T3357] [ 54.152059][ T3357] Reported by Kernel Concurrency Sanitizer on: [ 54.158189][ T3357] CPU: 1 UID: 0 PID: 3357 Comm: kworker/1:5 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 54.168938][ T3357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.178980][ T3357] Workqueue: events_long defense_work_handler [ 54.185044][ T3357] ================================================================== [ 54.199917][ T4017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.218929][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.243401][ T4017] loop3: detected capacity change from 2048 to 11 [ 54.250229][ T4017] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: Out of memory [ 54.259332][ T4017] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #15: comm syz.3.223: mark_inode_dirty error [ 54.704997][ T4016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.714842][ T4019] kmmpd-loop3: attempt to access beyond end of device [ 54.714842][ T4019] loop3: rw=14337, sector=256, nr_sectors = 4 limit=11 [ 54.728316][ T4019] Buffer I/O error on dev loop3, logical block 64, lost sync page write