last executing test programs: 1m29.759258318s ago: executing program 2 (id=114): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) capset(0x0, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m29.325309676s ago: executing program 2 (id=116): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="a400000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1m29.294494707s ago: executing program 2 (id=117): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1m28.424412184s ago: executing program 2 (id=120): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x80210, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m28.319889186s ago: executing program 2 (id=124): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_pts(r0, 0x141601) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) 1m27.999521612s ago: executing program 2 (id=127): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sysinfo(0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 1m27.999262022s ago: executing program 32 (id=127): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x20, r1, 0x6a98047402e98331, 0x70bd21, 0xffa1, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004040}, 0x4008800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sysinfo(0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 3.513584933s ago: executing program 1 (id=1035): r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x3, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x88, &(0x7f00000001c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x38, 0x30, 0x36, 0x65, 0x66, 0x34b61ac358e0f40a, 0x63], 0x2d, [0x31, 0x35, 0x33, 0x62], 0x2d, [0x39, 0x55, 0x39, 0x61], 0x2d, [0x65, 0x63, 0xc, 0x69], 0x2d, [0x35, 0x30, 0x65, 0x33, 0x66, 0x35, 0x33, 0x38]}}}]}, 0x2, 0x448, &(0x7f0000000580)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 3.435237714s ago: executing program 1 (id=1036): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x200281, 0x24) preadv2(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/141, 0x8d}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f0000000480)=""/82, 0x52}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000600)=""/246, 0xf6}], 0x6, 0x7, 0x5, 0x13) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0xd, &(0x7f0000000240)=0x6, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = socket(0x200000000000011, 0x2, 0xe6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x9dc, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x5}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1a, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000000085000000", @ANYRESDEC=r4, @ANYRES16=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a5b}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) epoll_create1(0x0) poll(&(0x7f00000000c0)=[{r9, 0x34}], 0x1, 0x90f0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.405497565s ago: executing program 0 (id=1038): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket(0x10, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000340)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}, 0x1, 0x0, 0x0, 0x20040004}, 0x4008800) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x3}, 0x18) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000", 0x11, 0xfffffffffffffffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.824345906s ago: executing program 5 (id=1042): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x15, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x1, 0x3, 0x0, 0x0, 0x4, 0x10}, @generic={0x7, 0xe, 0x7, 0x5, 0x7ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x2, 0x2, 0x3, 0xfffffffffffffff0, 0xffffffffffffffff}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) unshare(0x2040400) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) r8 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r8, 0x8955, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.675371229s ago: executing program 5 (id=1043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRESOCT=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0039936da8abb4625380b974"], 0x1, 0x539, &(0x7f00000005c0)="$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") r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000a00)={0x0, 0xc, 0x1, [0x1, 0xffffffffffffff80, 0x8, 0x1000, 0x8], [0x0, 0x7ff, 0xbd3, 0x5, 0xffffffffffffffff, 0x0, 0x3, 0x10000, 0x49, 0x4, 0x9, 0x9, 0x851, 0x7, 0xffffffff, 0x55, 0x7, 0x1, 0x4, 0x1, 0x6, 0x3, 0x1, 0x2, 0x2, 0x9, 0x7fff0000000000, 0x6, 0x101, 0x6, 0xaff, 0x6, 0xb9, 0x2, 0xfc2, 0xffffffff, 0x9, 0xff, 0x2, 0x5, 0xb, 0x0, 0x3f05, 0xffffffffffffc032, 0x101, 0x7, 0xe, 0x2, 0x7, 0xffffffffffffffff, 0x80, 0x303, 0x800, 0x4, 0x1, 0x1, 0x6, 0x2, 0x6, 0x6333, 0x4, 0x80000000, 0x2, 0x4, 0xffffffffffffffb8, 0x80003, 0x4, 0x1, 0x9, 0x400, 0x8000000000000001, 0xb74e, 0xe, 0x100000000, 0x0, 0xffffffff, 0x5, 0x7, 0x0, 0x4, 0x8533, 0x4, 0xfffffffffffffffd, 0x4, 0x3, 0xfffffffffffffff9, 0x0, 0x636, 0x52, 0x8, 0x0, 0x8, 0x7fff, 0x39c00000000, 0x10000, 0x8, 0x4, 0x4, 0x8000, 0x55, 0x40, 0x9, 0x20000, 0x5109, 0x4, 0xffffffff, 0x8, 0x0, 0x8, 0x4, 0x7ff, 0x3, 0x2, 0x1c72, 0x1, 0x40, 0x9, 0x1, 0x10, 0x57d, 0x8]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000e40)={r4, 0xe, 0x0, [0x9, 0x1, 0x9, 0xf87, 0x3], [0x1, 0x80000000, 0x6, 0x2, 0x40000, 0x8, 0x1ff, 0x78, 0x34a1, 0x2, 0x5, 0x8, 0x8000000000000001, 0x8001, 0x10004, 0xffffffff, 0x5, 0x0, 0xfffffffffffff001, 0x58a3, 0x80000000000200, 0x16, 0x8000000000000001, 0x3ff, 0x1, 0x2, 0xffffffffffffff65, 0x5, 0x4, 0x6, 0x101, 0x1ff, 0x0, 0xb, 0x8000000000000000, 0x5, 0x9, 0xf8, 0xfffffffffffffffa, 0x0, 0x7ffeffffffffffff, 0x7, 0x9, 0x1000, 0x20c1, 0x2, 0x7, 0x10, 0x5, 0x400, 0x2, 0x10001, 0x2, 0x9fe4, 0x1000, 0x2, 0x6277, 0x5, 0x4, 0x7, 0x2, 0x6fffe, 0xffffffffffffff63, 0x4, 0x6, 0x8, 0xb3ac, 0x4, 0x3, 0x24, 0x8, 0x0, 0xaf37, 0xffffffff, 0x8, 0xc87f, 0x5, 0x6, 0x0, 0xffff, 0x400000000000, 0x6, 0x7, 0x4, 0x62, 0x7, 0x1, 0x1, 0x3, 0x3, 0x6, 0x3, 0x7ff, 0x8, 0x9, 0x9, 0x8, 0x100000000, 0x4, 0x1, 0x800, 0xfffffffffffffffe, 0x0, 0x67, 0x4, 0x8d96, 0x1, 0x6, 0x4, 0x0, 0xffff, 0xf48, 0x20000006, 0x200000000000007, 0x7, 0x100, 0x6, 0x1aa13da6, 0x3, 0xff, 0x1]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b"], 0x30}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004dedbc737a6eb6e4010000000008", @ANYRES32=r6, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0702000000000000000001000000040008802c0004800500030001000000050003000000000005000300010000000500030000000000050003000100000008000100030000000800020001000000"], 0x54}}, 0x4008080) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000000)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r11, 0x0, 0x7fff}, 0x18) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r13}, 0x10) pwritev2(r13, &(0x7f0000002300)=[{&(0x7f0000002040)="2a4acb8a6838dd666ca547461fd0c0a8198ca767a75cef2491404fe7a93595d6e7198a474d6e297093e3b5c0c97eaade22abcf696e3de436cab61691f8f11a2cfb09cbee289699dc8004e61481573254b167bd7a8439fb0ac1ee1e1d0d5f5ae7e3ccdf8ab19ddde40225d7e33af5b12c6d71a87652a87583e0490a7dff49457b457f9050931c93338755968014d607960dc9559c477a587b62f18015e745a5634d951510c5bb1c030bfea29fcf862f3be0ad363be2467c14deaf9ca7ab36cb3ee005b08668adc8c4e9df99fa4a44ac1b97078b3d50222be3668efdd4c710a7f55ec27ce412bf1fd23f143a8e", 0xec}, {&(0x7f0000002140)="5a72ea09d4f3e387c9db93b04c721ed23666c922188f9b58528aeef04f614e861d911d0390268e43927ca3", 0x2b}, {&(0x7f00000021c0)="2831a867a02ce42cdbe1a9689538c0682805f71b76ebafca95fc8df8731207b3b1f0f74d63fa2fa500e77c72e3a6aaaec7c6f95565e361c8e9a102b9b82ab694f2aafd06a75f31ab522bce7110236c344eabe788eeaf28baca62a559f0cfd5bc5dd9b0bd2b62aaed021a7ea41f21e6e2785064a82e82ae94a6959d3a20b50959229d430771e9f965a4ed5684472634f15b160abf53597cc416c1ce2966ec3e94899fd940d45a3e76f1deda5588938b49bb39d038c7e7ede33531b206dea9f7e0f2", 0xc1}, {&(0x7f00000022c0)="d1f4a02ab98112cae3d40e30d1e8c8f7fee2", 0x12}], 0x4, 0x4, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r12, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100c75, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 2.674883459s ago: executing program 0 (id=1044): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xce) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x1ff, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xafffffffffffffff, r0, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000c80)='./file1\x00', 0x10804, &(0x7f00000014c0)={[{@data_err_abort}, {@journal_async_commit}, {@grpjquota}, {@i_version}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'norecovery'}}, {@appraise}, {@euid_eq}, {@pcr={'pcr', 0x3d, 0x3}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, 'i_version'}}]}, 0xfc, 0x572, &(0x7f0000000e40)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@S') r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa14001980"], 0x44}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) 2.664036769s ago: executing program 5 (id=1045): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10000a, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000300)=ANY=[], 0x89) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='timer_start\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0x100}, 0x18) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r10 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b4, 0x4, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r10, 0x21, &(0x7f0000000440)=r9, 0x1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 2.58337095s ago: executing program 1 (id=1047): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote, 0x4}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000380), &(0x7f0000000340)='%pB \x00'}, 0x20) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r8, 0x400, 0x1) fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_default\x00') sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020600000000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f727400"/96], 0x60}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800c600080605090fbb4eb7daadf394bf77000000000000000000000000040900020077797a32000000000900020073797a31000000000900020073797a30000000008bce740f6e25802621b1307c76b72699451698035bd034c7ae912cd442dc54f8c522934e20537155f31ec6dcee24a8c1822a72869aca1460d7be55234182043bb945effc4a72d7b923f949fe6eace5c9ad60df7759fa0f4662e66c0f95b9dcf487ebe4a1193f126249a2c4af0e39326ea543f638c7b9bfa2e0bbf7b22bdf9743ca0a0b37f69ad7a99ee399a84a773034f8a4f94646969a82de68b8f8242844474c08119c8e66dd13e5489caebfd2"], 0x38}, 0x1, 0x0, 0x0, 0x4015}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x768943b6b926b3ed) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r9, 0x112, 0xb, 0x0, &(0x7f0000000080)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r11 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x68c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe7c0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80a, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r10, @ANYBLOB="b1f2682c28064c5bb595c8292c776e646e6f3dc4da1c9dd48eb5a617b1aefb18df6b0a4c73e8a9e52c3bdb8a9aaf1e49ebd7974e2bbc7a15032abacbdbbd5df5bdff9fba828c1b64aca534e6c9a668ed", @ANYRESHEX=r11, @ANYBLOB=',\x00']) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}], 0x1}, 0x0) 2.338516255s ago: executing program 5 (id=1048): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x5f, 0x30, 0x61, 0x2e]}}, 0x0, 0x1e, 0x0, 0x1, 0x28f0c5d9}, 0x28) r0 = add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85840400353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd000}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r7, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000002c0)="53ed5e8c690bd6dfc79670d0447c9b6eb17f374d64548a9cb72ae4d9c4f85abfdbc16ba56505248f5850bd4f09a92d08d7335398d34614893f7f4d28779f633e36ee6ee095c82564b9d301250b6084e98fa130648676a9099091d52d52e6a5810cce37f6958612bb4e9e7fc567f52396360ad6779dfede0ad7515dc68a71c43b620a7457bd46f193e99134e5c27b0c96c909d763a533e5bed280d2386dc3a8ca5f2b3ade4712ad9d826afa17f63df132ba1d3112fb3e9ea097a691d2c5bc0dac23047ad0c08e886820652adc", 0xcc, r2) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$user(&(0x7f0000000180), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="86f859f5229ee0a25fd0f05b5cf1eec11df285ac8e65be3d03b3d5346a35e0d8df8beff419edff5532fc264ae053089cfc77dfbf553df286ff385501f4c93a4d1fd0d9e000d137e251f1b088e97cfcf764f75ae99ab70905e8f5d0792086a5977607801fc4482d666920bda12308e5ad024d5e7759e85d34700bfe346d7786a40301bf1ef95dca648508f1c6accfcd1b69f47f5dea3603f9094fd88757830704f8fd9ca7eb56c674620064c595663296cc02aa5f4788ee0b1f14557d95f39b1a99a942f08f780798b770a13c6fc5a97b16660a0e6bcd3745636003fdd99ef94f4c64a8987ffb49b4e93f3f0f9f", 0xed, r2) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r11, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000009, 0x4000010, r1, 0xd0653000) 1.973992992s ago: executing program 3 (id=1052): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendto$inet(r0, &(0x7f0000000040)="fe071400d0b1124a5c27b7d7bc2cec207e53", 0x12, 0x8018, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000008c0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000100)=ANY=[], 0xfe, 0x214, &(0x7f0000000840)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[], 0x50) fgetxattr(r6, 0x0, &(0x7f0000000340)=""/58, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r4, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/96, 0x60}], 0x1, 0x8000, 0x0) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) io_setup(0x2004, &(0x7f0000000680)) sendfile(r2, r2, 0x0, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8048044}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) 1.743496207s ago: executing program 0 (id=1053): getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYRES8=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f00000002c0)=0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000000000200000000000000", @ANYRES32=r0, @ANYRES64=r2], 0x44}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000040)=0x202144, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000ec4c6a7567617e8dc1364d52c200006b28e16e24cfe4c0e5d455501597fad07e88c33c546bd52627c05f76e8df7c28a92032f17d1edae20a7393ff56bbf04c6733507b761e09aab94f215ee0fc0d359028ca2033b867f13f8a3f7fed6ad000d3f8606c75b279a4af4d80c6a59769a21047b2af8f2770ee5a14cbd15f8ef2959d504b6aed4a7074f9b71c961724665923c30903b571e92f2b1f4c1b12417094cfb344446acb0e3fc86c5abea3a19be04f63151f65baa964898274624fcec77dbc196bb125a2c365827349ff02d4b289cca404e5c114e9b203c018", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='erofs_lookup\x00', r9, 0x0, 0x2}, 0x18) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, 0x0) bind$can_j1939(r10, 0x0, 0x0) r11 = fsmount(0xffffffffffffffff, 0x1, 0x70) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x400}, {r6, 0x2000}, {r8, 0x8002}, {r7, 0x80}, {r11, 0x4000}, {r6, 0x1}, {r12, 0xa200}], 0x7, &(0x7f00000001c0), &(0x7f0000000200)={[0x7]}, 0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x404d01, 0x1a0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 1.738075706s ago: executing program 4 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="001000008e3b6c00004bc034d983d85515fb7e060bd298cb467f48a503506cad2cc7795930cfb7c1b2a6534026f7901a590160dfeea746f5ee6cbf97d4c19b784fbbf11e5a6e4ddada57c11da9e7dec52b051ac93d55517e0cfe468991a5a3179ab4dfcdc1fc0e79ecd89d402011b36bd6cc48c7ac3e5e7dd8aa6a48b20ad8a9f0d1072fa5abfe04a293d34319c2a17cf5f7ef4a82f5de7f14bcaff030f2311613cf3db5a8ea5c5ec260c922cbfd147c656775e5846c0dbdf3b844e350f5f481ee825f95f9a4fbe4bb3fc7b8ae4ed403ba1d422ec0e63827de2b3be5b334000000000000"], 0x18, 0x4060019}, 0x20000041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x18) getrusage(0xffffffffffffffff, &(0x7f0000000900)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="5dcf188e6c78"], 0x1c}, 0x1, 0x0, 0x0, 0x8016}, 0x8040) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r13 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '\']\xbc,-/.@['}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x73}, @NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '+{!!L-&}^+'}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 1.689341798s ago: executing program 1 (id=1055): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000880)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1acaca0, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000240), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x7}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e80)={'ip6_vti0\x00', &(0x7f0000000e00)={'ip6tnl0\x00', r6, 0x0, 0x4, 0x48, 0x4, 0x0, @local, @loopback, 0x700, 0x10, 0x9, 0x1}}) r7 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x44f0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x20, 0x3ff, 0x27, {{0x2c, 0x4, 0x2, 0x8, 0xb0, 0x67, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x30, 0x0, [{0x7, 0x8, "2177766388bf"}, {0x0, 0x5, "89a93c"}, {0x5, 0x3, "ac"}, {0x2, 0x12, "7071ad623db17c59c7d5b21daa7ca928"}, {0x2, 0x8, "b1546c164b36"}]}, @rr={0x7, 0x27, 0x62, [@loopback, @local, @multicast2, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @timestamp={0x44, 0xc, 0x6f, 0x0, 0x8, [0x7, 0x0]}, @lsrr={0x83, 0x2b, 0xc0, [@rand_addr=0x64010102, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, @multicast1, @empty, @rand_addr=0x64010102, @remote, @empty]}, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x8, [0x4]}, @timestamp={0x44, 0x4, 0xf2}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000000860000001830000003000000000000000000eeff8520000005000000185600000200"/61], &(0x7f00000001c0)='GPL\x00', 0x1, 0x77, &(0x7f0000000200)=""/119, 0x1e00, 0x10, '\x00', r12, 0x25, r11, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x7, 0xf}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r7, r7, r11, r7, r8, r11, r7, r8, r8], &(0x7f0000000800)=[{0x0, 0x5, 0x6, 0x9}, {0x4, 0x2, 0x5, 0x8}, {0x4, 0x2, 0x6, 0x8}, {0x0, 0x4, 0x0, 0x9}, {0x0, 0x1, 0xb, 0x2}, {0x0, 0x5, 0x2, 0x4}, {0x1, 0x3, 0x4, 0x9}], 0x10, 0xa}, 0x94) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200000d1) 1.635348509s ago: executing program 4 (id=1056): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x100000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000240)=0xc) ptrace(0x4208, r6) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x400000000000006, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = timerfd_create(0x7, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r9}, 0x10) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r10, 0x10001, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000340)=0x1004c02, 0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}, 0x2c, {[{@version_u}]}}) mq_timedreceive(r5, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1.622571989s ago: executing program 3 (id=1057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400c0, 0x8c) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/116, 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r2 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800080, 0x0, 0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x4040854) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4008010) write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x8015) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1\xfeN\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xa4\x05\x00\x00\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cn[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16z\xa1\x85m\x1b\x19a\x10\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) sendmsg$unix(r6, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f085", 0x2}], 0x1}, 0x200c8061) tkill(r2, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)) 1.5864035s ago: executing program 1 (id=1058): r0 = socket$inet(0x2, 0x5, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x8) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18090000000000000000000000010000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$inet6_int(r4, 0x29, 0x49, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, 0x0}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r7}, 0x10) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfe, 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000000)="cc74021c2b469cf1d3f54fefb558ec01cc3f41fadd23b9cf0ab804c89704412e22f06679ffe62309c57f44eb00", &(0x7f00000000c0)=""/52, &(0x7f0000000100)="9ac85b3eec880fcd44db6ab880c022d596cb54f962bbed550b9a5aae01c47412cba90e789286584496451cf393a5bda435bdfe", 0x0, 0xc, r5, 0x4}, 0x38) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1, 0x0, 0x0, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x800, 0x0, 0x2, 0x1, 0x8, 0xfffc}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1.503428601s ago: executing program 0 (id=1059): open(&(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x114, 0x4, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r5, 0x80044801, &(0x7f0000000340)) r6 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x24) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lseek(r4, 0xfffffffffffff800, 0x2) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r9, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) chmod(&(0x7f0000000a00)='./file0\x00', 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_make_fs_call\x00', r6, 0x0, 0x4}, 0x18) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r12, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r13 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r13, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d48", 0x3}], 0x2) 1.466495502s ago: executing program 5 (id=1060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) open_by_handle_at(r4, &(0x7f0000000200)=@xfs={0x1c, 0x81, {0x7fffffff, 0x7fffffff, 0x6, 0x7}}, 0x101000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) socket(0x1f, 0x2, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r6}, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000100), 0x43a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x8080000001}, 0x18) iopl(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sync() socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e50280", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}}, 0x0) 1.432004132s ago: executing program 0 (id=1061): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB, @ANYRES16=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c00028008000140000000050800"], 0x140}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @empty, 0x4e23, 0x0, 'ovf\x00', 0x0, 0xfc, 0x1}, 0x2c) 999.449331ms ago: executing program 1 (id=1062): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800008, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x30b, &(0x7f0000000740)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x14c1f6181046d77c}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@empty}, &(0x7f0000000280)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000300)=0xa) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000700)={0x0, 0x3, "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"}) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1410, 0x5, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x5c, 0x0, 0x1, 0x0, 0x0, 0xd, 0x65}, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="dde8780b8c4da03fbadd3aa6f0a3304e39294905000000000000009ecd6b9f", 0xfffffffffffffda9, 0x51, &(0x7f0000000080)={0xa, 0x4e1e, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) 842.808554ms ago: executing program 3 (id=1063): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000040)) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000005c0)='\x00]', 0x2}], 0x1}, 0x64) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xa, 0xbd1f, 0x5e0b, 0x1, 0x2a}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r2], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000030d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r8}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x2000, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r10, @ANYRES32=r9, @ANYRES16, @ANYRES32, @ANYRES64=r9], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r11, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r11, r12, 0x0, 0x0, @void}, 0x10) 801.025404ms ago: executing program 4 (id=1064): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8040600) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sched_setscheduler(0x0, 0x5, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='uid_map\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000380)=""/106, 0xbe}], 0x1, 0x40fb, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000e4ad4026f0bfd31414d0e39f07595a420cacc0565f6233a18e9461b6d0a8603db189221ffc1ca98a202dac618506cbd9f7ca2dc7d00f62655d615c1b6943d23bffff1a944ccb3d0a541993a10b07d1ccfe00b497aac8ebd197d24d7f84fbfce574ae05d4ff4ade1f98e348f28069d931756126e799c9e8f217fec8666fc2aface71aa0f4200b39054dcfe75db006447523e686b949a3b35d2f5a58b9db2b79edd978800fdc94f531e866cba48af50b626b97a7a7eb9b8827c5de5f50c01ae36eb469d9c31e91697d27ec7fad8a3a72c10e210ae1b720afdf44def7b2f364788ed45f2bad0e848ba3", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80004a, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000580)={0x0, 0x1, 0x0, 'queue0\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f00000000c0)=0x9cc, 0x4) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8009, 0x0, 0x9}) 671.403837ms ago: executing program 4 (id=1065): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, 0x0, 0x4004804) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80128}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x60, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}]}, 0x60}}, 0x20008044) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r10, &(0x7f0000000000)=[{0x0}], 0x1) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) 670.890517ms ago: executing program 5 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x50) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r8, @ANYRESDEC=r2, @ANYRES32=r3, @ANYRES32=r6, @ANYRES64=r5, @ANYRESDEC=r2], 0x64}}, 0x40448d0) 596.427919ms ago: executing program 3 (id=1067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) fsopen(&(0x7f00000000c0)='selinuxfs\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0xffff}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = accept4$llc(r6, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x10, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, &(0x7f0000000400)={0x0, @aes128}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000400001ff020000000000000000000000000001"], 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 524.86324ms ago: executing program 0 (id=1068): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x6}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f0000000640)=0x13) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) shutdown(r3, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x7f) r4 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x39, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0xc5, 0x1, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0x6, 0xcb, 0x1, {0x22, 0x8b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x40, 0x1a, 0x52}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0x9, 0x3}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x9, 0x40, 0x89, 0xff, 0x3}, 0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f4e000514100402cdf86d5330b35d6de6629dea3f3f108c1410040404a52ee7cf1616047dd1e307dfab8d5803100b1410040867a76c91493286ccf1278c386e5e18d80ace01051003000600020081ff"], 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1004}}]}) syz_usb_disconnect(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000012, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000101000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) syz_usb_ep_read(r4, 0x0, 0x57, &(0x7f0000000400)=""/87) socket$nl_generic(0x10, 0x3, 0x10) 187.508437ms ago: executing program 3 (id=1069): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40404) r1 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r1) io_setup(0x3ff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x20000000000000fb, &(0x7f0000001bc0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) r3 = syz_open_pts(0xffffffffffffffff, 0x22800) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000180)={0x1, 0x1, 0x1c, 0xf, 0x1a9, &(0x7f0000000840)}) unlinkat(0xffffffffffffffff, 0x0, 0x200) gettid() timer_create(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006040a0000000d0085a168d0bf46d32345653600648d04000b000a00000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0x4810, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}}, 0x0) io_getevents(0x0, 0x4, 0x0, &(0x7f00000019c0), 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0xc4) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000001c0)={'veth1_to_bridge\x00', {0x2, 0x4e21, @empty}}) io_submit(0x0, 0x3, &(0x7f0000001780)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xe6d, r2, 0x0, 0x0, 0x3, 0x0, 0x3}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0x8000, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x1}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f00000016c0)="659f5b0269f2e8f807116650f94ef766cef767e494afe3eb3cf90f45394302d515b095b468a597246735218332a494ecc8c4c0df55ee813043f5da81d287f18de4102e3f01", 0x45, 0x9, 0x0, 0x2}]) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 186.861456ms ago: executing program 4 (id=1070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000005140)=[{0x4, 0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)=""/246, 0xf6}, {&(0x7f0000000f80)=""/239, 0xef}, {&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/195, 0xc3}], &(0x7f0000000500)=[0x8, 0xaf, 0xd5e8]}, {0x4, 0x1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/126, 0x7e}, {&(0x7f0000001280)=""/75, 0x4b}, {&(0x7f0000001300)=""/239, 0xef}, {&(0x7f0000001400)=""/129, 0x81}], &(0x7f00000014c0)=[0x679, 0x7, 0x2, 0x5, 0x8000, 0x0, 0x80]}, {0x4, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/104, 0x68}, {&(0x7f0000002580)=""/66, 0x42}, {&(0x7f0000002600)=""/176, 0xb0}], &(0x7f0000002700)=[0xfff, 0x869c, 0x6, 0x8, 0x4040000000, 0xc19, 0x2, 0x5, 0x425c]}, {0x1, 0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002780)=""/8, 0x8}], &(0x7f0000002800)=[0x6, 0x7fff, 0x3ff]}, {0x2, 0x1, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002840)=""/248, 0xf8}, {&(0x7f0000002940)=""/74, 0x4a}], &(0x7f0000002a00)=[0xc, 0x100, 0x80, 0x7, 0x8000000000000000, 0x7]}, {0x2, 0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/23, 0x17}], &(0x7f0000002bc0)=[0x1, 0x294, 0x2, 0x8, 0x9, 0x6, 0xfffffffffffeffff, 0x3]}, {0x8, 0x0, 0x0, &(0x7f0000005040)=[{0x0}, {&(0x7f0000002cc0)=""/224, 0xe0}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/104, 0x68}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/180, 0xb4}, {&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/194, 0xc2}], &(0x7f00000050c0)=[0x2, 0x7fffffff, 0xffffffffffffffff, 0x7e8, 0x3, 0x4, 0x400, 0xffffffffffff7fff, 0xa19c, 0x5]}], 0x7) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x8, &(0x7f0000000b40)) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095", @ANYRES16=r2, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x804) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r7, r8+10000000}) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r9, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4c900000ea5d7ead9870d9c3afeda3fef5148380481c876cd402eec1447634a7e4d179891852423c4134ce0d4782f4963510d89e8e3bcb6579c2174c457a2a", @ANYRES16=0x0, @ANYBLOB="080428bd7000fddbdf250e000000080004000000800030000280080003000100000006000f009400000014000100ffffffff0000000000000000000000000800050008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4400}, 0x90) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 110.440238ms ago: executing program 3 (id=1071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r7 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$BTRFS_IOC_QGROUP_LIMIT(r6, 0x8030942b, &(0x7f0000000000)={0x7, {0x0, 0x2, 0x3, 0x6, 0x4}}) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000200)=0x32) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_cache\x00') 0s ago: executing program 4 (id=1072): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB="00000000000057b6b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r2, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e24, 0x401, @remote, 0x3}, 0x80, 0x0}, 0x4044040) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000280)}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@initdev}, &(0x7f0000000340)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="82e78812b35442686c4eede4b44a5222b97249", @ANYBLOB="0000000000000000b7080000000000007b8af8ef00000000bfa20000000000005e07020000f8ffffffb703000002000000b704000000000000850000004300000095c6439c4ae51055a92aec19dab8ccf66d06055de1f921c0932a158f5e848300a27d65fb45f1fc19ac520126f62f5c49bc1a"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getxattr(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000040)={0xa0000004}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) kernel console output (not intermixed with test programs): da1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 47.314598][ T4024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.178'. [ 47.338493][ T29] audit: type=1400 audit(1758237627.473:897): avc: denied { mount } for pid=3864 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.358918][ T4028] loop4: detected capacity change from 0 to 512 [ 47.369417][ T29] audit: type=1400 audit(1758237627.473:898): avc: denied { mount } for pid=3864 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.397737][ T29] audit: type=1400 audit(1758237627.473:899): avc: denied { mounton } for pid=3864 comm="syz-executor" path="/root/syzkaller.mav8rw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 47.402862][ T4028] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.424490][ T29] audit: type=1400 audit(1758237627.473:900): avc: denied { mounton } for pid=3864 comm="syz-executor" path="/root/syzkaller.mav8rw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 47.436759][ T4028] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.465231][ T29] audit: type=1400 audit(1758237627.633:901): avc: denied { mounton } for pid=3864 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.489116][ T29] audit: type=1400 audit(1758237627.633:902): avc: denied { mount } for pid=3864 comm="syz-executor" name="/" dev="gadgetfs" ino=4740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 47.517106][ T4028] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.169: corrupted inode contents [ 47.530301][ T4028] EXT4-fs (loop4): Remounting filesystem read-only [ 47.537311][ T4028] EXT4-fs (loop4): 1 truncate cleaned up [ 47.543595][ T269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.568332][ T269] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.611560][ T3448] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.622229][ T3448] Quota error (device loop4): write_blk: dquota write failed [ 47.629639][ T3448] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 47.639682][ T3448] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.650347][ T3448] Quota error (device loop4): write_blk: dquota write failed [ 47.659289][ T3448] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.681146][ T4028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.699427][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 47.743435][ T4035] tipc: Started in network mode [ 47.748386][ T4035] tipc: Node identity fa0de6576c86, cluster identity 4711 [ 47.755669][ T4035] tipc: Enabled bearer , priority 0 [ 47.844776][ T4041] syzkaller0: entered promiscuous mode [ 47.850378][ T4041] syzkaller0: entered allmulticast mode [ 47.871837][ T3448] tipc: Resetting bearer [ 47.917211][ T4034] tipc: Resetting bearer [ 47.969823][ T4034] tipc: Disabling bearer [ 48.047149][ T4048] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.227122][ T4048] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.266250][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.284724][ T4048] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.288333][ T4055] loop1: detected capacity change from 0 to 512 [ 48.302597][ T4055] EXT4-fs: Ignoring removed nobh option [ 48.308212][ T4055] ext4: Unknown parameter 'nouser_xattr' [ 48.326506][ T4057] loop4: detected capacity change from 0 to 512 [ 48.455896][ T4048] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.468952][ T4057] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.481871][ T4057] EXT4-fs (loop4): 1 truncate cleaned up [ 48.487906][ T4057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.025695][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.036462][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.045656][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.163500][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.193460][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.420288][ T4072] bridge_slave_0: left allmulticast mode [ 49.426218][ T4072] bridge_slave_0: left promiscuous mode [ 49.431975][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.471474][ T4072] bridge_slave_1: left allmulticast mode [ 49.477187][ T4072] bridge_slave_1: left promiscuous mode [ 49.482861][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.513301][ T4072] bond0: (slave bond_slave_0): Releasing backup interface [ 49.566339][ T4072] bond0: (slave bond_slave_1): Releasing backup interface [ 49.622604][ T4072] team0: Port device team_slave_0 removed [ 49.636647][ T4072] team0: Port device team_slave_1 removed [ 49.646012][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.653657][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.663885][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.671531][ T4072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.714374][ T4070] netlink: 'syz.5.181': attribute type 1 has an invalid length. [ 49.722210][ T4070] netlink: 'syz.5.181': attribute type 2 has an invalid length. [ 49.759192][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.181'. [ 49.803651][ T4089] tipc: Enabled bearer , priority 0 [ 49.812451][ T4089] syzkaller0: entered promiscuous mode [ 49.817975][ T4089] syzkaller0: entered allmulticast mode [ 49.861651][ T4089] tipc: Resetting bearer [ 49.879156][ T4088] tipc: Resetting bearer [ 49.893909][ T4088] tipc: Disabling bearer [ 49.927584][ T4093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.004469][ T4093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.066093][ T4093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.170158][ T4100] loop5: detected capacity change from 0 to 2048 [ 50.204681][ T4100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.225548][ T4098] loop3: detected capacity change from 0 to 8192 [ 50.230691][ T4100] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.249610][ T4093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.276405][ T4109] loop1: detected capacity change from 0 to 512 [ 50.338281][ T4114] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.190: bg 0: block 345: padding at end of block bitmap is not set [ 50.342419][ T4109] EXT4-fs (loop1): too many log groups per flexible block group [ 50.354929][ T4114] EXT4-fs (loop5): Remounting filesystem read-only [ 50.369350][ T4109] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 50.385369][ T4109] EXT4-fs (loop1): mount failed [ 50.390547][ T269] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 50.434700][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.464748][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.482775][ T4116] tipc: Started in network mode [ 50.487770][ T4116] tipc: Node identity ac14140f, cluster identity 4711 [ 50.499931][ T4116] tipc: New replicast peer: 255.255.255.255 [ 50.506093][ T4116] tipc: Enabled bearer , priority 10 [ 50.512343][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.522359][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.573439][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.591708][ T4118] loop1: detected capacity change from 0 to 512 [ 50.601142][ T4118] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 50.629883][ T4124] loop5: detected capacity change from 0 to 1024 [ 50.637966][ T4124] EXT4-fs: Ignoring removed bh option [ 50.682045][ T4124] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 50.735001][ T4124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.754446][ T4125] loop3: detected capacity change from 0 to 8192 [ 51.604199][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.620502][ T3383] tipc: Node number set to 2886997007 [ 51.656460][ T4139] loop3: detected capacity change from 0 to 512 [ 51.680757][ T4139] EXT4-fs: Ignoring removed nobh option [ 51.686478][ T4139] ext4: Unknown parameter 'nouser_xattr' [ 52.155294][ T4150] loop5: detected capacity change from 0 to 512 [ 52.214727][ T4154] serio: Serial port ptm2 [ 52.233640][ T4150] EXT4-fs (loop5): too many log groups per flexible block group [ 52.243312][ T4150] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 52.251574][ T4150] EXT4-fs (loop5): mount failed [ 52.818215][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 52.818234][ T29] audit: type=1400 audit(1758237632.983:988): avc: denied { create } for pid=4162 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.822261][ T4164] loop1: detected capacity change from 0 to 512 [ 52.858601][ T29] audit: type=1400 audit(1758237633.023:989): avc: denied { name_connect } for pid=4166 comm="syz.4.213" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 52.884678][ T4165] loop3: detected capacity change from 0 to 512 [ 52.893600][ T4164] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 52.904575][ T4165] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 52.914146][ T4171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4171 comm=syz.4.213 [ 52.927893][ T29] audit: type=1400 audit(1758237633.083:990): avc: denied { read } for pid=4166 comm="syz.4.213" laddr=::1 lport=49323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.950305][ T4164] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.970545][ T4171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53506 sclass=netlink_route_socket pid=4171 comm=syz.4.213 [ 52.991214][ T4164] EXT4-fs (loop1): mount failed [ 53.010371][ T29] audit: type=1400 audit(1758237633.173:991): avc: denied { write } for pid=4162 comm="syz.1.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.029784][ T4171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.184634][ T29] audit: type=1400 audit(1758237633.353:992): avc: denied { write } for pid=4173 comm="syz.0.214" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.209687][ T29] audit: type=1400 audit(1758237633.353:993): avc: denied { open } for pid=4173 comm="syz.0.214" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.240095][ T29] audit: type=1400 audit(1758237633.383:994): avc: denied { ioctl } for pid=4173 comm="syz.0.214" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.331600][ T29] audit: type=1400 audit(1758237633.503:995): avc: denied { create } for pid=4183 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.333220][ T4184] sd 0:0:1:0: device reset [ 53.371722][ T29] audit: type=1400 audit(1758237633.503:996): avc: denied { connect } for pid=4183 comm="syz.1.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.580181][ T4189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 53.659594][ T4191] vhci_hcd: invalid port number 77 [ 53.713123][ T4197] netlink: 'syz.5.223': attribute type 4 has an invalid length. [ 53.763665][ T4201] loop4: detected capacity change from 0 to 512 [ 53.778088][ T4199] loop3: detected capacity change from 0 to 512 [ 53.786409][ T4201] EXT4-fs: Ignoring removed bh option [ 53.796032][ T4201] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.805161][ T4201] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 53.818308][ T4206] team0: Device ipvlan2 failed to register rx_handler [ 53.828602][ T4201] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 53.844467][ T4209] @: renamed from vlan0 (while UP) [ 53.850071][ T4201] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 53.869326][ T4201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.890935][ T4201] netlink: 180 bytes leftover after parsing attributes in process `syz.4.224'. [ 53.901934][ T4201] netlink: 180 bytes leftover after parsing attributes in process `syz.4.224'. [ 53.905962][ T4199] EXT4-fs (loop3): too many log groups per flexible block group [ 53.920750][ T4199] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 53.931776][ T4201] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.224: bg 0: block 353: padding at end of block bitmap is not set [ 53.948428][ T4199] EXT4-fs (loop3): mount failed [ 53.949471][ T4215] tipc: Started in network mode [ 53.958589][ T4215] tipc: Node identity 3e18a8c29ea8, cluster identity 4711 [ 53.965890][ T4215] tipc: Enabled bearer , priority 0 [ 53.979483][ T4215] syzkaller0: entered promiscuous mode [ 53.985036][ T4215] syzkaller0: entered allmulticast mode [ 54.004074][ T4215] tipc: Resetting bearer [ 54.011874][ T4214] tipc: Resetting bearer [ 54.020248][ T4214] tipc: Disabling bearer [ 54.034450][ T4218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 54.058693][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 54.503495][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.451047][ T4234] loop5: detected capacity change from 0 to 512 [ 55.702970][ T4240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 55.712398][ T4244] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 56.223573][ T4247] loop5: detected capacity change from 0 to 512 [ 56.746482][ T4247] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.238: bad orphan inode 15 [ 56.856226][ T4247] ext4_test_bit(bit=14, block=5) = 0 [ 56.864692][ T4247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.947792][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.570196][ T4275] loop4: detected capacity change from 0 to 512 [ 58.057858][ T4290] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 58.092515][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.252'. [ 58.351000][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 58.351086][ T29] audit: type=1400 audit(1758237638.513:1044): avc: denied { create } for pid=4294 comm="syz.0.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 58.737423][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 58.746828][ T29] audit: type=1326 audit(1758237638.903:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.770312][ T29] audit: type=1326 audit(1758237638.903:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.793888][ T29] audit: type=1326 audit(1758237638.903:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.817326][ T29] audit: type=1326 audit(1758237638.903:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.840779][ T29] audit: type=1326 audit(1758237638.903:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.864206][ T29] audit: type=1326 audit(1758237638.903:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.887644][ T29] audit: type=1326 audit(1758237638.903:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.911054][ T29] audit: type=1326 audit(1758237638.903:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4303 comm="syz.3.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 58.934362][ T29] audit: type=1400 audit(1758237638.903:1053): avc: denied { create } for pid=4303 comm="syz.3.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.009281][ T4308] bridge_slave_0: left allmulticast mode [ 59.015012][ T4308] bridge_slave_0: left promiscuous mode [ 59.020930][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.033470][ T4311] syz.4.255 uses obsolete (PF_INET,SOCK_PACKET) [ 59.050871][ T4311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.255'. [ 59.059803][ T4311] netlink: 348 bytes leftover after parsing attributes in process `syz.4.255'. [ 59.068816][ T4311] netlink: 16 bytes leftover after parsing attributes in process `syz.4.255'. [ 59.077986][ T4311] netlink: 348 bytes leftover after parsing attributes in process `syz.4.255'. [ 59.145011][ T4309] loop5: detected capacity change from 0 to 512 [ 59.168313][ T4315] loop4: detected capacity change from 0 to 512 [ 59.170685][ T4308] bridge_slave_1: left allmulticast mode [ 59.182656][ T4308] bridge_slave_1: left promiscuous mode [ 59.182826][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.194694][ T4308] bond0: (slave bond_slave_0): Releasing backup interface [ 59.203857][ T4309] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.204254][ T4308] bond0: (slave bond_slave_1): Releasing backup interface [ 59.210346][ T4308] team0: Port device team_slave_0 removed [ 59.225532][ T4308] team0: Port device team_slave_1 removed [ 59.252035][ T4315] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.264014][ T4315] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.255: bg 0: block 248: padding at end of block bitmap is not set [ 59.287488][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.294974][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.311476][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.316791][ T4315] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.255: Failed to acquire dquot type 1 [ 59.319006][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.339206][ T4309] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.254: Failed to acquire dquot type 1 [ 59.352716][ T4315] EXT4-fs (loop4): 1 truncate cleaned up [ 59.360988][ T4315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.551702][ T4309] EXT4-fs (loop5): 1 truncate cleaned up [ 59.557943][ T4309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.543467][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.787860][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.920210][ T4336] loop3: detected capacity change from 0 to 2048 [ 60.960595][ T4338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 61.850434][ T4354] lo speed is unknown, defaulting to 1000 [ 61.856566][ T4354] lo speed is unknown, defaulting to 1000 [ 61.862628][ T4354] lo speed is unknown, defaulting to 1000 [ 61.869035][ T4354] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.876968][ T4354] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 61.890058][ T4354] lo speed is unknown, defaulting to 1000 [ 61.903681][ T4354] lo speed is unknown, defaulting to 1000 [ 61.918326][ T4354] lo speed is unknown, defaulting to 1000 [ 61.932970][ T4354] lo speed is unknown, defaulting to 1000 [ 61.953405][ T4354] lo speed is unknown, defaulting to 1000 [ 62.055510][ T4364] process 'syz.4.274' launched './file1' with NULL argv: empty string added [ 62.107520][ T4366] lo speed is unknown, defaulting to 1000 [ 62.424371][ T4378] lo speed is unknown, defaulting to 1000 [ 62.944789][ T4391] loop3: detected capacity change from 0 to 128 [ 62.951119][ T4390] tipc: Enabled bearer , priority 0 [ 62.952600][ T4390] syzkaller0: entered promiscuous mode [ 62.963377][ T4390] syzkaller0: entered allmulticast mode [ 62.970502][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 62.979476][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 62.988553][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.275'. [ 63.000145][ T4391] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.071223][ T4390] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 63.079442][ T4391] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.116900][ T4390] tipc: Resetting bearer [ 63.130027][ T4388] tipc: Resetting bearer [ 63.151982][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.283'. [ 63.163448][ T4388] tipc: Disabling bearer [ 63.318832][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.365907][ T4410] tipc: Enabled bearer , priority 0 [ 63.373416][ T4410] syzkaller0: entered promiscuous mode [ 63.378954][ T4410] syzkaller0: entered allmulticast mode [ 63.392899][ T4410] tipc: Resetting bearer [ 63.400340][ T4409] tipc: Resetting bearer [ 63.410072][ T4409] tipc: Disabling bearer [ 63.471951][ T4414] loop3: detected capacity change from 0 to 8192 [ 63.620541][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 63.620558][ T29] audit: type=1400 audit(1758237643.753:1174): avc: denied { validate_trans } for pid=4413 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 63.736424][ T29] audit: type=1400 audit(1758237643.903:1175): avc: denied { wake_alarm } for pid=4422 comm="syz.4.292" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.086435][ T4430] loop4: detected capacity change from 0 to 1024 [ 64.133850][ T4430] EXT4-fs: Ignoring removed orlov option [ 64.180358][ T4430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.373360][ T4435] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 64.381267][ T4435] __nla_validate_parse: 1 callbacks suppressed [ 64.381282][ T4435] netlink: 224 bytes leftover after parsing attributes in process `syz.5.295'. [ 64.496421][ T29] audit: type=1326 audit(1758237644.663:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.519808][ T29] audit: type=1326 audit(1758237644.663:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.543202][ T29] audit: type=1326 audit(1758237644.663:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.566724][ T29] audit: type=1326 audit(1758237644.663:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.590074][ T29] audit: type=1326 audit(1758237644.663:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.615144][ T29] audit: type=1326 audit(1758237644.763:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.638518][ T29] audit: type=1326 audit(1758237644.783:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.662110][ T29] audit: type=1326 audit(1758237644.783:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.3.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd9b6eba9 code=0x7ffc0000 [ 64.688999][ T4444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.703313][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.712624][ T4444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.776861][ T4450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.300'. [ 64.797959][ T4453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 64.816894][ T4450] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 65.730230][ T4471] lo speed is unknown, defaulting to 1000 [ 66.363921][ T4484] netlink: 36 bytes leftover after parsing attributes in process `syz.5.309'. [ 66.372897][ T4484] netlink: 16 bytes leftover after parsing attributes in process `syz.5.309'. [ 66.381828][ T4484] netlink: 36 bytes leftover after parsing attributes in process `syz.5.309'. [ 66.671857][ T4484] netlink: 36 bytes leftover after parsing attributes in process `syz.5.309'. [ 67.455531][ T4503] lo speed is unknown, defaulting to 1000 [ 67.860616][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.314'. [ 67.871842][ T4469] usb usb1: usbfs: process 4469 (syz.3.306) did not claim interface 0 before use [ 67.906894][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.917810][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.305603][ T4511] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.422089][ T4511] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.579201][ T4522] @0: renamed from bond_slave_1 [ 68.861307][ T4511] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.968768][ T4511] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.988825][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 68.988844][ T29] audit: type=1400 audit(1758237649.153:1321): avc: denied { create } for pid=4525 comm="syz.5.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 69.092406][ T4526] lo speed is unknown, defaulting to 1000 [ 69.102790][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.321'. [ 69.111890][ T4526] lo speed is unknown, defaulting to 1000 [ 69.117821][ T4526] lo speed is unknown, defaulting to 1000 [ 69.163758][ T4526] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 69.197299][ T3448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.225779][ T4526] lo speed is unknown, defaulting to 1000 [ 69.235192][ T3448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.267807][ T4526] lo speed is unknown, defaulting to 1000 [ 69.298013][ T3448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.307219][ T4526] lo speed is unknown, defaulting to 1000 [ 69.316530][ T29] audit: type=1326 audit(1758237649.483:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.339970][ T29] audit: type=1326 audit(1758237649.483:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.383995][ T4526] lo speed is unknown, defaulting to 1000 [ 69.392166][ T3448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.420869][ T4526] lo speed is unknown, defaulting to 1000 [ 69.679949][ T4540] tipc: Enabled bearer , priority 0 [ 69.692306][ T29] audit: type=1400 audit(1758237649.853:1324): avc: denied { read } for pid=4544 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.715500][ T4540] syzkaller0: entered promiscuous mode [ 69.721168][ T4540] syzkaller0: entered allmulticast mode [ 69.730052][ T29] audit: type=1326 audit(1758237649.883:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.753446][ T29] audit: type=1326 audit(1758237649.883:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.776923][ T29] audit: type=1326 audit(1758237649.883:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.800336][ T29] audit: type=1326 audit(1758237649.883:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.823778][ T29] audit: type=1326 audit(1758237649.883:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.847194][ T29] audit: type=1326 audit(1758237649.883:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 69.999348][ T4540] tipc: Resetting bearer [ 70.020735][ T4539] tipc: Resetting bearer [ 70.239531][ T4539] tipc: Disabling bearer [ 70.474757][ T4557] netlink: 'syz.5.331': attribute type 4 has an invalid length. [ 70.477716][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 70.508795][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 70.543918][ T4562] loop5: detected capacity change from 0 to 1024 [ 70.570984][ T4562] EXT4-fs: Ignoring removed bh option [ 70.579053][ T4562] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.603970][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.614216][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.622735][ T4562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.767627][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 70.925276][ T4572] netlink: 204 bytes leftover after parsing attributes in process `syz.4.335'. [ 71.102091][ T4575] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.223553][ T4579] tipc: Enabled bearer , priority 0 [ 71.242289][ T4579] syzkaller0: entered promiscuous mode [ 71.247826][ T4579] syzkaller0: entered allmulticast mode [ 71.282067][ T4579] tipc: Resetting bearer [ 71.299440][ T4578] tipc: Resetting bearer [ 71.324597][ T4578] tipc: Disabling bearer [ 71.518170][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.587892][ T4586] tipc: Enabled bearer , priority 0 [ 71.601901][ T4589] tipc: Enabled bearer , priority 0 [ 71.609108][ T4589] syzkaller0: entered promiscuous mode [ 71.614675][ T4589] syzkaller0: entered allmulticast mode [ 71.625616][ T4589] tipc: Resetting bearer [ 71.632718][ T4587] tipc: Resetting bearer [ 71.640668][ T4587] tipc: Disabling bearer [ 71.649899][ T4586] syzkaller0: entered promiscuous mode [ 71.655458][ T4586] syzkaller0: entered allmulticast mode [ 71.675761][ T4586] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 71.702518][ T4586] tipc: Resetting bearer [ 71.722776][ T4585] tipc: Resetting bearer [ 71.738974][ T4592] loop5: detected capacity change from 0 to 512 [ 71.747186][ T4585] tipc: Disabling bearer [ 71.764990][ T4592] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.343: bg 0: block 5: invalid block bitmap [ 71.791585][ T4592] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 71.812387][ T4592] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.343: invalid indirect mapped block 3 (level 2) [ 71.841841][ T4592] EXT4-fs (loop5): 2 truncates cleaned up [ 71.848000][ T4592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.884825][ T4596] tipc: Enabled bearer , priority 0 [ 71.892122][ T4596] syzkaller0: entered promiscuous mode [ 71.897647][ T4596] syzkaller0: entered allmulticast mode [ 71.907279][ T4592] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.921785][ T4596] tipc: Resetting bearer [ 71.929427][ T4595] tipc: Resetting bearer [ 71.937703][ T4595] tipc: Disabling bearer [ 71.965836][ T4592] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.020469][ T4599] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 72.027041][ T4599] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 72.034620][ T4599] vhci_hcd vhci_hcd.0: Device attached [ 72.055629][ T4592] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.085687][ T4600] vhci_hcd: connection closed [ 72.086241][ T37] vhci_hcd: stop threads [ 72.095238][ T37] vhci_hcd: release socket [ 72.099655][ T37] vhci_hcd: disconnect device [ 72.144876][ T4592] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.200349][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.214362][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.227463][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.239721][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.436266][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.463483][ T4609] tipc: Enabled bearer , priority 0 [ 72.472389][ T4609] syzkaller0: entered promiscuous mode [ 72.477945][ T4609] syzkaller0: entered allmulticast mode [ 72.492776][ T4609] tipc: Resetting bearer [ 72.500021][ T4608] tipc: Resetting bearer [ 72.507302][ T4608] tipc: Disabling bearer [ 72.587169][ T4613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.349'. [ 72.645205][ T4619] loop4: detected capacity change from 0 to 1024 [ 72.652071][ T4619] EXT4-fs: Ignoring removed bh option [ 72.657916][ T4619] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 72.672240][ T4619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.581363][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.609007][ T4634] lo speed is unknown, defaulting to 1000 [ 73.615317][ T4634] lo speed is unknown, defaulting to 1000 [ 73.670762][ T4639] tipc: Enabled bearer , priority 0 [ 73.687194][ T4639] syzkaller0: entered promiscuous mode [ 73.692767][ T4639] syzkaller0: entered allmulticast mode [ 73.705532][ T4639] tipc: Resetting bearer [ 73.713904][ T4638] tipc: Resetting bearer [ 73.729550][ T4638] tipc: Disabling bearer [ 74.062347][ T4648] smc: net device bond0 applied user defined pnetid SYZ0 [ 74.277423][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 74.277438][ T29] audit: type=1326 audit(1758237654.443:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4630 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 74.424621][ T4650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 74.436022][ T29] audit: type=1326 audit(1758237654.603:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 74.462841][ T29] audit: type=1326 audit(1758237654.603:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 74.484464][ T4654] @0: renamed from bond_slave_1 [ 74.486229][ T29] audit: type=1326 audit(1758237654.603:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 74.514596][ T29] audit: type=1326 audit(1758237654.603:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 74.537980][ T29] audit: type=1326 audit(1758237654.603:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f466ac55b67 code=0x7ffc0000 [ 74.561538][ T29] audit: type=1326 audit(1758237654.603:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f466abfada9 code=0x7ffc0000 [ 74.584843][ T29] audit: type=1326 audit(1758237654.603:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 74.608497][ T29] audit: type=1326 audit(1758237654.633:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4649 comm="syz.1.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466ac5eba9 code=0x7ffc0000 [ 74.675324][ T29] audit: type=1400 audit(1758237654.843:1415): avc: denied { create } for pid=4659 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 74.679706][ T4658] sd 0:0:1:0: device reset [ 74.720282][ T4660] loop9: detected capacity change from 0 to 7 [ 74.725087][ T4658] 9pnet_fd: Insufficient options for proto=fd [ 74.730185][ T4660] buffer_io_error: 130574 callbacks suppressed [ 74.730204][ T4660] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.760863][ T4660] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.768737][ T4660] loop9: unable to read partition table [ 74.784616][ T4660] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 74.784616][ T4660] ) failed (rc=-5) [ 74.926838][ T4677] loop4: detected capacity change from 0 to 512 [ 74.942028][ T4677] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.958537][ T4677] EXT4-fs (loop4): mount failed [ 75.640195][ T4698] loop4: detected capacity change from 0 to 128 [ 75.665114][ T4698] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.868730][ T4698] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.911362][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.960099][ T4702] loop4: detected capacity change from 0 to 512 [ 75.983047][ T4702] EXT4-fs: Ignoring removed oldalloc option [ 75.989045][ T4702] EXT4-fs: Ignoring removed oldalloc option [ 76.010190][ T4702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.036576][ T4706] geneve0: entered allmulticast mode [ 76.067783][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 76.078221][ T4702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.116351][ T4702] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.134588][ T4710] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 76.196116][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.384776][ T4720] netlink: 'syz.1.382': attribute type 4 has an invalid length. [ 76.392622][ T4720] netlink: 17 bytes leftover after parsing attributes in process `syz.1.382'. [ 76.416466][ T4718] lo speed is unknown, defaulting to 1000 [ 76.434046][ T4718] lo speed is unknown, defaulting to 1000 [ 76.914815][ T4734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 76.949381][ T4734] chnl_net:caif_netlink_parms(): no params data found [ 77.123848][ T4740] lo speed is unknown, defaulting to 1000 [ 77.139632][ T4740] lo speed is unknown, defaulting to 1000 [ 78.259216][ T4760] loop9: detected capacity change from 0 to 7 [ 78.265548][ T4760] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.273502][ T4760] Buffer I/O error on dev loop9, logical block 0, async page read [ 78.281507][ T4760] loop9: unable to read partition table [ 78.287255][ T4760] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 78.287255][ T4760] ) failed (rc=-5) [ 78.421224][ T4765] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.503816][ T4765] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.553159][ T4765] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.622933][ T4765] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.684979][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.702215][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.714987][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.729006][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.994647][ T4779] lo speed is unknown, defaulting to 1000 [ 79.001314][ T4779] lo speed is unknown, defaulting to 1000 [ 79.155528][ T4784] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 79.216909][ T4784] loop5: detected capacity change from 0 to 512 [ 79.246895][ T4772] syz.4.402 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 79.261082][ T4772] CPU: 0 UID: 0 PID: 4772 Comm: syz.4.402 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.261164][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.261181][ T4772] Call Trace: [ 79.261190][ T4772] [ 79.261200][ T4772] __dump_stack+0x1d/0x30 [ 79.261226][ T4772] dump_stack_lvl+0xe8/0x140 [ 79.261246][ T4772] dump_stack+0x15/0x1b [ 79.261262][ T4772] dump_header+0x81/0x220 [ 79.261368][ T4772] oom_kill_process+0x342/0x400 [ 79.261462][ T4772] out_of_memory+0x979/0xb80 [ 79.261570][ T4772] try_charge_memcg+0x5e6/0x9e0 [ 79.261672][ T4772] obj_cgroup_charge_pages+0xa6/0x150 [ 79.261706][ T4772] __memcg_kmem_charge_page+0x9f/0x170 [ 79.261888][ T4772] __alloc_frozen_pages_noprof+0x188/0x360 [ 79.261939][ T4772] alloc_pages_mpol+0xb3/0x250 [ 79.262064][ T4772] alloc_pages_noprof+0x90/0x130 [ 79.262162][ T4772] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 79.262282][ T4772] __kvmalloc_node_noprof+0x30f/0x4e0 [ 79.262370][ T4772] ? ip_set_alloc+0x1f/0x30 [ 79.262428][ T4772] ? ip_set_alloc+0x1f/0x30 [ 79.262555][ T4772] ? __kmalloc_cache_noprof+0x189/0x320 [ 79.262668][ T4772] ip_set_alloc+0x1f/0x30 [ 79.262695][ T4772] hash_netiface_create+0x282/0x740 [ 79.262728][ T4772] ? __pfx_hash_netiface_create+0x10/0x10 [ 79.262760][ T4772] ip_set_create+0x3c9/0x960 [ 79.262892][ T4772] ? __nla_parse+0x40/0x60 [ 79.262924][ T4772] nfnetlink_rcv_msg+0x4c3/0x590 [ 79.262977][ T4772] netlink_rcv_skb+0x123/0x220 [ 79.263001][ T4772] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 79.263032][ T4772] nfnetlink_rcv+0x16b/0x1690 [ 79.263123][ T4772] ? nlmon_xmit+0x4f/0x60 [ 79.263163][ T4772] ? consume_skb+0x49/0x150 [ 79.263226][ T4772] ? nlmon_xmit+0x4f/0x60 [ 79.263342][ T4772] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 79.263441][ T4772] ? __dev_queue_xmit+0x1200/0x2000 [ 79.263469][ T4772] ? __dev_queue_xmit+0x182/0x2000 [ 79.263499][ T4772] ? ref_tracker_free+0x37d/0x3e0 [ 79.263540][ T4772] ? __netlink_deliver_tap+0x4dc/0x500 [ 79.263662][ T4772] netlink_unicast+0x5bd/0x690 [ 79.263695][ T4772] netlink_sendmsg+0x58b/0x6b0 [ 79.263732][ T4772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.263843][ T4772] __sock_sendmsg+0x145/0x180 [ 79.263889][ T4772] ____sys_sendmsg+0x31e/0x4e0 [ 79.263929][ T4772] ___sys_sendmsg+0x17b/0x1d0 [ 79.263973][ T4772] __x64_sys_sendmsg+0xd4/0x160 [ 79.264070][ T4772] x64_sys_call+0x191e/0x2ff0 [ 79.264094][ T4772] do_syscall_64+0xd2/0x200 [ 79.264135][ T4772] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.264228][ T4772] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.264258][ T4772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.264285][ T4772] RIP: 0033:0x7fa55ceeeba9 [ 79.264305][ T4772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.264373][ T4772] RSP: 002b:00007fa55b94f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.264454][ T4772] RAX: ffffffffffffffda RBX: 00007fa55d135fa0 RCX: 00007fa55ceeeba9 [ 79.264469][ T4772] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 79.264485][ T4772] RBP: 00007fa55cf71e19 R08: 0000000000000000 R09: 0000000000000000 [ 79.264500][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.264515][ T4772] R13: 00007fa55d136038 R14: 00007fa55d135fa0 R15: 00007ffcb8139568 [ 79.264611][ T4772] [ 79.264618][ T4772] memory: usage 307200kB, limit 307200kB, failcnt 271 [ 79.371438][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 79.371457][ T29] audit: type=1400 audit(1758237659.533:1444): avc: denied { add_name } for pid=4783 comm="syz.5.406" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 79.374793][ T4772] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 79.374808][ T4772] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 79.374826][ T4772] Memory cgroup stats for /syz4: [ 79.379620][ T4772] cache 0 [ 79.384494][ T29] audit: type=1400 audit(1758237659.533:1445): avc: denied { create } for pid=4783 comm="syz.5.406" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.390215][ T4772] rss 0 [ 79.390226][ T4772] shmem 0 [ 79.394843][ T29] audit: type=1400 audit(1758237659.533:1446): avc: denied { associate } for pid=4783 comm="syz.5.406" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.399245][ T4772] mapped_file 0 [ 79.399256][ T4772] dirty 0 [ 79.404196][ T29] audit: type=1400 audit(1758237659.533:1447): avc: denied { mounton } for pid=4783 comm="syz.5.406" path="/44/bus" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.408955][ T4772] writeback 0 [ 79.408966][ T4772] workingset_refault_anon 1 [ 79.408975][ T4772] workingset_refault_file 253 [ 79.408982][ T4772] swap 200704 [ 79.408988][ T4772] swapcached 4096 [ 79.415653][ T4788] tipc: Enabled bearer , priority 0 [ 79.419202][ T4772] pgpgin 64068 [ 79.419214][ T4772] pgpgout 64066 [ 79.426269][ T4788] syzkaller0: entered promiscuous mode [ 79.428069][ T4772] pgfault 71412 [ 79.428080][ T4772] pgmajfault 7 [ 79.432432][ T4788] syzkaller0: entered allmulticast mode [ 79.436727][ T4788] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 79.437761][ T4772] inactive_anon 0 [ 79.452862][ T4784] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.453163][ T4772] active_anon 4096 [ 79.464944][ T4784] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.406: invalid indirect mapped block 4294967295 (level 0) [ 79.468305][ T4772] inactive_file 0 [ 79.468317][ T4772] active_file 4096 [ 79.475428][ T4784] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.406: invalid indirect mapped block 4294967295 (level 1) [ 79.478310][ T4772] unevictable 0 [ 79.483825][ T4784] EXT4-fs (loop5): 1 orphan inode deleted [ 79.487790][ T4772] hierarchical_memory_limit 314572800 [ 79.487873][ T4772] hierarchical_memsw_limit 9223372036854771712 [ 79.492701][ T4784] EXT4-fs (loop5): 1 truncate cleaned up [ 79.497352][ T4772] total_cache 0 [ 79.497362][ T4772] total_rss 0 [ 79.497370][ T4772] total_shmem 0 [ 79.497379][ T4772] total_mapped_file 0 [ 79.497388][ T4772] total_dirty 0 [ 79.504291][ T4784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.508067][ T4772] total_writeback 0 [ 79.508078][ T4772] total_workingset_refault_anon 1 [ 79.907728][ T4772] total_workingset_refault_file 253 [ 79.912940][ T4772] total_swap 200704 [ 79.916751][ T4772] total_swapcached 4096 [ 79.920925][ T4772] total_pgpgin 64068 [ 79.924811][ T4772] total_pgpgout 64066 [ 79.928781][ T4772] total_pgfault 71412 [ 79.932781][ T4772] total_pgmajfault 7 [ 79.936684][ T4772] total_inactive_anon 0 [ 79.940850][ T4772] total_active_anon 4096 [ 79.945150][ T4772] total_inactive_file 0 [ 79.949371][ T4772] total_active_file 4096 [ 79.953619][ T4772] total_unevictable 0 [ 79.957593][ T4772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.402,pid=4771,uid=0 [ 79.972254][ T4772] Memory cgroup out of memory: Killed process 4771 (syz.4.402) total-vm:95940kB, anon-rss:1204kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 79.995550][ T4792] tipc: Resetting bearer [ 80.005680][ T4786] tipc: Resetting bearer [ 80.023253][ T4786] tipc: Disabling bearer [ 80.036972][ T4794] vlan0: entered promiscuous mode [ 80.042188][ T4794] vlan0: entered allmulticast mode [ 80.047382][ T4794] hsr_slave_1: entered allmulticast mode [ 80.075084][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.408'. [ 80.090627][ T3864] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.105345][ T29] audit: type=1326 audit(1758237660.273:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 80.128886][ T29] audit: type=1326 audit(1758237660.273:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 80.173589][ T4796] tipc: New replicast peer: 255.255.255.83 [ 80.179489][ T4796] tipc: Enabled bearer , priority 10 [ 80.204284][ T4798] sch_fq: defrate 4294967295 ignored. [ 80.231599][ T29] audit: type=1326 audit(1758237660.323:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 80.254979][ T29] audit: type=1326 audit(1758237660.323:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 80.278390][ T29] audit: type=1326 audit(1758237660.323:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 80.301861][ T29] audit: type=1326 audit(1758237660.323:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 80.327074][ T4798] loop5: detected capacity change from 0 to 2048 [ 80.372081][ T4798] loop5: p1 < > p4 [ 80.378223][ T4798] loop5: p4 size 8388608 extends beyond EOD, truncated [ 80.528453][ T4817] veth0: entered promiscuous mode [ 80.543408][ T4817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 80.556350][ T4815] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.604357][ T4821] loop4: detected capacity change from 0 to 512 [ 80.623262][ T4815] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.638360][ T4821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.418: bg 0: block 5: invalid block bitmap [ 80.667260][ T4821] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 80.699186][ T4821] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.418: invalid indirect mapped block 3 (level 2) [ 80.717395][ T4816] veth0: left promiscuous mode [ 80.732485][ T4821] EXT4-fs (loop4): 2 truncates cleaned up [ 80.751001][ T4821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.779210][ T4815] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.821017][ T4821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.852877][ T4815] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.906876][ T4821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.925603][ T1039] IPVS: starting estimator thread 0... [ 80.959162][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.983696][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.002685][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.014348][ T4821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.031081][ T4836] IPVS: using max 1872 ests per chain, 93600 per kthread [ 81.080267][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.162897][ T4821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.234778][ T4840] bridge_slave_0: left allmulticast mode [ 81.241161][ T4840] bridge_slave_0: left promiscuous mode [ 81.246980][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.261212][ T4843] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 81.267767][ T4843] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.271421][ T4846] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 81.275323][ T4843] vhci_hcd vhci_hcd.0: Device attached [ 81.282989][ T4846] netlink: 40 bytes leftover after parsing attributes in process `syz.0.424'. [ 81.321778][ T4848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.350499][ T4843] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 81.354074][ T4840] bridge_slave_1: left allmulticast mode [ 81.357113][ T4843] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 81.362810][ T4840] bridge_slave_1: left promiscuous mode [ 81.370247][ T4843] vhci_hcd vhci_hcd.0: Device attached [ 81.375987][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.394390][ T4848] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 81.401036][ T4848] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.408700][ T4848] vhci_hcd vhci_hcd.0: Device attached [ 81.416665][ T4840] bond0: (slave bond_slave_0): Releasing backup interface [ 81.420785][ T4843] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(11) [ 81.430410][ T4843] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.438059][ T4843] vhci_hcd vhci_hcd.0: Device attached [ 81.449114][ T4843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.457779][ T4843] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 81.472312][ T4854] vhci_hcd: connection closed [ 81.472749][ T12] vhci_hcd: stop threads [ 81.478597][ T4844] vhci_hcd: connection closed [ 81.481733][ T12] vhci_hcd: release socket [ 81.490916][ T12] vhci_hcd: disconnect device [ 81.496515][ T4849] vhci_hcd: connection closed [ 81.497429][ T4852] vhci_hcd: connection closed [ 81.500644][ T3383] vhci_hcd: vhci_device speed not set [ 81.518991][ T12] vhci_hcd: stop threads [ 81.523389][ T12] vhci_hcd: release socket [ 81.527834][ T12] vhci_hcd: disconnect device [ 81.534000][ T4840] bond0: (slave bond_slave_1): Releasing backup interface [ 81.541937][ T12] vhci_hcd: stop threads [ 81.546234][ T12] vhci_hcd: release socket [ 81.550696][ T12] vhci_hcd: disconnect device [ 81.561078][ T4840] team0: Port device team_slave_0 removed [ 81.570461][ T4840] team0: Port device team_slave_1 removed [ 81.570535][ T3383] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 81.578077][ T4840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.591111][ T4840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.596584][ T3383] usb 7-1: enqueue for inactive port 0 [ 81.598726][ T12] vhci_hcd: stop threads [ 81.608050][ T12] vhci_hcd: release socket [ 81.612539][ T12] vhci_hcd: disconnect device [ 81.617298][ T3383] usb 7-1: enqueue for inactive port 0 [ 81.624360][ T4840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.631651][ T3383] usb 7-1: enqueue for inactive port 0 [ 81.631843][ T4840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.677543][ T4856] lo speed is unknown, defaulting to 1000 [ 81.684317][ T4856] lo speed is unknown, defaulting to 1000 [ 81.717142][ T3383] vhci_hcd: vhci_device speed not set [ 81.777092][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.785768][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.795756][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.804174][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.843616][ T4867] openvswitch: netlink: Message has 6 unknown bytes. [ 81.929651][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.293630][ T4885] hub 9-0:1.0: USB hub found [ 82.298432][ T4885] hub 9-0:1.0: 8 ports detected [ 82.321924][ T4885] can0: slcan on ttyS3. [ 83.037315][ T4875] mmap: syz.3.433 (4875) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.267936][ T4889] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 83.274509][ T4889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 83.282129][ T4889] vhci_hcd vhci_hcd.0: Device attached [ 83.347382][ T4889] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 83.356325][ T4889] netlink: 'syz.0.435': attribute type 29 has an invalid length. [ 83.365680][ T4889] netlink: 500 bytes leftover after parsing attributes in process `syz.0.435'. [ 83.380772][ T4876] can0 (unregistered): slcan off ttyS3. [ 83.487865][ T4891] vhci_hcd: connection closed [ 83.488176][ T12] vhci_hcd: stop threads [ 83.497370][ T12] vhci_hcd: release socket [ 83.501847][ T12] vhci_hcd: disconnect device [ 83.606942][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.614481][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.622326][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.630235][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.637707][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.645231][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.652781][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.660201][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.667638][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.675253][ T3471] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 83.684050][ T3471] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 83.708603][ T4903] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.744719][ T4908] loop9: detected capacity change from 0 to 7 [ 83.751325][ T4908] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.759753][ T4908] Buffer I/O error on dev loop9, logical block 0, async page read [ 83.767782][ T4908] loop9: unable to read partition table [ 83.774919][ T4908] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 83.774919][ T4908] ) failed (rc=-5) [ 83.781533][ T4903] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.815745][ T4910] netlink: 'syz.4.443': attribute type 4 has an invalid length. [ 83.841873][ T2956] lo speed is unknown, defaulting to 1000 [ 83.847660][ T2956] syz0: Port: 1 Link DOWN [ 83.867518][ T4903] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.992036][ T4903] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.011250][ T3444] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.029999][ T3444] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.060688][ T3444] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.088477][ T3444] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.201444][ T4934] loop4: detected capacity change from 0 to 164 [ 84.282168][ T4937] lo speed is unknown, defaulting to 1000 [ 84.288846][ T4937] lo speed is unknown, defaulting to 1000 [ 84.617885][ T4939] netlink: 'syz.4.453': attribute type 4 has an invalid length. [ 85.165756][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 85.165775][ T29] audit: type=1400 audit(1758237664.393:1637): avc: denied { mount } for pid=4933 comm="syz.4.452" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 85.194487][ T29] audit: type=1400 audit(1758237664.683:1638): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 85.493774][ T4941] lo speed is unknown, defaulting to 1000 [ 85.503138][ T4941] lo speed is unknown, defaulting to 1000 [ 86.081489][ T4951] loop4: detected capacity change from 0 to 1024 [ 86.093939][ T4955] loop9: detected capacity change from 0 to 7 [ 86.100203][ T4955] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.104265][ T4951] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 86.108453][ T4955] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.124589][ T4955] loop9: unable to read partition table [ 86.130343][ T4955] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 86.130343][ T4955] ) failed (rc=-5) [ 86.147780][ T4951] smc: net device bond0 erased user defined pnetid SYZ0 [ 86.228427][ T29] audit: type=1326 audit(1758237666.393:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.268989][ T29] audit: type=1326 audit(1758237666.423:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.292446][ T29] audit: type=1326 audit(1758237666.423:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.315992][ T29] audit: type=1326 audit(1758237666.423:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.339395][ T29] audit: type=1326 audit(1758237666.423:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.362759][ T29] audit: type=1326 audit(1758237666.423:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.386096][ T29] audit: type=1326 audit(1758237666.423:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.409534][ T29] audit: type=1326 audit(1758237666.423:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.5.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 86.433944][ T4969] capability: warning: `syz.5.462' uses deprecated v2 capabilities in a way that may be insecure [ 86.621244][ T4978] netlink: 'syz.0.466': attribute type 3 has an invalid length. [ 86.858974][ T4982] netlink: 'syz.0.468': attribute type 4 has an invalid length. [ 86.866721][ T4982] netlink: 17 bytes leftover after parsing attributes in process `syz.0.468'. [ 87.378822][ T4986] tipc: Enabled bearer , priority 0 [ 87.408943][ T4986] syzkaller0: entered promiscuous mode [ 87.414660][ T4986] syzkaller0: entered allmulticast mode [ 87.468116][ T4986] tipc: Resetting bearer [ 87.674474][ T4985] tipc: Resetting bearer [ 87.699437][ T4985] tipc: Disabling bearer [ 88.637872][ T5018] netlink: 'syz.0.479': attribute type 10 has an invalid length. [ 88.645690][ T5018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.479'. [ 88.685991][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.695361][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.712363][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.731181][ T37] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.838362][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.861884][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.883414][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.892857][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.069676][ T5036] wg2: entered promiscuous mode [ 89.074786][ T5036] wg2: entered allmulticast mode [ 89.107384][ T5039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 89.116351][ T5039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 89.182164][ T5044] $H: renamed from bond0 [ 89.190422][ T5044] $H: entered promiscuous mode [ 89.263915][ T5050] netlink: 'syz.1.493': attribute type 10 has an invalid length. [ 89.275151][ T5050] team0: Port device dummy0 added [ 89.286017][ T5050] netlink: 'syz.1.493': attribute type 10 has an invalid length. [ 89.296979][ T5050] team0: Port device dummy0 removed [ 89.306026][ T5050] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.826455][ T5073] lo speed is unknown, defaulting to 1000 [ 89.855111][ T5073] lo speed is unknown, defaulting to 1000 [ 90.001168][ T5081] lo speed is unknown, defaulting to 1000 [ 90.007263][ T5081] lo speed is unknown, defaulting to 1000 [ 90.132138][ T5086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.504'. [ 90.183956][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 90.183978][ T29] audit: type=1400 audit(1758237670.353:2207): avc: denied { prog_load } for pid=5091 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.234781][ T5093] lo speed is unknown, defaulting to 1000 [ 90.262770][ T29] audit: type=1400 audit(1758237670.383:2208): avc: denied { create } for pid=5091 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 90.282373][ T29] audit: type=1400 audit(1758237670.383:2209): avc: denied { prog_load } for pid=5091 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.301387][ T29] audit: type=1400 audit(1758237670.383:2210): avc: denied { prog_load } for pid=5091 comm="syz.0.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.320415][ T29] audit: type=1400 audit(1758237670.383:2211): avc: denied { module_request } for pid=5091 comm="syz.0.509" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 90.342128][ T29] audit: type=1400 audit(1758237670.383:2212): avc: denied { mount } for pid=5091 comm="syz.0.509" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=0 [ 90.363748][ T29] audit: type=1400 audit(1758237670.393:2213): avc: denied { map_create } for pid=5084 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.382827][ T29] audit: type=1400 audit(1758237670.393:2214): avc: denied { map_create } for pid=5084 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.396328][ T5093] lo speed is unknown, defaulting to 1000 [ 90.401925][ T29] audit: type=1400 audit(1758237670.393:2215): avc: denied { prog_load } for pid=5084 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.426750][ T29] audit: type=1400 audit(1758237670.393:2216): avc: denied { prog_load } for pid=5084 comm="syz.5.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.768034][ T5117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.517'. [ 90.838259][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 91.078340][ T5132] lo speed is unknown, defaulting to 1000 [ 91.085796][ T5132] lo speed is unknown, defaulting to 1000 [ 91.091877][ T5129] Falling back ldisc for ttyS3. [ 91.275354][ T5140] veth0_to_team: entered promiscuous mode [ 91.617743][ T5146] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 91.625546][ T5146] netlink: 17 bytes leftover after parsing attributes in process `syz.1.529'. [ 91.841825][ T5150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 91.850888][ T5150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.531'. [ 91.923792][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 91.936003][ T5153] $H: renamed from bond0 (while UP) [ 91.998806][ T5153] $H: entered promiscuous mode [ 92.465197][ T5171] netlink: 'syz.3.538': attribute type 4 has an invalid length. [ 92.534013][ T5174] netlink: 'syz.3.539': attribute type 4 has an invalid length. [ 92.769332][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 93.480898][ T5197] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 93.901361][ T5217] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 93.977439][ T5219] syzkaller0: entered promiscuous mode [ 93.983016][ T5219] syzkaller0: entered allmulticast mode [ 94.000109][ T5219] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 94.108908][ T5221] serio: Serial port ttyS3 [ 94.309309][ T5230] syz.0.564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.346857][ T5232] vlan0: entered allmulticast mode [ 94.352042][ T5232] veth0_to_bond: entered allmulticast mode [ 94.453667][ T5239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.568'. [ 94.612518][ T5251] bridge0: port 1(macsec1) entered blocking state [ 94.619067][ T5251] bridge0: port 1(macsec1) entered disabled state [ 94.626670][ T5251] macsec1: entered allmulticast mode [ 94.632561][ T5251] macsec1: left allmulticast mode [ 94.785379][ T5249] netlink: 168 bytes leftover after parsing attributes in process `syz.4.573'. [ 94.795108][ T5249] C: renamed from team_slave_0 [ 95.046068][ T5263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.579'. [ 95.059425][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.579'. [ 95.176487][ T5274] lo speed is unknown, defaulting to 1000 [ 95.182859][ T5274] lo speed is unknown, defaulting to 1000 [ 95.191284][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 95.191299][ T29] audit: type=1400 audit(1758237675.363:2844): avc: denied { prog_load } for pid=5269 comm="syz.0.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.244291][ T29] audit: type=1400 audit(1758237675.413:2845): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.285340][ T29] audit: type=1400 audit(1758237675.453:2846): avc: denied { map_create } for pid=5282 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.332390][ T5284] serio: Serial port ttyS3 [ 95.337124][ T29] audit: type=1400 audit(1758237675.473:2847): avc: denied { prog_load } for pid=5282 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.356178][ T29] audit: type=1400 audit(1758237675.483:2848): avc: denied { open } for pid=5282 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 95.375481][ T29] audit: type=1400 audit(1758237675.483:2849): avc: denied { map_create } for pid=5282 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.390295][ T5290] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 95.394893][ T29] audit: type=1400 audit(1758237675.483:2850): avc: denied { prog_load } for pid=5282 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.421426][ T29] audit: type=1400 audit(1758237675.483:2851): avc: denied { prog_load } for pid=5282 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.440608][ T29] audit: type=1400 audit(1758237675.483:2852): avc: denied { prog_load } for pid=5282 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.459951][ T29] audit: type=1400 audit(1758237675.483:2853): avc: denied { execute } for pid=5282 comm="syz.3.587" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=0 [ 95.505182][ T5290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.605948][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.617835][ T5292] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.643156][ T5292] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 95.682785][ T5295] gretap1: entered promiscuous mode [ 95.690502][ T5295] bond0: (slave gretap1): making interface the new active one [ 95.702590][ T5295] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 95.723267][ T5290] macvlan0: entered promiscuous mode [ 95.728611][ T5290] macvlan0: entered allmulticast mode [ 95.751238][ T5290] bond0: entered promiscuous mode [ 95.756942][ T5290] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 95.767528][ T5290] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 95.779931][ T5290] bond0: left promiscuous mode [ 95.798158][ T51] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.809262][ T5312] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 95.810147][ T51] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.838675][ T5310] bond0: (slave dummy0): Releasing backup interface [ 95.862592][ T5312] bond0: entered promiscuous mode [ 95.868840][ T5312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.887610][ T51] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.900475][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.924091][ T5312] wg2: entered promiscuous mode [ 95.929197][ T5312] wg2: entered allmulticast mode [ 95.941465][ T5306] lo speed is unknown, defaulting to 1000 [ 95.967937][ T5314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.987136][ T5325] netlink: 'syz.3.603': attribute type 27 has an invalid length. [ 95.991701][ T5314] bond0: (slave bond1): making interface the new active one [ 96.002450][ T5314] bond1: entered promiscuous mode [ 96.021499][ T5314] bond0: (slave bond1): Enslaving as an active interface with an up link [ 96.031434][ T5306] lo speed is unknown, defaulting to 1000 [ 96.216458][ T5334] netlink: 'syz.5.606': attribute type 10 has an invalid length. [ 96.268293][ T5337] netlink: 'syz.5.606': attribute type 10 has an invalid length. [ 96.434510][ T5325] bridge0: left allmulticast mode [ 96.439660][ T5325] $H: left promiscuous mode [ 96.968403][ T5325] gretap1: left promiscuous mode [ 97.002258][ T5327] 8021q: adding VLAN 0 to HW filter on device $H [ 97.010203][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.050747][ T5327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.070172][ T5334] team0: Port device dummy0 added [ 97.079131][ T5337] team0: Port device dummy0 removed [ 97.088081][ T5337] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.096896][ T5341] netlink: 'syz.1.609': attribute type 29 has an invalid length. [ 97.130980][ T3448] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.131709][ T5366] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 97.169443][ T3448] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.179855][ T3448] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.188492][ T3448] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.227706][ T5366] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 97.239309][ T5366] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 97.282904][ T5377] macvlan0: entered promiscuous mode [ 97.288323][ T5377] macvlan0: entered allmulticast mode [ 97.295095][ T5377] bond1: entered promiscuous mode [ 97.300574][ T5377] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 97.309364][ T5377] bond1: left promiscuous mode [ 97.728965][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.619'. [ 97.939614][ T5397] lo speed is unknown, defaulting to 1000 [ 97.946434][ T5397] lo speed is unknown, defaulting to 1000 [ 98.903493][ T5430] can0: slcan on ptm0. [ 99.367087][ T5448] wireguard0: entered promiscuous mode [ 99.372760][ T5448] wireguard0: entered allmulticast mode [ 99.760504][ T5429] can0 (unregistered): slcan off ptm0. [ 100.222971][ T29] kauditd_printk_skb: 722 callbacks suppressed [ 100.222988][ T29] audit: type=1400 audit(1758237680.393:3576): avc: denied { prog_load } for pid=5474 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.335683][ T29] audit: type=1400 audit(1758237680.503:3577): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.387251][ T29] audit: type=1400 audit(1758237680.533:3578): avc: denied { prog_load } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.406796][ T29] audit: type=1400 audit(1758237680.533:3579): avc: denied { map_create } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.426164][ T29] audit: type=1400 audit(1758237680.533:3580): avc: denied { create } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 100.432018][ T5481] macsec0: entered promiscuous mode [ 100.447244][ T29] audit: type=1400 audit(1758237680.533:3581): avc: denied { open } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 100.471814][ T29] audit: type=1400 audit(1758237680.533:3582): avc: denied { map_create } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.491059][ T29] audit: type=1400 audit(1758237680.533:3583): avc: denied { prog_load } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.510242][ T29] audit: type=1400 audit(1758237680.533:3584): avc: denied { prog_load } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.529249][ T29] audit: type=1400 audit(1758237680.533:3585): avc: denied { prog_load } for pid=5478 comm="syz.4.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.609161][ T5348] IPVS: starting estimator thread 0... [ 100.674955][ T5496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.662'. [ 100.700507][ T5490] IPVS: using max 1872 ests per chain, 93600 per kthread [ 101.187224][ T5520] netlink: 5 bytes leftover after parsing attributes in process `syz.5.672'. [ 101.200896][ T5520] 0XD: renamed from gretap0 (while UP) [ 101.211586][ T5520] 0XD: entered allmulticast mode [ 101.219991][ T5520] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 101.331772][ T5532] netlink: 'syz.0.678': attribute type 1 has an invalid length. [ 101.354754][ T5532] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.366535][ T5532] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 101.403117][ T5537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 101.418068][ T5532] macvlan0: entered promiscuous mode [ 101.423520][ T5532] macvlan0: entered allmulticast mode [ 101.429433][ T5532] bond2: entered promiscuous mode [ 101.437276][ T5532] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 101.445973][ T5532] bond2: left promiscuous mode [ 101.496745][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 101.529422][ T5544] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 101.537283][ T5544] netlink: 40 bytes leftover after parsing attributes in process `syz.4.682'. [ 101.568559][ T5549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5549 comm=syz.4.685 [ 101.632701][ T5553] lo speed is unknown, defaulting to 1000 [ 101.638751][ T5553] lo speed is unknown, defaulting to 1000 [ 101.744013][ T5561] lo speed is unknown, defaulting to 1000 [ 101.758009][ T5561] lo speed is unknown, defaulting to 1000 [ 102.604648][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 102.613540][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 102.627065][ T3448] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.635521][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 102.644361][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'. [ 102.654200][ T3448] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.662849][ T3448] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.672264][ T3448] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.923498][ T5607] lo speed is unknown, defaulting to 1000 [ 102.929872][ T5607] lo speed is unknown, defaulting to 1000 [ 102.974580][ T5607] lo speed is unknown, defaulting to 1000 [ 102.981442][ T5607] lo speed is unknown, defaulting to 1000 [ 103.222796][ T5625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 103.603186][ T5647] netlink: 44 bytes leftover after parsing attributes in process `syz.1.720'. [ 103.986160][ T5663] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 103.992859][ T5663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.995152][ T5667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5667 comm=syz.4.728 [ 104.000700][ T5663] vhci_hcd vhci_hcd.0: Device attached [ 104.022602][ T5663] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 104.029240][ T5663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.036883][ T5663] vhci_hcd vhci_hcd.0: Device attached [ 104.044085][ T5663] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 104.050711][ T5663] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 104.058396][ T5663] vhci_hcd vhci_hcd.0: Device attached [ 104.065451][ T5663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.075380][ T5663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.084836][ T5663] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 104.094801][ T5670] vhci_hcd: connection closed [ 104.095028][ T12] vhci_hcd: stop threads [ 104.104076][ T12] vhci_hcd: release socket [ 104.108527][ T12] vhci_hcd: disconnect device [ 104.113707][ T5664] vhci_hcd: connection closed [ 104.113875][ T5668] vhci_hcd: connection closed [ 104.119587][ T12] vhci_hcd: stop threads [ 104.128630][ T12] vhci_hcd: release socket [ 104.133105][ T12] vhci_hcd: disconnect device [ 104.138812][ T12] vhci_hcd: stop threads [ 104.143188][ T12] vhci_hcd: release socket [ 104.147667][ T12] vhci_hcd: disconnect device [ 104.201258][ T36] vhci_hcd: vhci_device speed not set [ 104.218716][ T5678] lo speed is unknown, defaulting to 1000 [ 104.224960][ T5678] lo speed is unknown, defaulting to 1000 [ 104.675283][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.742'. [ 104.702207][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 105.209305][ T5712] netlink: 'syz.5.745': attribute type 1 has an invalid length. [ 105.223387][ T5712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.231326][ T29] kauditd_printk_skb: 2097 callbacks suppressed [ 105.231400][ T29] audit: type=1326 audit(1758237685.403:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc9a6e5b67 code=0x7ffc0000 [ 105.261135][ T29] audit: type=1326 audit(1758237685.403:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc9a68ada9 code=0x7ffc0000 [ 105.284600][ T29] audit: type=1326 audit(1758237685.403:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 105.308011][ T29] audit: type=1326 audit(1758237685.403:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc9a6e5b67 code=0x7ffc0000 [ 105.331346][ T29] audit: type=1326 audit(1758237685.403:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc9a68ada9 code=0x7ffc0000 [ 105.354647][ T5718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.745'. [ 105.354675][ T5718] netlink: 28 bytes leftover after parsing attributes in process `syz.5.745'. [ 105.372484][ T29] audit: type=1326 audit(1758237685.403:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 105.395741][ T29] audit: type=1326 audit(1758237685.403:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc9a6e5b67 code=0x7ffc0000 [ 105.419042][ T29] audit: type=1326 audit(1758237685.403:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc9a68ada9 code=0x7ffc0000 [ 105.442554][ T29] audit: type=1326 audit(1758237685.403:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 105.465761][ T29] audit: type=1326 audit(1758237685.403:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5715 comm="syz.0.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc9a6e5b67 code=0x7ffc0000 [ 105.598071][ T5742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.755'. [ 105.639946][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 105.650162][ T5740] lo speed is unknown, defaulting to 1000 [ 105.660102][ T5740] lo speed is unknown, defaulting to 1000 [ 105.679058][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 105.708971][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.756'. [ 107.014728][ T5799] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5799 comm=syz.4.776 [ 107.959042][ T5826] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5826 comm=syz.0.788 [ 108.179287][ T5839] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 108.189714][ T5839] team0: Port device geneve1 added [ 108.196921][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.210187][ T5841] serio: Serial port ptm0 [ 108.210965][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.226897][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.235549][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.247367][ T5844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5844 comm=syz.1.793 [ 108.256959][ T5845] lo speed is unknown, defaulting to 1000 [ 108.266611][ T5845] lo speed is unknown, defaulting to 1000 [ 108.510082][ T5865] ip6gre1: entered allmulticast mode [ 108.548649][ T5867] vlan0: entered promiscuous mode [ 108.553904][ T5867] vlan0: entered allmulticast mode [ 108.559052][ T5867] hsr_slave_1: entered allmulticast mode [ 108.601442][ T5867] __nla_validate_parse: 6 callbacks suppressed [ 108.601461][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.803'. [ 108.741043][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 108.754297][ T5877] bridge0: port 1(macvlan0) entered blocking state [ 108.760948][ T5877] bridge0: port 1(macvlan0) entered disabled state [ 108.767704][ T5877] macvlan0: entered allmulticast mode [ 108.773161][ T5877] bridge0: entered allmulticast mode [ 108.779052][ T5877] macvlan0: left allmulticast mode [ 108.784298][ T5877] bridge0: left allmulticast mode [ 109.213997][ T5349] IPVS: starting estimator thread 0... [ 109.300451][ T5889] IPVS: using max 2016 ests per chain, 100800 per kthread [ 109.358119][ T5897] bridge0: entered allmulticast mode [ 109.748175][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.819'. [ 109.842340][ T5919] lo speed is unknown, defaulting to 1000 [ 109.848352][ T5919] lo speed is unknown, defaulting to 1000 [ 110.195880][ T5929] capability: warning: `syz.1.826' uses 32-bit capabilities (legacy support in use) [ 110.258007][ T29] kauditd_printk_skb: 1130 callbacks suppressed [ 110.258026][ T29] audit: type=1400 audit(1758237690.423:6823): avc: denied { bpf } for pid=5928 comm="syz.1.826" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 110.285273][ T29] audit: type=1400 audit(1758237690.443:6824): avc: denied { allowed } for pid=5928 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 110.304700][ T29] audit: type=1400 audit(1758237690.443:6825): avc: denied { create } for pid=5928 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 110.469428][ T29] audit: type=1400 audit(1758237690.633:6826): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.496785][ T29] audit: type=1400 audit(1758237690.663:6827): avc: denied { create } for pid=5931 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 110.517238][ T29] audit: type=1400 audit(1758237690.663:6828): avc: denied { create } for pid=5931 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 110.537493][ T29] audit: type=1400 audit(1758237690.663:6829): avc: denied { prog_load } for pid=5931 comm="syz.3.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.556511][ T29] audit: type=1400 audit(1758237690.663:6830): avc: denied { write } for pid=5931 comm="syz.3.827" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 110.579567][ T29] audit: type=1400 audit(1758237690.663:6831): avc: denied { read write } for pid=5933 comm="syz.5.828" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.603617][ T29] audit: type=1400 audit(1758237690.663:6832): avc: denied { create } for pid=5933 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 110.742706][ T5945] netlink: 'syz.5.833': attribute type 4 has an invalid length. [ 110.890725][ T5953] lo speed is unknown, defaulting to 1000 [ 110.896853][ T5953] lo speed is unknown, defaulting to 1000 [ 110.939940][ T5957] netlink: 'syz.0.838': attribute type 21 has an invalid length. [ 110.947756][ T5957] netlink: 128 bytes leftover after parsing attributes in process `syz.0.838'. [ 110.956893][ T5957] netlink: 'syz.0.838': attribute type 5 has an invalid length. [ 110.964588][ T5957] netlink: 3 bytes leftover after parsing attributes in process `syz.0.838'. [ 111.333334][ T5969] lo speed is unknown, defaulting to 1000 [ 111.339713][ T5969] lo speed is unknown, defaulting to 1000 [ 111.371345][ T5969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5969 comm=syz.3.842 [ 111.525354][ T5978] lo speed is unknown, defaulting to 1000 [ 111.531563][ T5978] lo speed is unknown, defaulting to 1000 [ 111.593629][ T5983] netlink: 14 bytes leftover after parsing attributes in process `syz.3.846'. [ 111.613065][ T5983] $H (unregistering): Released all slaves [ 111.622821][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.847'. [ 111.647525][ T5987] syz.0.848 (5987): /proc/5986/oom_adj is deprecated, please use /proc/5986/oom_score_adj instead. [ 111.659695][ T5987] futex_wake_op: syz.0.848 tries to shift op by -1; fix this program [ 111.716685][ T5991] netlink: 52 bytes leftover after parsing attributes in process `syz.0.850'. [ 111.952576][ T6000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6000 comm=syz.1.853 [ 111.989863][ T6006] futex_wake_op: syz.1.856 tries to shift op by 144; fix this program [ 111.999588][ T6006] netlink: 'syz.1.856': attribute type 39 has an invalid length. [ 112.179850][ T6026] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 112.193505][ T6026] bond1: entered promiscuous mode [ 112.198593][ T6026] bond1: entered allmulticast mode [ 112.209394][ T6030] netlink: 'syz.0.865': attribute type 30 has an invalid length. [ 112.216572][ T6026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.864'. [ 112.228016][ T6026] bond1: left promiscuous mode [ 112.233123][ T6026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.357145][ T6040] lo speed is unknown, defaulting to 1000 [ 112.364803][ T6040] lo speed is unknown, defaulting to 1000 [ 112.391020][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 112.397582][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.405370][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.419334][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 112.419432][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.419470][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.420353][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.870'. [ 112.429712][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(12) [ 112.429741][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.429806][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.431809][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(15) [ 112.431833][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.431874][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.446951][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 112.446981][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.447028][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.457056][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(19) [ 112.530880][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 112.531058][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.542212][ T6044] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.542577][ T6044] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 112.544510][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(27) [ 112.544582][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.544612][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.545936][ T6044] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(29) [ 112.545963][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 112.546035][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 112.547957][ T6045] vhci_hcd: connection closed [ 112.548087][ T6056] vhci_hcd: connection closed [ 112.548336][ T6052] vhci_hcd: connection closed [ 112.548463][ T6050] vhci_hcd: connection closed [ 112.548553][ T6066] vhci_hcd: connection closed [ 112.553259][ T6064] vhci_hcd: connection closed [ 112.554016][ T6058] vhci_hcd: connection closed [ 112.554119][ T6054] vhci_hcd: connection closed [ 112.554221][ T1885] vhci_hcd: stop threads [ 112.554234][ T1885] vhci_hcd: release socket [ 112.554247][ T1885] vhci_hcd: disconnect device [ 112.554439][ T1885] vhci_hcd: stop threads [ 112.554445][ T1885] vhci_hcd: release socket [ 112.554455][ T1885] vhci_hcd: disconnect device [ 112.559387][ T1885] vhci_hcd: stop threads [ 112.559397][ T1885] vhci_hcd: release socket [ 112.559450][ T1885] vhci_hcd: disconnect device [ 112.560795][ T1885] vhci_hcd: stop threads [ 112.560804][ T1885] vhci_hcd: release socket [ 112.560837][ T1885] vhci_hcd: disconnect device [ 112.565063][ T1885] vhci_hcd: stop threads [ 112.565134][ T1885] vhci_hcd: release socket [ 112.565147][ T1885] vhci_hcd: disconnect device [ 112.566115][ T1885] vhci_hcd: stop threads [ 112.566123][ T1885] vhci_hcd: release socket [ 112.566135][ T1885] vhci_hcd: disconnect device [ 112.566282][ T1885] vhci_hcd: stop threads [ 112.566289][ T1885] vhci_hcd: release socket [ 112.566300][ T1885] vhci_hcd: disconnect device [ 112.566421][ T1885] vhci_hcd: stop threads [ 112.566428][ T1885] vhci_hcd: release socket [ 112.566438][ T1885] vhci_hcd: disconnect device [ 112.600463][ T5363] vhci_hcd: vhci_device speed not set [ 112.745651][ T6078] bond0: (slave dummy0): Releasing backup interface [ 113.699541][ T6122] binfmt_misc: register: failed to install interpreter file ./file2 [ 114.174120][ T6135] __nla_validate_parse: 5 callbacks suppressed [ 114.174136][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.897'. [ 114.564223][ T6148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 114.575426][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 114.575618][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.900'. [ 114.655587][ T6151] lo speed is unknown, defaulting to 1000 [ 114.663042][ T6151] lo speed is unknown, defaulting to 1000 [ 114.728333][ T6161] macsec1: entered promiscuous mode [ 114.733682][ T6161] bridge0: entered promiscuous mode [ 114.744526][ T6161] bridge0: port 1(macsec1) entered blocking state [ 114.751084][ T6161] bridge0: port 1(macsec1) entered disabled state [ 114.757737][ T6161] macsec1: entered allmulticast mode [ 114.763154][ T6161] bridge0: entered allmulticast mode [ 114.769127][ T6161] macsec1: left allmulticast mode [ 114.774289][ T6161] bridge0: left allmulticast mode [ 114.784709][ T6161] bridge0: left promiscuous mode [ 114.815597][ T6166] netlink: 'syz.3.910': attribute type 11 has an invalid length. [ 115.270788][ T36] usb usb10-port1: attempt power cycle [ 115.376960][ T29] kauditd_printk_skb: 1218 callbacks suppressed [ 115.376974][ T29] audit: type=1400 audit(1758237695.543:8051): avc: denied { execmem } for pid=6190 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 115.465297][ T29] audit: type=1400 audit(1758237695.623:8052): avc: denied { prog_load } for pid=6190 comm="syz.0.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.648265][ T29] audit: type=1400 audit(1758237695.813:8053): avc: denied { read write } for pid=3864 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.680970][ T29] audit: type=1400 audit(1758237695.853:8054): avc: denied { prog_load } for pid=6195 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.735873][ T29] audit: type=1400 audit(1758237695.883:8055): avc: denied { create } for pid=6195 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 115.756274][ T29] audit: type=1400 audit(1758237695.893:8056): avc: denied { open } for pid=6195 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 115.775835][ T29] audit: type=1400 audit(1758237695.893:8057): avc: denied { prog_load } for pid=6195 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.795059][ T29] audit: type=1400 audit(1758237695.893:8058): avc: denied { read write } for pid=6195 comm="syz.5.917" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=0 [ 115.818552][ T29] audit: type=1400 audit(1758237695.893:8059): avc: denied { execmem } for pid=6195 comm="syz.5.917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 115.858415][ T29] audit: type=1400 audit(1758237695.993:8060): avc: denied { read write } for pid=6195 comm="syz.5.917" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.936617][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.923'. [ 115.945690][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 116.033125][ T6216] lo speed is unknown, defaulting to 1000 [ 116.039225][ T6216] lo speed is unknown, defaulting to 1000 [ 116.065382][ T6214] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 116.071947][ T6214] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.079509][ T6214] vhci_hcd vhci_hcd.0: Device attached [ 116.128875][ T6217] vhci_hcd: connection closed [ 116.131535][ T37] vhci_hcd: stop threads [ 116.140594][ T37] vhci_hcd: release socket [ 116.145059][ T37] vhci_hcd: disconnect device [ 116.150616][ T6222] ip6gre1: entered allmulticast mode [ 117.015312][ T6253] lo speed is unknown, defaulting to 1000 [ 117.029040][ T6254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=6254 comm=syz.1.935 [ 117.048005][ T6253] lo speed is unknown, defaulting to 1000 [ 117.200700][ T36] usb usb10-port1: unable to enumerate USB device [ 117.225453][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 117.299068][ T6263] lo speed is unknown, defaulting to 1000 [ 117.315373][ T6263] lo speed is unknown, defaulting to 1000 [ 118.316014][ T6289] lo speed is unknown, defaulting to 1000 [ 118.351122][ T6289] lo speed is unknown, defaulting to 1000 [ 118.385288][ T6291] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 118.391855][ T6291] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.399393][ T6291] vhci_hcd vhci_hcd.0: Device attached [ 118.580416][ T3397] vhci_hcd: vhci_device speed not set [ 118.640419][ T3397] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 119.090504][ T6292] vhci_hcd: connection reset by peer [ 119.096665][ T12] vhci_hcd: stop threads [ 119.100966][ T12] vhci_hcd: release socket [ 119.105455][ T12] vhci_hcd: disconnect device [ 119.435190][ T6304] lo speed is unknown, defaulting to 1000 [ 119.460816][ T6304] lo speed is unknown, defaulting to 1000 [ 119.667258][ T6324] serio: Serial port ptm1 [ 119.999010][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 120.008522][ T6329] netlink: 60 bytes leftover after parsing attributes in process `syz.4.957'. [ 120.210104][ T6341] kernel profiling enabled (shift: 17) [ 120.241425][ T6344] lo speed is unknown, defaulting to 1000 [ 120.247574][ T6344] lo speed is unknown, defaulting to 1000 [ 120.351353][ T6351] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 120.359180][ T6351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.966'. [ 120.386343][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 120.386415][ T29] audit: type=1400 audit(1758237700.553:8784): avc: denied { open } for pid=6348 comm="syz.4.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 120.411922][ T29] audit: type=1400 audit(1758237700.563:8785): avc: denied { map_create } for pid=6352 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.431139][ T29] audit: type=1400 audit(1758237700.563:8786): avc: denied { prog_load } for pid=6352 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.450264][ T29] audit: type=1400 audit(1758237700.563:8787): avc: denied { prog_load } for pid=6352 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.465366][ T6356] lo speed is unknown, defaulting to 1000 [ 120.469387][ T29] audit: type=1400 audit(1758237700.563:8788): avc: denied { execmem } for pid=6352 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 120.481059][ T6356] lo speed is unknown, defaulting to 1000 [ 120.497143][ T29] audit: type=1400 audit(1758237700.613:8789): avc: denied { map_create } for pid=6352 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.519176][ T29] audit: type=1400 audit(1758237700.613:8790): avc: denied { prog_load } for pid=6352 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.538289][ T29] audit: type=1400 audit(1758237700.613:8791): avc: denied { prog_load } for pid=6352 comm="syz.3.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.577415][ T29] audit: type=1400 audit(1758237700.713:8792): avc: denied { prog_load } for pid=6357 comm="syz.0.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 120.596797][ T29] audit: type=1326 audit(1758237700.713:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.0.968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9a6eeba9 code=0x7ffc0000 [ 120.723281][ T6371] netlink: 168 bytes leftover after parsing attributes in process `syz.0.973'. [ 120.740589][ T6371] C: renamed from team_slave_0 [ 120.759935][ T6371] can0: slcan on ttyS3. [ 120.850681][ T6371] can0 (unregistered): slcan off ttyS3. [ 121.318161][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.979'. [ 121.327155][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.979'. [ 121.754608][ T6400] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 121.761178][ T6400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 121.768841][ T6400] vhci_hcd vhci_hcd.0: Device attached [ 121.776471][ T6401] vhci_hcd: unknown pdu 2 [ 121.785241][ T3444] vhci_hcd: stop threads [ 121.789544][ T3444] vhci_hcd: release socket [ 121.794044][ T3444] vhci_hcd: disconnect device [ 121.877385][ T6406] pim6reg1: entered promiscuous mode [ 121.960410][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.990'. [ 122.102790][ T6419] netlink: 60 bytes leftover after parsing attributes in process `syz.5.991'. [ 122.738367][ T6439] loop4: detected capacity change from 0 to 512 [ 122.748218][ T6439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.748470][ T6439] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.799220][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.081356][ T6452] netlink: 'syz.3.1001': attribute type 4 has an invalid length. [ 123.096675][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 123.237998][ T6460] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 123.244585][ T6460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 123.252153][ T6460] vhci_hcd vhci_hcd.0: Device attached [ 123.259937][ T6460] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1004'. [ 123.276058][ T6461] vhci_hcd: connection closed [ 123.276320][ T3444] vhci_hcd: stop threads [ 123.285611][ T3444] vhci_hcd: release socket [ 123.290113][ T3444] vhci_hcd: disconnect device [ 123.670486][ T3397] usb 3-1: enqueue for inactive port 0 [ 123.682196][ T3397] usb 3-1: enqueue for inactive port 0 [ 123.790887][ T3397] vhci_hcd: vhci_device speed not set [ 123.810864][ T6471] syzkaller0: entered allmulticast mode [ 123.825308][ T6471] syzkaller0 (unregistering): left allmulticast mode [ 123.918884][ T6476] loop5: detected capacity change from 0 to 1024 [ 123.980971][ T6472] bond0 (unregistering): Released all slaves [ 124.176842][ T6489] lo speed is unknown, defaulting to 1000 [ 124.190860][ T6489] lo speed is unknown, defaulting to 1000 [ 124.235812][ T6495] lo speed is unknown, defaulting to 1000 [ 124.295272][ T6495] lo speed is unknown, defaulting to 1000 [ 124.452378][ T6498] loop4: detected capacity change from 0 to 2048 [ 124.490900][ T6498] loop4: p1 < > p4 [ 124.495923][ T6498] loop4: p4 size 8388608 extends beyond EOD, truncated [ 124.566048][ T6498] syzkaller1: entered promiscuous mode [ 124.571615][ T6498] syzkaller1: entered allmulticast mode [ 125.358463][ T6522] binfmt_misc: register: failed to install interpreter file ./file2 [ 125.401458][ T29] kauditd_printk_skb: 1251 callbacks suppressed [ 125.401474][ T29] audit: type=1326 audit(1758237705.573:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.432730][ T29] audit: type=1326 audit(1758237705.583:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.456293][ T29] audit: type=1326 audit(1758237705.583:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.479865][ T29] audit: type=1326 audit(1758237705.583:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.503604][ T29] audit: type=1326 audit(1758237705.583:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.527226][ T29] audit: type=1326 audit(1758237705.583:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.551038][ T29] audit: type=1326 audit(1758237705.583:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.574625][ T29] audit: type=1326 audit(1758237705.583:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.598332][ T29] audit: type=1326 audit(1758237705.583:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.621854][ T29] audit: type=1326 audit(1758237705.583:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.5.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6558b1eba9 code=0x7ffc0000 [ 125.692118][ T6536] __nla_validate_parse: 5 callbacks suppressed [ 125.692137][ T6536] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1025'. [ 125.856144][ T6546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1028'. [ 125.927470][ T6549] dummy0: entered allmulticast mode [ 125.933070][ T6549] dummy0: left allmulticast mode [ 125.938490][ T6549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6549 comm=syz.0.1029 [ 125.951038][ T6549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6549 comm=syz.0.1029 [ 125.985340][ T6549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1538 sclass=netlink_audit_socket pid=6549 comm=syz.0.1029 [ 126.073668][ T6551] Falling back ldisc for ttyS3. [ 126.130609][ T6556] 9pnet_fd: Insufficient options for proto=fd [ 126.184521][ T6558] netlink: 'syz.0.1033': attribute type 21 has an invalid length. [ 126.704318][ T6575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1038'. [ 127.024315][ T6621] loop5: detected capacity change from 0 to 164 [ 127.035802][ T6621] ISOFS: unable to read i-node block [ 127.041343][ T6621] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 127.085139][ T6628] serio: Serial port ptm1 [ 127.114423][ T6630] SELinux: Context system_u:object is not valid (left unmapped). [ 127.120791][ T6626] infiniband !yz!: set down [ 127.126833][ T6626] infiniband !yz!: added team_slave_0 [ 127.161531][ T6626] RDS/IB: !yz!: added [ 127.165730][ T6626] smc: adding ib device !yz! with port count 1 [ 127.172920][ T6626] smc: ib device !yz! port 1 has pnetid [ 127.692307][ T6653] netlink: 'syz.3.1051': attribute type 10 has an invalid length. [ 127.701796][ T6653] team0: Device hsr_slave_0 failed to register rx_handler [ 127.833704][ T6658] lo speed is unknown, defaulting to 1000 [ 127.840267][ T6658] lo speed is unknown, defaulting to 1000 [ 128.011450][ T6662] futex_wake_op: syz.0.1053 tries to shift op by -1; fix this program [ 128.058219][ T6670] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1055'. [ 128.085978][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 128.117997][ T6670] SELinux: ebitmap: truncated map [ 128.128736][ T6670] SELinux: failed to load policy [ 128.403782][ T6690] loop5: detected capacity change from 0 to 512 [ 128.420089][ T6690] EXT4-fs: Ignoring removed nobh option [ 128.455331][ T6690] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1060: corrupted inode contents [ 128.576789][ T6698] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1061'. [ 128.630739][ T6699] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 128.643822][ T6690] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1060: mark_inode_dirty error [ 128.717580][ T6690] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1060: corrupted inode contents [ 128.736582][ T6690] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1060: mark_inode_dirty error [ 128.748955][ T6690] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1060: Failed to acquire dquot type 0 [ 128.765334][ T6690] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1060: corrupted inode contents [ 128.777703][ T6690] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1060: mark_inode_dirty error [ 128.790287][ T6690] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1060: corrupted inode contents [ 128.803737][ T6690] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1060: mark_inode_dirty error [ 128.817086][ T6690] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1060: corrupted inode contents [ 128.829934][ T6690] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 128.863135][ T6690] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1060: corrupted inode contents [ 128.875614][ T6690] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1060: mark_inode_dirty error [ 128.888280][ T6690] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 128.899806][ T6690] EXT4-fs (loop5): 1 truncate cleaned up [ 128.906436][ T6690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.919161][ T6690] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.934430][ T6690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.991055][ T6686] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1060'. [ 129.120899][ T6728] netlink: 'syz.4.1065': attribute type 10 has an invalid length. [ 129.172019][ T6731] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1066'. [ 129.551548][ T6743] lo speed is unknown, defaulting to 1000 [ 129.573554][ T6743] lo speed is unknown, defaulting to 1000 [ 129.745618][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 129.810491][ T6731] ================================================================== [ 129.818641][ T6731] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 129.828481][ T6731] [ 129.830825][ T6731] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 129.838914][ T6731] tick_do_update_jiffies64+0x113/0x1c0 [ 129.844590][ T6731] tick_nohz_handler+0x7f/0x2d0 [ 129.849475][ T6731] __hrtimer_run_queues+0x20f/0x5a0 [ 129.854699][ T6731] hrtimer_interrupt+0x21a/0x460 [ 129.859651][ T6731] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 129.865572][ T6731] sysvec_apic_timer_interrupt+0x6f/0x80 [ 129.871235][ T6731] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.877249][ T6731] memset_orig+0x36/0xb0 [ 129.881528][ T6731] ____sys_recvmsg+0x59/0x280 [ 129.886238][ T6731] ___sys_recvmsg+0x11f/0x370 [ 129.890997][ T6731] do_recvmmsg+0x1ef/0x540 [ 129.895433][ T6731] __x64_sys_recvmmsg+0xe5/0x170 [ 129.900393][ T6731] x64_sys_call+0x27a6/0x2ff0 [ 129.905089][ T6731] do_syscall_64+0xd2/0x200 [ 129.909629][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.915548][ T6731] [ 129.917888][ T6731] read to 0xffffffff868099c0 of 8 bytes by task 6731 on cpu 1: [ 129.925437][ T6731] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 129.931708][ T6731] count_shadow_nodes+0x6a/0x230 [ 129.936665][ T6731] do_shrink_slab+0x60/0x680 [ 129.941296][ T6731] shrink_slab+0x448/0x760 [ 129.945738][ T6731] shrink_node+0x6c3/0x2120 [ 129.950271][ T6731] do_try_to_free_pages+0x3f6/0xcd0 [ 129.955499][ T6731] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 129.961425][ T6731] try_charge_memcg+0x358/0x9e0 [ 129.966300][ T6731] obj_cgroup_charge_pages+0xa6/0x150 [ 129.971704][ T6731] __memcg_kmem_charge_page+0x9f/0x170 [ 129.977201][ T6731] __alloc_frozen_pages_noprof+0x188/0x360 [ 129.983034][ T6731] alloc_pages_mpol+0xb3/0x250 [ 129.987864][ T6731] alloc_pages_noprof+0x90/0x130 [ 129.992849][ T6731] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 129.998725][ T6731] __kvmalloc_node_noprof+0x30f/0x4e0 [ 130.004128][ T6731] ip_set_alloc+0x1f/0x30 [ 130.008475][ T6731] hash_netiface_create+0x282/0x740 [ 130.013697][ T6731] ip_set_create+0x3c9/0x960 [ 130.018315][ T6731] nfnetlink_rcv_msg+0x4c3/0x590 [ 130.023310][ T6731] netlink_rcv_skb+0x123/0x220 [ 130.028110][ T6731] nfnetlink_rcv+0x16b/0x1690 [ 130.032807][ T6731] netlink_unicast+0x5bd/0x690 [ 130.037599][ T6731] netlink_sendmsg+0x58b/0x6b0 [ 130.042392][ T6731] __sock_sendmsg+0x145/0x180 [ 130.047104][ T6731] ____sys_sendmsg+0x31e/0x4e0 [ 130.051901][ T6731] ___sys_sendmsg+0x17b/0x1d0 [ 130.056604][ T6731] __x64_sys_sendmsg+0xd4/0x160 [ 130.061477][ T6731] x64_sys_call+0x191e/0x2ff0 [ 130.066185][ T6731] do_syscall_64+0xd2/0x200 [ 130.070738][ T6731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.076657][ T6731] [ 130.078987][ T6731] value changed: 0x00000000ffffbd55 -> 0x00000000ffffbd56 [ 130.086118][ T6731] [ 130.088451][ T6731] Reported by Kernel Concurrency Sanitizer on: [ 130.094619][ T6731] CPU: 1 UID: 0 PID: 6731 Comm: syz.5.1066 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.104354][ T6731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.114421][ T6731] ================================================================== [ 130.514889][ T6724] loop5: detected capacity change from 0 to 2048 [ 130.557714][ T6724] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.1066: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 130.609700][ T6724] EXT4-fs (loop5): get root inode failed [ 130.615516][ T6724] EXT4-fs (loop5): mount failed [ 130.891735][ T6731] syz.5.1066 (6731) used greatest stack depth: 6392 bytes left